Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-07-08 ⋅ COLUMBIA | SIPA ⋅ Jennifer Keltz, John Patrick Dees, John Sakellariadis, Katherine von Ofenheim, Lan Pelekis, Matthew Armelli, Max Egar, Neal Pollard, Stuart Caudill, Vipratap Vikram Singh
Named But Hardly Shamed: What is the Impact of Information Disclosures on an APT Operations?
2020-07-08 ⋅ xunison ⋅ xunison
Analysis of SamoRAT
SamoRAT
2020-07-08 ⋅ Medium (@sevdraven) ⋅ Sébastien Larinier
How to unpack Chinoxy backdoor and decipher the configuration of the backdoor
Chinoxy
2020-07-08 ⋅ Intel 471 ⋅ Intel 471
Iran’s domestic espionage: Lessons from recent data leaks
2020-07-08 ⋅ Palantir
Restricting SMB-based lateral movement in a Windows environment
2020-07-08 ⋅ VMWare Carbon Black ⋅ Brian Baskin
TAU Threat Discovery: Conti Ransomware
Conti
2020-07-07 ⋅ Department of Justice ⋅ Department of Justice
United States District Court for the Eastern District of Washington vs. Li Xiaoyu (oro0lxy) and Dong Jiazhi
BRONZE SPRING
2020-07-07 ⋅ FireEye ⋅ Matthew Haigh, Trevor Haskell
Configuring a Windows Domain to Dynamically Analyze an Obfuscated Lateral Movement Tool
2020-07-07 ⋅ ⋅ ID Ransomware ⋅ Andrew Ivanov
SilentDeath Ransomware
2020-07-07 ⋅ Hornetsecurity ⋅ Hornetsecurity Security Lab
Clop, Clop! It’s a TA505 HTML malspam analysis
Clop Get2
2020-07-07 ⋅ MWLab ⋅ Ladislav Bačo
Cobalt Strike stagers used by FIN6
Cobalt Strike
2020-07-07 ⋅ GEMINI
"Keeper" Magecart Group Infects 570 Sites
magecart
2020-07-07 ⋅ GEMINI
Full list of all the 570+ sites that the Keeper gang hacked since April 2017
magecart
2020-07-07 ⋅ AGARI CYBER INTELLIGENCE DIVISION
Cosmic Lynx: The Rise of Russian BEC
Cosmic Lynx
2020-07-07 ⋅ Sentinel LABS ⋅ Jason Reaves
Breaking EvilQuest | Reversing A Custom macOS Ransomware File Encryption Routine
EvilQuest
2020-07-07 ⋅ Microsoft ⋅ Tom Burt
Microsoft takes legal action against COVID-19-related cybercrime
2020-07-06 ⋅ Lukáš Štefanko, MalwareHunterTeam
Tweets on Basbanke
Basbanke
2020-07-06 ⋅ NTT ⋅ Security division of NTT Ltd.
TrickBot variant “Anchor_DNS” communicating over DNS
AnchorDNS TrickBot
2020-07-06 ⋅ Youtube (Lukas Stefanko) ⋅ Lukáš Štefanko
Dynamic analysis of patched EventBot allows us read its detailed debug logs while running | Trojan
Eventbot
2020-07-06 ⋅ Kaspersky Labs ⋅ Anton Kivva, Igor Golovin
Pig in a poke: smartphone adware