Click here to download all references as Bib-File.•
2020-11-05
⋅
Github (scythe-io)
⋅
Ryuk Adversary Emulation Plan Ryuk |
2020-10-27
⋅
Sophos Managed Threat Response (MTR)
⋅
MTR Casebook: An active adversary caught in the act Cobalt Strike |
2020-09-15
⋅
Seguranca Informatica
⋅
Threat analysis: The emergent URSA trojan impacts many countries using a sophisticated loader Mispadu |
2020-09-11
⋅
RSA Conference (YouTube)
⋅
Two weeks with a Russian Ransomware Cell HILDACRYPT |
2020-08-11
⋅
FireEye
⋅
COOKIEJAR: Tracking Adversaries With FireEye Endpoint Security’s Logon Tracker Module |
2020-07-17
⋅
Zscaler
⋅
New Voicemail-Themed Phishing Attacks Use Evasion Techniques and Steal Credentials |
2020-07-14
⋅
CrowdStrike
⋅
Manufacturing Industry in the Adversaries’ Crosshairs ShadowPad Snake |
2020-05-20
⋅
Avast Decoded
⋅
GhostDNS Source Code Leaked |
2020-05-01
⋅
Macnica Networks
⋅
Cyber Espionage Tradecraft in the Real World Adversaries targeting Japan in the second half of 2019 TSCookie LODEINFO |
2020-04-08
⋅
Secureworks
⋅
How Cyber Adversaries are Adapting to Exploit the Global Pandemic GOLD SOUTHFIELD TA2101 TA505 WIZARD SPIDER |
2020-03-31
⋅
FireEye
⋅
It’s Your Money and They Want It Now - The Cycle of Adversary Pursuit Ryuk TrickBot UNC1878 |
2020-03-24
⋅
RSA
⋅
Exchange Exploit Case Study – CVE-2020-0688 |
2020-03-02
⋅
Virus Bulletin
⋅
Pulling the PKPLUG: the adversary playbook for the long-standing espionage activity of a Chinese nation-state adversary HenBox Farseer PlugX Poison Ivy |
2020-02-25
⋅
RSA Conference
⋅
Feds Fighting Ransomware: How the FBI Investigates and How You Can Help FastCash Cerber Defray Dharma FriedEx Gandcrab GlobeImposter Mamba Phobos Rapid Ransom REvil Ryuk SamSam Zeus |
2019-11-21
⋅
Bleeping Computer
⋅
Allied Universal Breached by Maze Ransomware, Stolen Data Leaked Maze |
2019-11-13
⋅
CrowdStrike
⋅
Through the Eyes of the Adversary TrickBot CLOCKWORK SPIDER |
2019-09-22
⋅
Proofpoint
⋅
LookBack Forges Ahead: Continued Targeting of the United States’ Utilities Sector Reveals Additional Adversary TTPs Lookback TA410 |
2019-06-20
⋅
Symantec
⋅
Waterbug: Espionage Group Rolls Out Brand-New Toolset in Attacks Against Governments LightNeuron |
2019-04-12
⋅
SpamTitan
⋅
Emotet Malware Revives Old Email Conversations Threads to Increase Infection Rates Emotet |
2019-03-11
⋅
Minerva
⋅
Attackers Insert Themselves into the Email Conversation to Spread Malware ISFB |