Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-05-07 ⋅ Group-IB ⋅ Oleg Skulkin, Semyon Rogachev
Connecting the Bots Hancitor fuels Cuba Ransomware Operations
Cuba Hancitor
2021-05-06 ⋅ Intrusiontruth ⋅ Intrusiontruth
An APT with no name
BRONZE SPRING
2021-05-06 ⋅ Twitter (@MrDanPerez) ⋅ Dan Perez
Tweet on UNC302 / oro0lxy using ColdFusion
BRONZE SPRING
2021-05-06 ⋅ Trend Micro ⋅ Arianne Dela Cruz, Cris Tomboc, Jayson Chong, Nikki Madayag, Sean Torre
Proxylogon: A Coinminer, a Ransomware, and a Botnet Join the Party
BlackKingdom Ransomware CHINACHOPPER Lemon Duck Prometei
2021-05-06 ⋅ Black Hat ⋅ Anurag Khanna, Thirumalai Natarajan Muthiah
Threat Hunting in Active Directory Environment
2021-05-06 ⋅ Tencent ⋅ Junyu Zhou, Tianze Ding
Domain Borrowing: Catch My C2 Traffic if You Can
2021-05-06 ⋅ Tencent ⋅ Junyu Zhou, Tianze Ding
Domain Borrowing: Catch My C2 Traffic if You Can
2021-05-06 ⋅ Black Hat ⋅ Christian Doerr, Tsuyoshi Taniguchi
How Did the Adversaries Abusing Bitcoin Blockchain Evade Our Takeover
Cerber Pony
2021-05-06 ⋅ Group-IB ⋅ Viktor Okorokov
GrelosGTM group abuses Google Tag Manager to attack e-commerce websites
2021-05-06 ⋅ Sophos Labs ⋅ Bill Kearney, Kyle Link, Matthew Sharf, Peter Mackenzie, Tilly Travers
MTR in Real Time: Pirates pave way for Ryuk ransomware
Ryuk
2021-05-06 ⋅ Chuongdong blog ⋅ Chuong Dong
Darkside Ransomware
DarkSide
2021-05-06 ⋅ Chuongdong blog ⋅ Chuong Dong
Darkside Ransomware
DarkSide
2021-05-06 ⋅ Facebook ⋅ Facebook
April 2021 Coordinated Inauthentic Behavior Report
2021-05-06 ⋅ Cyborg Security ⋅ Brandon Denker
Ransomware: Hunting for Inhibiting System Backup or Recovery
Avaddon Conti DarkSide LockBit Mailto Maze Mespinoza Nemty PwndLocker RagnarLocker RansomEXX REvil Ryuk Snatch ThunderX
2021-05-06 ⋅ Twitter (@SyscallE) ⋅ NtUnmapViewOfSection
Tweet on short analysis of Nebulae Backdoor
Nebulae
2021-05-06 ⋅ Blackberry ⋅ BlackBerry Research and Intelligence team
Threat Thursday: Dr. REvil Ransomware Strikes Again, Employs Double Extortion Tactics
REvil
2021-05-06 ⋅ CISA ⋅ CISA
MAR-10324784-1.v1: FiveHands Ransomware
FiveHands
2021-05-06 ⋅ CISA ⋅ CISA
Analysis Report: FiveHands Ransomware
FiveHands
2021-05-06 ⋅ Intrusiontruth ⋅ Intrusiontruth
An APT with no name
2021-05-06 ⋅ The Finnish Defense Forces ⋅ The Finnish Defense Forces
Finnish Military Intelligence Review 2021