Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-03-23 ⋅ Dark Web Informer ⋅ Dark Web Informer
Alleged Breach of Chile's Ley del Lobby Platform Exposes 250GB of Government Lobbying Records Spanning 2018 to 2026
NyxarGroup
2026-03-23 ⋅ Netskope ⋅ Vini Egerland
OpenClaw Trap: AI-Assisted Lure Factory Targets Developers & Gamers
2026-03-23 ⋅ Netomize ⋅ Mohamad Mokbel
Detect SnappyClient C&C Traffic Using PacketSmith + Yara-X Detection Module
SnappyClient
2026-03-23 ⋅ Sophos ⋅ Sophos Counter Threat Unit Research Team
NICKEL ALLEY strategy: Fake it ‘til you make it
PylangGhost GolangGhost Nickel Alley
2026-03-20 ⋅ AhnLab ⋅ ASEC
Attack Targeting MS‑SQL Servers to Deploy the ICE Cloud Scanner (Larva-26002)
Larva-26002
2026-03-20 ⋅ Nextron Systems ⋅ Pezier Pierre-Henri
RegPhantom Backdoor Threat Analysis
RegPhantom
2026-03-18 ⋅ Google ⋅ Google Threat Intelligence Group
The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors
GHOSTBLADE UNC6748
2026-03-18 ⋅ Google ⋅ Google Threat Intelligence Group
The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors
GHOSTBLADE
2026-03-17 ⋅ Seqrite ⋅ Sathwik Ram Prakki
Operation GhostMail: Russian APT exploits Zimbra Webmail to Target Ukraine State Agency
Unidentified JS 007 (Zimbra Stealer)
2026-03-17 ⋅ Hunt.io ⋅ Hunt.io
Iranian Botnet Exposed via Open Directory: 15-Node Relay Network and Active C2
2026-03-17 ⋅ NTT Security ⋅ Rintaro Koike, Ryu Hiyoshi
StoatWaffle, malware used by WaterPlum
StoatWaffle
2026-03-16 ⋅ Ransom-ISAC ⋅ François-Julien Alcaraz, Yashraj Solanki
Contagious Interview: VS Code to RAT
StoatWaffle
2026-03-13 ⋅ Scarlet Shark
Analyst’s Brief: Moonrise RAT
MoonRise
2026-03-13 ⋅ kmsec ⋅ Kieran Miyamoto
First instance of PylangGhost RAT observed on npm
PylangGhost
2026-03-12 ⋅ IBM X-Force ⋅ Golo Mühr
A Slopoly start to AI-enhanced ransomware attacks
Slopoly Hive0163
2026-03-12 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Storm-2561 uses SEO poisoning to distribute fake VPN clients for credential theft
Storm-2561
2026-03-12 ⋅ Palo Alto Networks Unit 42 ⋅ Lior Rochberger, Yoav Zemah
Suspected China-Based Espionage Operation Against Military Targets in Southeast Asia
AppleChris CL-STA-1087
2026-03-12 ⋅ Check Point Research ⋅ Checkpoint Research
“Handala Hack” – Unveiling Group’s Modus Operandi
2026-03-11 ⋅ Rapid7 ⋅ Rapid7
Iran’s Cyber Playbook in the Escalating Regional Conflict
Cyber Islamic Resistance
2026-03-11 ⋅ Microsoft ⋅ Microsoft Defender Experts, Microsoft Defender Security Research Team
Contagious Interview: Malware delivered through fake developer job interviews
BeaverTail OtterCookie StoatWaffle InvisibleFerret PylangGhost GolangGhost Contagious Interview