Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-05-02 ⋅ Cisco Talos ⋅ JAIME FILSON, Kendall McKay, Paul Eubanks
Conti and Hive ransomware operations: Leveraging victim chats for insights
Cobalt Strike Conti Hive
2022-04-14 ⋅ Cisco Talos ⋅ Edmund Brumaghin, Vanja Svajcer
"Haskers Gang" Introduces New ZingoStealer
Ginzo Stealer ZingoStealer
2022-04-14 ⋅ Cisco Talos ⋅ Edmund Brumaghin, Michael Chen, Vanja Svajcer
Threat Spotlight: "Haskers Gang" Introduces New ZingoStealer
RedLine Stealer
2022-04-05 ⋅ Cisco Talos ⋅ Alex Karkins, Edmund Brumaghin
Threat Spotlight: AsyncRAT campaigns feature new version of 3LOSH crypter
AsyncRAT LimeRAT
2022-03-29 ⋅ Cisco Talos ⋅ Asheer Malhotra, Justin Thattil, Kendall McKay
Transparent Tribe campaign uses new bespoke malware to target Indian government officials
Crimson RAT
2022-03-28 ⋅ Cisco ⋅ Adela Jezkova, María José Erquiaga, Onur Erdogan
Emotet is Back
Emotet
2022-03-24 ⋅ Cisco Talos ⋅ Cisco Talos
Threat Advisory: DoubleZero
DoubleZero
2022-03-17 ⋅ Cisco ⋅ Caitlin Huey, Tiago Pereira
From BlackMatter to BlackCat: Analyzing two attacks from one affiliate
BlackCat BlackMatter BlackCat BlackMatter
2022-03-16 ⋅ Cisco ⋅ Yuri Kramarz
Preparing for denial-of-service attacks with Talos Incident Response
2022-03-15 ⋅ Cisco ⋅ Cisco Talos
Threat Advisory: CaddyWiper
CaddyWiper
2022-03-10 ⋅ Cisco Talos ⋅ Chris Neal
WEDNESDAY, MARCH 9, 2022 Threat advisory: Cybercriminals compromise users with malware disguised as pro-Ukraine cyber tools
2022-02-24 ⋅ Cisco Talos ⋅ Talos
Threat Advisory: Cyclops Blink
VPNFilter
2022-02-13 ⋅ The Record ⋅ Catalin Cimpanu
San Francisco 49ers confirm ransomware attack
BlackByte
2022-02-11 ⋅ Cisco Talos ⋅ Talos
Threat Roundup for February 4 to February 11
DarkComet Ghost RAT Loki Password Stealer (PWS) Tinba Tofsee Zeus
2022-02-09 ⋅ Cisco ⋅ Vanja Svajcer, Vitor Ventura
What’s with the shared VBA code between Transparent Tribe and other threat actors?
2022-02-02 ⋅ Cisco ⋅ Asheer Malhotra, Vitor Ventura
Arid Viper APT targets Palestine with new wave of politically themed phishing attacks, malware
Micropsia
2022-01-31 ⋅ Cisco ⋅ Asheer Malhotra, Vitor Ventura
Iranian APT MuddyWater targets Turkish users via malicious PDFs, executables
2022-01-12 ⋅ Cisco ⋅ Chetan Raghuprasad, Vanja Svajcer
Nanocore, Netwire and AsyncRAT spreading campaign uses public cloud infrastructure
AsyncRAT Nanocore RAT NetWire RC
2021-12-02 ⋅ Cisco ⋅ Tiago Pereira
Magnat campaigns use malvertising to deliver information stealer, backdoor and malicious Chrome extension
Azorult RedLine Stealer
2021-11-18 ⋅ Cisco ⋅ Josh Pyorre
BlackMatter, LockBit, and THOR
BlackMatter LockBit PlugX