Click here to download all references as Bib-File.•
| 2024-03-04
⋅
Proofpoint
⋅
TA577’s Unusual Attack Chain Leads to NTLM Data Theft |
| 2024-03-04
⋅
⋅
Weixin
⋅
Shadow Hunting: Analysis of APT37’s attack activities against South Korea using North Korean political topics RokRAT |
| 2024-03-03
⋅
OALabs
⋅
GitHub Bug Used to Infect Game Hackers With Lua Malware SmartLoader |
| 2024-02-29
⋅
Vipyr Security
⋅
Novel ELF64 Remote Access Tool Embedded in Malicious PyPI Uploads SimpleTea |
| 2024-02-29
⋅
CrowdStrike
⋅
The Anatomy of an ALPHA SPIDER Ransomware Attack BlackCat Alpha Spider |
| 2024-02-29
⋅
StrikeReady
⋅
Don't get BITTER about being targeted -- fight back with the help of the community. Bitter RAT |
| 2024-02-28
⋅
eSentire
⋅
XRed Backdoor: The Hidden Threat in Trojanized Programs XRed |
| 2024-02-28
⋅
EchoCTI
⋅
Raccoon Stealer V2.0 Technical Analysis Raccoon |
| 2024-02-27
⋅
Mandiant
⋅
Cutting Edge, Part 3: Investigating Ivanti Connect Secure VPN Exploitation and Persistence Attempts BUSHWALK Kubo Injector PITFUEL PITHOOK PITSOCK |
| 2024-02-27
⋅
Cisco Talos
⋅
TimbreStealer campaign targets Mexican users with financial lures TimbreStealer |
| 2024-02-27
⋅
Mandiant
⋅
When Cats Fly: Suspected Iranian Threat Actor UNC1549 Targets Israeli and Middle East Aerospace and Defense Sectors LIGHTRAIL MINIBIKE MINIBUS UNC1549 |
| 2024-02-27
⋅
Doubleagent.net
⋅
GTPDOOR - A novel backdoor tailored for covert access over the roaming exchange GTPDOOR |
| 2024-02-27
⋅
US Department of Defense
⋅
Russian Cyber Actors Use Compromised Routers to Facilitate Cyber Operations MooBot |
| 2024-02-26
⋅
SOC Prime
⋅
UAC-0149 Attack Detection: Hackers Launch a Targeted Attack Against the Armed Forces of Ukraine, as CERT-UA Reports COOKBOX UAC-0149 |
| 2024-02-26
⋅
Twitter (@embee_research)
⋅
Advanced CyberChef Techniques for Configuration Extraction - Detailed Walkthrough and Examples NetSupportManager RAT |
| 2024-02-26
⋅
NCSC UK
⋅
SVR cyber actors adapt tactics for initial cloud access |
| 2024-02-25
⋅
YouTube (Embee Research)
⋅
My Longest CyberChef Recipe Ever - 22 Operation Configuration Extractor NetSupportManager RAT |
| 2024-02-24
⋅
Cert-UA
⋅
UAC-0149: Targeted selective attacks against the Defense Forces of Ukraine using COOKBOX (CETRT-UA#9204) COOKBOX UAC-0149 |
| 2024-02-23
⋅
Cyfirma
⋅
Xeno RAT: A New Remote Access Trojan with Advance Capabilities XenoRAT |
| 2024-02-21
⋅
YouTube (SentinelOne)
⋅
LABSCon23 Replay | Chasing Shadows | The rise of a prolific espionage actor 9002 RAT PlugX ShadowPad Spyder Earth Lusca |