Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-05-20 ⋅ lacework ⋅ Chris Hall, Jared Stroud, Tom Hegel
8220 Gangs Recent use of Custom Miner and Botnet
2021-05-20 ⋅ RiskIQ ⋅ Jennifer Grob
Analysis of Infrastructure used by DarkSide Affiliates
DarkSide
2021-05-20 ⋅ Github (microsoft) ⋅ Microsoft
Microsoft 365 Defender Hunting Queries for hunting multiple threat actors' TTPs and malwares
STRRAT OceanLotus BabyShark Elise Revenge RAT WastedLocker Zebrocy
2021-05-20 ⋅ Twitter (@MsftSecIntel) ⋅ Microsoft Security Intelligence
Tweet on Java-based STRRAT malware campaign distributed via email
STRRAT
2021-05-19 ⋅ Avast Decoded ⋅ David Zimmer
Binary Reuse of VB6 P-Code Functions
2021-05-19 ⋅ Team Cymru ⋅ Andy Kraus, Josh Hopkins, Nick Byers
Tracking BokBot Infrastructure Mapping a Vast and Currently Active BokBot Network
IcedID
2021-05-19 ⋅ Medium Mehmet Ergene ⋅ Mehmet Ergene
Enterprise Scale Threat Hunting: Network Beacon Detection with Unsupervised ML and KQL — Part 2
Cobalt Strike
2021-05-19 ⋅ Nozomi Networks ⋅ Alexey Kleymenov
Colonial Pipeline Ransomware Attack: Revealing How DarkSide Works
DarkSide
2021-05-19 ⋅ Bleeping Computer ⋅ Adam Janofsky
Qlocker ransomware shuts down after extorting hundreds of QNAP users
2021-05-19 ⋅ The Record ⋅ Adam Janofsky
SolarWinds CEO apologizes for blaming an intern, says attack may have started in January 2019
2021-05-19 ⋅ Bleeping Computer ⋅ Sergiu Gatlan
May Android security updates patch 4 zero-days exploited in the wild
2021-05-19 ⋅ Youtube (OALabs) ⋅ Sergei Frankoff
Reverse Engineering Warzone RAT - Part 1
Ave Maria
2021-05-19 ⋅ malware.love ⋅ Robert Giczewski
Python stealer distribution via excel maldoc
2021-05-19 ⋅ Palo Alto Networks Unit 42 ⋅ Brad Duncan
BazarCall: Call Centers Help Spread BazarLoader Malware
BazarBackdoor campoloader
2021-05-19 ⋅ ⋅ Politie NL ⋅ Politie NL
Aanhouding in onderzoek naar cybercrime
Imminent Monitor RAT
2021-05-19 ⋅ Intel 471 ⋅ Intel 471
Look how many cybercriminals love Cobalt Strike
BazarBackdoor Cobalt Strike Hancitor QakBot SmokeLoader SystemBC TrickBot
2021-05-19 ⋅ The Wall Street Journal ⋅ Collin Eaton
Colonial Pipeline CEO Tells Why He Paid Hackers a $4.4 Million Ransom
DarkSide DarkSide
2021-05-19 ⋅ Twitter (@ThreatFabric) ⋅ ThreatFabric
Tweet on Anatsa android banking trojan targeting 7 more italian banks
Anatsa
2021-05-18 ⋅ CrowdStrike ⋅ Karan Sood, Liviu Arsene, Shaun Hurley
DarkSide Goes Dark: How CrowdStrike Falcon Customers Were Protected
DarkSide DarkSide
2021-05-18 ⋅ KEYSIGHT TECHNOLOGIES ⋅ Radu Emanuel Chiscariu
DarkSide Ransomware Behavior and Techniques
DarkSide