Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2018-06-06 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
Sofacy Group’s Parallel Attacks
Koadic Zebrocy
2018-06-06 ⋅ Check Point ⋅ Check Point Research
Banking Trojans Under Development
Karius
2018-06-02 ⋅ ⋅ Freebuf ⋅ 安全豹
"Hidden Bee" strikes: Kingsoft Internet Security intercepts the world's first bootkit-level mining botnet (Part 1)
Hidden Bee
2018-06-01 ⋅ ThreatFabric ⋅ ThreatFabric
MysteryBot; a new Android banking Trojan ready for Android 7 and 8
MysteryBot
2018-05-31 ⋅ Lastline ⋅ Andy Norton, David Wells, Luukas Larinkoski, Stefano Ortolani
APT28 Rollercoaster: The Lowdown on Hijacked Lo
2018-05-31 ⋅ Cisco Talos ⋅ Jungsoo An, Paul Rascagnères, Warren Mercer
NavRAT Uses US-North Korea Summit As Decoy For Attacks In South Korea
NavRAT
2018-05-31 ⋅ Proofpoint ⋅ Proofpoint Staff
DanaBot - A new banking Trojan surfaces Down Under
DanaBot
2018-05-29 ⋅ Twitter (@malwrhunterteam) ⋅ MalwareHunterTeam
Tweet on Aurora / OneKeyLocker Ransomware
Aurora
2018-05-29 ⋅ US-CERT ⋅ US-CERT
Alert (TA18-149A): HIDDEN COBRA – Joanap Backdoor Trojan and Brambul Server Message Block Worm
Brambul Joanap
2018-05-29 ⋅ Bloomberg ⋅ Michelle Davis
Mexico Foiled a $110 Million Bank Heist, Then Kept It a Secret
Lazarus Group
2018-05-29 ⋅ Group-IB ⋅ Rustam Mirkasymov
Cobalt Renaissance: new attacks and joint operations
CobInt
2018-05-28 ⋅ Github (valsov) ⋅ valsov
BackNet
BackNet
2018-05-25 ⋅ 360 ⋅ 360 Helios Team
Analysis of CVE-2018-8174 VBScript 0day and APT actor related to Office targeted attack
Retro
2018-05-25 ⋅ ESET Research ⋅ Michal Poslušný
BackSwap malware finds innovative ways to empty bank accounts
BackSwap
2018-05-24 ⋅ Kaspersky Labs ⋅ GReAT
VPNFilter EXIF to C2 mechanism analysed
VPNFilter
2018-05-23 ⋅ Cisco Talos ⋅ Cisco Talos
New VPNFilter malware targets at least 500K networking devices worldwide
VPNFilter
2018-05-23 ⋅ Department of Justice ⋅ Office of Public Affairs
Justice Department Announces Actions to Disrupt Advanced Persistent Threat 28 Botnet of Infected Routers and Network Storage Devices
VPNFilter APT28
2018-05-22 ⋅ Github (TKCERT) ⋅ thyssenkrupp CERT
Nmap Script to scan for Winnti infections
Winnti
2018-05-22 ⋅ Group-IB ⋅ Fox-IT, Group-IB
Anunak: APT against financial institutions
FIN7
2018-05-21 ⋅ Github (creaktive) ⋅ creaktive
Tiny SHell
tsh