Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-07-01 ⋅ Trend Micro ⋅ William Gamazo Sanchez
PurpleFox Using WPAD to Target Indonesian Users
PurpleFox
2021-06-30 ⋅ Sophos SecOps ⋅ Tilly Travers
What to expect when you’ve been hit with REvil ransomware
REvil
2021-06-30 ⋅ Cynet ⋅ Max Malyutin
Shelob Moonlight – Spinning a Larger Web From IcedID to CONTI, a Trojan and Ransomware collaboration
Conti IcedID
2021-06-30 ⋅ synthesis.to blog ⋅ Tim Blazytko
Automation in Reverse Engineering: String Decryption
Mirai
2021-06-30 ⋅ BleepingComputer ⋅ Lawrence Abrams
Leaked Babuk Locker ransomware builder used in new attacks
Babuk
2021-06-30 ⋅ The Record ⋅ Catalin Cimpanu
Gozi malware gang member arrested in Colombia
Gozi ISFB
2021-06-30 ⋅ RiskIQ ⋅ Jennifer Grob, Jordan Herman
Bulletproof Hosting Services: Investigating Media Land LLC
2021-06-30 ⋅ Guardicore ⋅ Liad Mordekoviz, Ophir Harpaz
SMB Worm “Indexsinas” Uses Lateral Movement to Infect Whole Networks
2021-06-30 ⋅ Group-IB ⋅ Oleg Skulkin
REvil Twins Deep Dive into Prolific RaaS Affiliates' TTPs
Cobalt Strike REvil
2021-06-30 ⋅ Sophos ⋅ Tilly Travers
MTR in Real Time: Hand-to-hand combat with REvil ransomware chasing a $2.5 million pay day
REvil
2021-06-30 ⋅ Advanced Intelligence ⋅ AdvIntel Security & Development Team, Brandon Rudisel, Yelisey Boguslavskiy
Ransomware-&-CVE: Industry Insights Into Exclusive High-Value Target Adversarial Datasets
BlackKingdom Ransomware Clop dearcry Hades REvil
2021-06-29 ⋅ Yoroi ⋅ Yoroi
The "WayBack” Campaign: a Large Scale Operation Hiding in Plain Sight
2021-06-29 ⋅ Twitter (@IntezerLabs) ⋅ Intezer
Tweet on unknown elf backdoor based on an open source remote shell named "amcsh"
BioSet
2021-06-29 ⋅ Medium hidocohen ⋅ Hido Cohen
GuLoader’s Anti-Analysis Techniques
CloudEyE
2021-06-29 ⋅ Facebook ⋅ Jessica Romero
Combating E-Commerce Scams and Account Takeover Attacks
2021-06-29 ⋅ Netskope ⋅ Ghanashyam Satpathy, Jenko Hwong
Not Laughing: Malicious Office Documents using LoLBins
2021-06-29 ⋅ Medium MITRE-Engenuity ⋅ Jon Baker, Nicholas Amon
Security Control Mappings: A Starting Point for Threat-Informed Defense
2021-06-29 ⋅ Twitter (@sisoma2) ⋅ sisoma2
Tweet on vidar stealer using Tumblr to obtain dynamic config
Vidar
2021-06-29 ⋅ Accenture ⋅ Accenture Security
HADES ransomware operators continue attacks
Cobalt Strike Hades MimiKatz
2021-06-29 ⋅ The Record ⋅ Catalin Cimpanu
Free decrypter available for Lorenz ransomware
Lorenz