Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-07-01 ⋅ VMRay ⋅ John Faria
Threat Bulletin: Cutting-off the Command-and-Control Infrastructure of CollectorGoomba
2020-07-01 ⋅ Lookout ⋅ Apurva Kumar, Christoph Hebeisen, Kristin Del Rosso
Multiyear Surveillance Campaigns Discovered Targeting Uyghurs
2020-06-30 ⋅ CrowdStrike ⋅ Chad Hemenway, Chris Cwalina, Josh Burgess, Scot Lippenholz
Playing Chess Against Nation-State and Ransomware Threat Actors
2020-06-30 ⋅ AppGate ⋅ The Immunity Team
Electric Company Ransomware Attack Calls for $14 Million in Ransom
REvil
2020-06-30 ⋅ Blueliv ⋅ Blueliv Labs Team
M00nD3v, HawkEye threat actor, sells malware after COVID-19 diagnosis
HawkEye Keylogger
2020-06-30 ⋅ G Data ⋅ G Data
Ransomware on the Rise: Buran’s transformation into Zeppelin
2020-06-30 ⋅ ⋅ Qianxin ⋅ RedDrip Team
Donot APT团伙使用升级版数字武器针对周边地区的攻击活动分析
2020-06-30 ⋅ Trustwave ⋅ Brian Hussey
GoldenSpy: Chapter Two - The Uninstaller
GoldenSpy
2020-06-30 ⋅ Guardicore ⋅ Guardicore
Botnet Encyclopedia
2020-06-30 ⋅ Github (elastic) ⋅ Elastic
Detection Rules by Elastic
2020-06-30 ⋅ Bleeping Computer ⋅ Sergiu Gatlan
EvilQuest wiper uses ransomware cover to steal files from Macs
EvilQuest
2020-06-30 ⋅ Bitdefender ⋅ Alexandru Maximciuc, Cristina Vatamanu, Liviu Arsene, Radu Tudorica
StrongPity APT - Revealing Trojanized Tools, Working Hours and Infrastructure
StrongPity
2020-06-29 ⋅ KISA ⋅ KrCERT
OPERATION BOOKCODES TTPs #2
BookCodes RAT
2020-06-29 ⋅ Twitter (@dineshdina04) ⋅ Dinesh Devadoss
Tweet on initial Discovery of EvilQuest
EvilQuest
2020-06-29 ⋅ Qianxin ⋅ RedDrip Team
Global Advanced Persistent Threats (APT) Mid-2020 Report
2020-06-29 ⋅ Objective-See ⋅ Patrick Wardle
OSX.EvilQuest Uncovered
EvilQuest
2020-06-29 ⋅ Cisco Talos ⋅ Paul Rascagnères, Vitor Ventura, Warren Mercer
PROMETHIUM extends global reach with StrongPity3 APT
StrongPity
2020-06-28 ⋅ Twitter (@ccxsaber) ⋅ z3r0
Tweet on Sample
Unidentified 077 (Lazarus Downloader)
2020-06-28 ⋅ Security-in-Bits ⋅ Security-in-Bits
Interesting tactic by Ratty & Adwind for distribution of JAR appended to signed MSI
AdWind Ratty
2020-06-27 ⋅ kienmanowar Blog ⋅ m4n0w4r
Quick analysis note about GuLoader (or CloudEyE)
CloudEyE