Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-07-06 ⋅ Sansec ⋅ Sansec Threat Research Team
North Korean hackers implicated in stealing from US and European shoppers
magecart
2020-06-15 ⋅ Sansec ⋅ Sansec Threat Research Team
Magecart strikes amid Corona lockdown
magecart
2020-03-23 ⋅ SANS ISC ⋅ Didier Stevens
KPOT Deployed via AutoIt Script
KPOT Stealer
2020-02-03 ⋅ SANS ISC ⋅ Jan Kopriva
Analysis of a triple-encrypted AZORult downloader
Azorult
2020-01-23 ⋅ SANS ISC InfoSec Forums ⋅ Brad Duncan
German language malspam pushes Ursnif
ISFB
2019-11-22 ⋅ SANS Cyber Security Summit ⋅ Rachel Mullan, Sveva Vittoria Scenarelli
Need for PLEAD: BlackTech Pursuit
BLUETHER PLEAD
2019-07-08 ⋅ SANS ⋅ Josh M. Bryant, Robert Falcone
Hunting Webshells: Tracking TwoFace
TwoFace
2019-06-25 ⋅ SANS ⋅ Brad Duncan
Rig Exploit Kit sends Pitou.B Trojan
Pitou
2019-05-07 ⋅ SANS ISC InfoSec Forums ⋅ Renato
Vulnerable Apache Jenkins exploited in the wild
kerberods
2019-04-22 ⋅ SANS ⋅ Mike Downey
Unpacking & Decrypting FlawedAmmyy
FlawedAmmyy
2019-04-08 ⋅ SANS Cyber Security Summit ⋅ Taha Karim
Trails of WindShift
WindTail ZhMimikatz
2019-02-20 ⋅ SANS ISC InfoSec Forums ⋅ Brad Duncan
More Russian language malspam pushing Shade (Troldesh) ransomware
Troldesh
2019-02-13 ⋅ Youtube (SANS Digital Forensics & Incident Response) ⋅ Josh Bryant, Robert Falcone
Hunting Webshells: Tracking TwoFace - SANS Threat Hunting Summit 2018
TwoFace
2019-01-17 ⋅ SANS ISC InfoSec Forums ⋅ Brad Duncan
Emotet infections and follow-up malware
Emotet
2018-10-01 ⋅ SANS Cyber Summit ⋅ Andrea Carcano
TRITON: How it Disrupted Safety Systems and Changed the Threat Landscape of Industrial Control Systems, Forever
Triton
2018-01-17 ⋅ SANS ISC ⋅ brad
Reviewing the spam filters: Malspam pushing Gozi-ISFB
ISFB
2017-06-27 ⋅ SANS ⋅ Brad Duncan
Checking out the new Petya variant
EternalPetya
2017-06-22 ⋅ SANS Institute Information Security Reading Room ⋅ Rob Pantazopoulos
Loki-Bot: InformationStealer, Keylogger, &More!
Loki Password Stealer (PWS)
2017-01-31 ⋅ SANS ISC InfoSec Forums ⋅ Johannes
Malicious Office files using fileless UAC bypass to drop KEYBASE malware
KeyBase
2017-01-21 ⋅ SANS ISC InfoSec Forums ⋅ Brad Duncan
Sage 2.0 Ransomware
SAGE
2016-03-04 ⋅ SANS ⋅ David Martin
Tracing the Lineage of DarkSeoul
httpdropper
2016-01-22 ⋅ SANS ⋅ Nell Nelson
The Impact of Dragonfly Malware on Industrial Control Systems
ENERGETIC BEAR
2015-12-30 ⋅ SANS ⋅ Michael J. Assante
Current Reporting on the Cyber Attack in Ukraine Resulting in Power Outage
Sandworm
2012-04-16 ⋅ SANS ⋅ Rong Hwa Chong
Detailed Analysis Of Sykipot (Smartcard Proxy Variant)
APT4
2011-10-14 ⋅ SANS ⋅ Frankie Fu Kay Li
A Detailed Analysis of an Advanced Persistent Threat Malware
ProjectWood
2010-06-15 ⋅ SANS ⋅ Harshit Nayyar
Clash of the Titans: ZeuS v SpyEye
SpyEye
2010-05-27 ⋅ SANS ISC InfoSec Forums ⋅ Kevin Liston
Sasfis Propagation
Sasfis
2004-04-15 ⋅ SANS GIAC ⋅ Matt Goldencrown
MyDoom is Your Doom: An Analysis of the MyDoom Virus
MyDoom