Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-05-12 ⋅ Kaspersky ⋅ Dmitry Galov, Ivan Kwiatkowski, Leonid Bezvershenko
Ransomware world in 2021: who, how and why
Babuk REvil
2021-05-12 ⋅ The Record ⋅ Catalin Cimpanu
Agents raid home of Kansas man seeking info on botnet that infected DOD network
PerlBot
2021-05-12 ⋅ The DFIR Report
Conti Ransomware
Cobalt Strike Conti IcedID
2021-05-12 ⋅ McAfee ⋅ McAfee ATR
Technical Analysis of Access Token Theft and Manipulation
2021-05-11 ⋅ Mandiant ⋅ Alyssa Rahman, Andrew Moore, Brendan McKeague, Jared Wilson, Jeremy Kennelly, Jordan Nuce, Kimberly Goody, Matt Williams
Shining a Light on DARKSIDE Ransomware Operations
DarkSide DarkSide UNC2465
2021-05-11 ⋅ ⋅ Qianxin ⋅ Red Raindrop Team
Analysis of a series of attacks by the suspected Lazarus organization using Daewoo Shipyard as relevant bait
BISTROMATH TigerLite
2021-05-11 ⋅ VMRay ⋅ Mateusz Lukaszewski, VMRay Labs Team
Threat Bulletin: Exploring the Differences and Similarities of Agent Tesla v2 & v3
Agent Tesla
2021-05-11 ⋅ Mal-Eats ⋅ mal_eats
Campo, a New Attack Campaign Targeting Japan
AnchorDNS BazarBackdoor campoloader Cobalt Strike Phobos Snifula TrickBot Zloader
2021-05-11 ⋅ Recorded Future ⋅ Insikt Group®
The Business of Fraud: Drops and Mules
2021-05-11 ⋅ kienmanowar Blog ⋅ m4n0w4r
Quick analysis note about DealPly (Adware)
DealPly
2021-05-11 ⋅ FireEye ⋅ Alyssa Rahman, Andrew Moore, Brendan McKeague, Jared Wilson, Jeremy Kennelly, Jordan Nuce, Kimberly Goody
Shining a Light on DARKSIDE Ransomware Operations
Cobalt Strike DarkSide
2021-05-11 ⋅ CrowdStrike ⋅ The Falcon Complete Team
Response When Minutes Matter: Rising Up Against Ransomware
TinyMet
2021-05-11 ⋅ Twitter (@xuy1202) ⋅ YANG XU
Tweet on necro's new DGA
N3Cr0m0rPh
2021-05-11 ⋅ splunk ⋅ James Brodsky
The DarkSide of the Ransomware Pipeline
DarkSide
2021-05-11 ⋅ nviso ⋅ Jeroen Beckers
Android overlay attacks on Belgian financial applications
Anatsa
2021-05-11 ⋅ The Record ⋅ Catalin Cimpanu
15% of 2020 ransomware payments carried a sanctions violations risk
2021-05-11 ⋅ The Record ⋅ Catalin Cimpanu
Osiris banking trojan shuts down as new Ares variant emerges
Kronos
2021-05-11 ⋅ Flashpoint ⋅ Flashpoint
DarkSide Ransomware Links to REvil Group Difficult to Dismiss
DarkSide REvil
2021-05-11 ⋅ Dragos ⋅ Mike Hoffman, Tom Winston
Recommendations Following the Colonial Pipeline Cyber Attack
DarkSide
2021-05-11 ⋅ tisiphone.net blog ⋅ Lesley Carhart
Reasonable IR Team Expectations