Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2025-11-13 ⋅ Push Security ⋅ Dan Green
Analyzing "Scattered Lapsus$ Hunters" breaches since 2021
Scattered Lapsus Hunters
2025-11-13 ⋅ Trend Micro ⋅ Junestherry Dela Cruz, Sarah Pearl Camiling
Increase in Lumma Stealer Activity Coincides with Use of Adaptive Browser Fingerprinting Tactics
Lumma Stealer Water Kurita
2025-11-13 ⋅ Ransom-ISAC ⋅ Yashraj Solanki
Cross-Chain TxDataHiding Crypto Heist: A Very Chainful Process (Part 3)
JADESNOW
2025-11-13 ⋅ Politie NL ⋅ Politie NL
Again criminal infrastructure dismantled in international ransomware operation
Rhadamanthys Venom RAT
2025-11-13 ⋅ NVISO Labs ⋅ Bart Parys, Efstratios Lontzetidis, Stef Collart
Contagious Interview Actors Now Utilize JSON Storage Services for Malware Delivery
BeaverTail OtterCookie InvisibleFerret Beavertail TsunamiKit
2025-11-13 ⋅ Anthropic ⋅ Anthropic
Disrupting the first reported AI-orchestrated cyber espionage campaign
GTG-1002
2025-11-13 ⋅ Israel National Digital Agency ⋅ Adi Pick, Hila David, Idan Beit-Yosef, Shimi Cohen, Yaniv Goldman
SpearSpecter: Unmasking Iran’s IRGC Cyber Operations Targeting High-Profile Individuals
TAMECAT
2025-11-12 ⋅ ISC ⋅ Brad Duncan
SmartApeSG campaign uses ClickFix page to push NetSupport RAT
SmartApeSG NetSupportManager RAT
2025-11-12 ⋅ Amazon ⋅ CJ Moses
Amazon discovers APT exploiting Cisco and Citrix zero-days
2025-11-11 ⋅ Botcrawl ⋅ Sean Doyle
National Civil Service Commission of Colombia Data Breach Exposes 2.9 TB of Government Files
Kazu
2025-11-10 ⋅ Mandiant ⋅ Bill Glynn, Kevin O'Flynn, Praveeth DSouza, Stallone D'Souza, Yash Gupta
No Place Like Localhost: Unauthenticated Remote Access via Triofox Vulnerability CVE-2025-12480
UNC6485
2025-11-10 ⋅ Genians ⋅ Genians
State-Sponsored Remote Wipe Tactics Targeting Android Devices
Quasar RAT Remcos
2025-11-07 ⋅ ENKI ⋅ ENKI
Lazarus Group targets Aerospace and Defense with new Comebacker variant
ComeBacker
2025-11-07 ⋅ Unit 42
LANDFALL: New Commercial-Grade Android Spyware in Exploit Chain Targeting Samsung Devices
LANDFALL
2025-11-05 ⋅ ESET Research ⋅ ESET Research
ESET APT Activity Report (April 2025 – September 2025): Russia-Aligned APTs Ramp Up Attacks Against Ukraine and Its Strategic Partners
BACKORDER BloodAlchemy ImprudentCook RokRAT ScoringMathTea
2025-11-05 ⋅ Google ⋅ Google Threat Intelligence Group
GTIG AI Threat Tracker: Advances in Threat Actor Usage of AI Tools
PromptLock UNC1069
2025-11-05 ⋅ Huntress Labs ⋅ Anna Pham
Gootloader Returns: What Goodies Did They Bring?
GootLoader MeowBackConn Supper
2025-11-05 ⋅ KrebsOnSecurity ⋅ Brian Krebs
Cloudflare Scrubs Aisuru Botnet from Top Domains List
Aisuru
2025-11-05 ⋅ nviso ⋅ Maxime Thiebaut
Decoding VShell: Insights into a Chinese-Language Cyber Espionage Tool
VShell
2025-11-04 ⋅ LevelBlue ⋅ Serhii Melnyk
Scattered LAPSUS$ Hunters: Anatomy of a Federated Cybercriminal Brand
Scattered Lapsus Hunters