Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2025-09-07 ⋅ Hexastrike Cybersecurity ⋅ Maurice Fielenbach
ValleyRAT Exploiting BYOVD to Kill Endpoint Security
ValleyRAT
2025-09-05 ⋅ GitGuardian ⋅ Gaetan Ferry
The GhostAction Campaign: 3,325 Secrets Stolen Through Compromised GitHub Workflows
GhostAction
2025-09-05 ⋅ Arctic Wolf ⋅ Dmitry Kupin, Dmitry Melikov, Jacob Faires, Jon Grimm, Pavel Usatenko
GPUGate Malware: Malicious GitHub Desktop Implants Use Hardware-Specific Decryption, Abuse Google Ads to Target Western Europe
2025-09-05 ⋅ Kroll ⋅ Dave Truman, Marc Messer
FANCY BEAR GONEPOSTAL – Espionage Tool Provides Backdoor Access to Microsoft Outlook
GONEPOSTAL
2025-09-04 ⋅ ESET Research ⋅ Fernando Tavella
GhostRedirector poisons Windows servers: Backdoors with a side of Potatoes
GoToHTTP GhostRedirector
2025-09-04 ⋅ Seqrite ⋅ Sathwik Ram Prakki, Subhajeet Singha
Operation BarrelFire: NoisyBear targets entities linked to Kazakhstan’s Oil & Gas Sector.
Meterpreter
2025-09-04 ⋅ Recorded Future ⋅ Insikt Group
From CastleLoader to CastleRAT: TAG-150 Advances Operations with Multi-Tiered Infrastructure
NightshadeC2 GrayBravo
2025-09-04 ⋅ SentinelOne ⋅ Aleksandar Milenkoski, Kenneth Kinion, Sreekar Madabushi
Contagious Interview | North Korean Threat Actors Reveal Plans and Ops by Abusing Cyber Intel Platforms
ContagiousDrop Contagious Interview
2025-09-04 ⋅ The Register ⋅ Iain Thomson
US puts $10M bounty on three Russians accused of attacking critical infrastructure
2025-09-03 ⋅ Proofpoint ⋅ Kyle Cucci, Proofpoint Threat Research Team, Rob Kinner
Not Safe for Work: Tracking and Investigating Stealerium and Phantom Infostealers
Phantom Stealer Stealerium
2025-09-03 ⋅ Recorded Future ⋅ Insikt Group
Russian Influence Assets Converge on Moldovan Elections
Storm-1516
2025-09-03 ⋅ Darkrym ⋅ Darkrym
PXA Stealers Evolution to PureRAT: Part 6 - Finally, the Final Stage PureRAT (Stage 9)
PureRAT
2025-09-01 ⋅ Fox-IT ⋅ Mick Koomen, Yun Zheng Hu
Three Lazarus RATs coming for your cheese
SimpleTea POOLRAT ThemeForestRAT
2025-09-01 ⋅ cocomelonc ⋅ cocomelonc
MacOS hacking part 11: bind shell for ARM (M1). Simple Assembly (M1) and C (run shellcode) examples
2025-08-31 ⋅ Darkrym ⋅ Darkrym
PXA Stealers Evolution to PureRAT: Part 3 - Weaponised Python Stage (Stage 5)
PXA Stealer
2025-08-28 ⋅ cocomelonc ⋅ cocomelonc
Malware development trick 51: steal data via legit Bitbucket API. Simple C example.
2025-08-28 ⋅ Gdata ⋅ Karsten Hahn, Louis Sorita
AppSuite PDF Editor Backdoor: A Detailed Technical Analysis
TamperedChef
2025-08-28 ⋅ Trend Micro ⋅ Nick Dai, Pierre Lee
TAOTH Campaign Exploits End-of-Support Software to Target Traditional Chinese Users and Dissidents
Cobalt Strike Merlin
2025-08-28 ⋅ Checkpoint ⋅ Checkpoint Research
Chasing the Silver Fox: Cat & Mouse in Kernel Shadows
ValleyRAT
2025-08-28 ⋅ Aryaka Networks ⋅ bikash dash, varadharajan krishnasamy
Vidar Infostealer in Action From API Hooking to Covert Data Exfiltration
Vidar