Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-07-06 ⋅ Fortinet ⋅ Cara Lin
From Follina to Rozena - Leveraging Discord to Distribute a Backdoor
Rozena
2022-06-24 ⋅ Group-IB ⋅ Albert Priego
We see you, Gozi Hunting the latest TTPs used for delivering the Trojan
ISFB
2022-05-31 ⋅ NOZOMI Network Labs ⋅ Giannis Tsaraias, Ivan Speziale
Industroyer vs. Industroyer2: Evolution of the IEC 104 Component
INDUSTROYER2
2022-05-13 ⋅ Cluster25 ⋅ Cluster25
Cozy Smuggled Into The Box: APT29 Abusing Legitimate Software For Targeted Operations In Europe
2022-05-11 ⋅ NTT Security Holdings ⋅ NTT Security Holdings
Analysis of an Iranian APTs “E400” PowGoop Variant Reveals Dozens of Control Servers Dating Back to 2020
PowGoop
2022-05-04 ⋅ Cybereason ⋅ Akihiro Tomita, Assaf Dahan, Chen Erlich, Daniel Frank, Fusao Tanida, Niv Yona, Ofir Ozer
Operation CuckooBees: Deep-Dive into Stealthy Winnti Techniques
PRIVATELOG Spyder STASHLOG Winnti
2022-05-04 ⋅ Cybereason ⋅ Akihiro Tomita, Assaf Dahan, Chen Erlich, Daniel Frank, Fusao Tanida, Niv Yona, Ofir Ozer
Operation CuckooBees: A Winnti Malware Arsenal Deep-Dive
PRIVATELOG Spyder STASHLOG Winnti
2022-04-27 ⋅ BleepingComputer ⋅ BleepingComputer
New Black Basta ransomware springs into action with a dozen breaches
Black Basta
2022-04-27 ⋅ Nozomi Networks ⋅ Nozomi Networks Labs
Industroyer2: Nozomi Networks Labs Analyzes the IEC 104 Payload
INDUSTROYER2
2022-04-25 ⋅ th3protocol blog ⋅ Colin Cowie
Choziosi Loader: Multi-platform campaign delivering browser extension malware
Choziosi
2022-04-18 ⋅ CitizenLab ⋅ Bahr Abdul Razzak, Bill Marczak, Elies Campo, Gözde Böcü, John Scott-Railton, Ron Deibert, Salvatore Solimano, Siena Anstis
CatalanGate Extensive Mercenary Spyware Operation against Catalans Using Pegasus and Candiru
Chrysaor Caramel Tsunami
2022-04-18 ⋅ Nozomi Networks ⋅ Nozomi Networks Labs
New BotenaGo Variant Discovered by Nozomi Networks Labs
BotenaGo
2022-04-14 ⋅ PRODAFT Threat Intelligence ⋅ PRODAFT
PYSA (Mespinoza) In-Depth Analysis
Mespinoza
2022-03-31 ⋅ Palo Alto Networks Unit 42 ⋅ Haozhe Zhang, Ken Hsu, Qi Deng, Tao Yan
CVE-2022-22965: Spring Core Remote Code Execution Vulnerability Exploited In the Wild (SpringShell)
2022-03-28 ⋅ Group-IB ⋅ Ilia Rozhnov
Group-IB unveils three groups of fraudsters behind delivery scams in Singapore
2022-03-06 ⋅ Bleeping Computer ⋅ Lawrence Abrams
Mozilla Firefox 97.0.2 fixes two actively exploited zero-day bugs (CVE-2022-26485 & CVE-2022-26486)
2022-03-05 ⋅ University of Zaragoza ⋅ Miguel Martín Pérez
Effectiveness of Similarity Digest Algorithms for Binary Code Similarity in Memory Forensic Analysis
2022-03-01 ⋅ Nozomi Networks ⋅ Nozomi Networks Labs
How IoT Botnets Evade Detection and Analysis
Mozi SBIDIOT
2022-02-28 ⋅ Medium arnozobec ⋅ Arnaud Zobec
Analyzing conti-leaks without speaking russian — only methodology
Conti
2022-02-23 ⋅ Sentinel LABS ⋅ Antonio Pirozzi, Antonis Terefos, Idan Weizman
Sanctions Be Damned | From Dridex to Macaw, The Evolution of Evil Corp
Dridex Macaw WastedLocker