Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-12-23 ⋅ Sentinel LABS ⋅ James Haughom, Jim Walter, Marco Figueroa
SolarWinds | Understanding & Detecting the SUPERNOVA Webshell Trojan
SUPERNOVA
2020-12-23 ⋅ 0xC0DECAFE ⋅ Thomas Barabosch
Detect RC4 in (malicious) binaries
SmokeLoader Zloader
2020-12-23 ⋅ Stranded on Pylos Blog ⋅ Joe Slowik
Mindmap on Russia-linked threat groups
2020-12-23 ⋅ FBI ⋅ FBI
Iranian Cyber Actors Responsible for Website Threatening U.S. Election Officials
2020-12-23 ⋅ Group-IB ⋅ Viktor Okorokov
New attacks by UltraRank group
2020-12-23 ⋅ The Washington Post ⋅ Aaron C. Davis, Amy Gardner, Ellen Nakashima
FBI links Iran to online hit list targeting top officials who’ve refuted Trump’s election fraud claims
2020-12-23 ⋅ ⋅ Qianxin ⋅ Qi AnXin CERT
从Solarwinds供应链攻击（金链熊）看APT行动中的隐蔽作战
SUNBURST
2020-12-22 ⋅ Maple Bacon CTF Team at the University of British Columbia ⋅ Arctic Wyvern
[TrendMicro CTF 2020 Finals] Wildcard-2: Yara exfiltration
2020-12-22 ⋅ Prevasio ⋅ Sergei Shevchenko
Sunburst Backdoor, Part III: DGA & Security Software (Broken Link)
SUNBURST
2020-12-22 ⋅ ⋅ TEAMT5 ⋅ TeamT5
macOS 用戶當心！北韓駭客 Lazarus 將目標瞄準虛擬貨幣交易用戶
2020-12-22 ⋅ Zscaler ⋅ Zscaler
The Hitchhiker’s Guide to SolarWinds Incident Response
SUNBURST
2020-12-22 ⋅ TRUESEC ⋅ Mattias Wåhlén
Collaboration between FIN7 and the RYUK group, a Truesec Investigation
Carbanak Cobalt Strike Ryuk
2020-12-22 ⋅ FBI ⋅ FBI
PIN Number 20201222-001: Advanced Persistent Threat Actors Leverage SolarWinds Vulnerabilities
SUNBURST
2020-12-22 ⋅ Youtube (Colin Hardy) ⋅ Colin Hardy
SUNBURST SolarWinds RECON - Malware Reverse Engineering, OSINT and Identifying Victims
SUNBURST
2020-12-22 ⋅ Medium mitre-attack ⋅ Adam Pennington, Matt Malone
Identifying UNC2452-Related Techniques for ATT&CK
SUNBURST TEARDROP UNC2452
2020-12-22 ⋅ Bleeping Computer ⋅ Sergiu Gatlan
Biden blasts Trump administration over SolarWinds attack response
2020-12-22 ⋅ Microsoft ⋅ Alex Weinert
Azure AD workbook to help you assess Solorigate risk
SUNBURST
2020-12-22 ⋅ CrowdStrike ⋅ Jai Minton
Leftover Lunch: Finding, Hunting and Eradicating Spicy Hot Pot, a Persistent Browser Hijacking Rootkit
Spicy Hot Pot
2020-12-22 ⋅ Symantec ⋅ Threat Hunter Team
SolarWinds Attacks: Stealthy Attackers Attempted To Evade Detection
SUNBURST
2020-12-22 ⋅ Checkpoint ⋅ Check Point Research
SUNBURST, TEARDROP and the NetSec New Normal
SUNBURST TEARDROP