Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-08-22 ⋅ Malware and Stuff ⋅ Andreas Klopsch
PEB: Where Magic Is Stored
Dacls
2021-08-06 ⋅ Sophos Naked Security ⋅ Paul Ducklin
Conti ransomware affiliate goes rogue, leaks “gang data”
Conti
2021-08-03 ⋅ Twitter (@ValthekOn) ⋅ Valthek
Tweet on blacklisted extensions & names of BlackMatter ransomware making the check against custom hashes values
DarkSide
2021-08-02 ⋅ Youtube (Forschungsinstitut Cyber Defense) ⋅ Alexander Rausch, Konstantin Klinger
The CODE 2021: Workshop presentation and demonstration about CobaltStrike
Cobalt Strike
2021-07-19 ⋅ Proofpoint ⋅ Joe Wise, Konstantin Klinger, Proofpoint Threat Research Team, Selena Larson
New Threat Actor Uses Spanish Language Lures to Distribute Seldom Observed Bandook Malware
Bandook Caliente Bandits
2021-06-22 ⋅ Darktrace ⋅ Oakley Cox
Crypto-mining on a DNS server
2021-06-17 ⋅ Intezer ⋅ Ryan Robinson
Klingon RAT Holding on for Dear Life
KlingonRAT
2021-06-17 ⋅ Proofpoint ⋅ Dennis Schwarz, Konstantin Klinger, Selena Larson
New TA402 Molerats Malware Targets Governments in the Middle East
Molerat Loader
2021-05-27 ⋅ cyberpunkleigh ⋅ cyberpunkleigh
Apostle Ransomware Analysis
Apostle
2021-05-19 ⋅ Nozomi Networks ⋅ Alexey Kleymenov
Colonial Pipeline Ransomware Attack: Revealing How DarkSide Works
DarkSide
2021-04-16 ⋅ Trend Micro ⋅ Ariel Neimond Lazaro, Dechao Zhao, Luis Magisa, Steven Du
XCSSET Quickly Adapts to macOS 11 and M1-based Macs
XCSSET
2021-03-09 ⋅ 360 netlab ⋅ JiaYu
Threat Alert: z0Miner Is Spreading quickly by Exploiting ElasticSearch and Jenkins Vulnerabilities
2021-02-22 ⋅ AdvIntel ⋅ Beatriz Pimenta Klein
Economic Growth, Digital Inclusion, & Specialized Crime: Financial Cyber Fraud in LATAM
BRATA Mekotio Metamorfo Ploutus ATM VictoryGate
2021-02-08 ⋅ Medium kurtikleiton ⋅ kleiton0x7e
Evade EDR with Shellcode Injection and gain persistence using Registry Run Keys
2021-01-26 ⋅ FireEye ⋅ Bernard Sapaden, Mohammed Mohsin Dalla, Rahul Mohandas, Sachin Shukla, Srini Seethapathy, Sujnani Ravindra
Phishing Campaign Leverages WOFF Obfuscation and Telegram Channels for Communication
2021-01-24 ⋅ malwareandstuff blog ⋅ Andreas Klopsch
Catching Debuggers with Section Hashing
2021-01-24 ⋅ evotec ⋅ Przemyslaw Klys
The only command you will ever need to understand and fix your Group Policies (GPO)
2021-01-19 ⋅ Malwarebytes ⋅ Marcin Kleczynski
Malwarebytes targeted by Nation State Actor implicated in SolarWinds breach. Evidence suggests abuse of privileged access to Microsoft Office 365 and Azure environments
2021-01-14 ⋅ Imperva ⋅ Shiran Bareli
Python Cryptominer Botnet Quickly Adopts Latest Vulnerabilities
2021-01-01 ⋅ Secureworks ⋅ SecureWorks
Threat Profile: GOLD FRANKLIN
Grateful POS Meterpreter MimiKatz RemCom FIN6