Click here to download all references as Bib-File.•
2023-12-01
⋅
⋅
Genians
⋅
Cases of attacks disguised as North Korean market price analysis documents, etc. CVE-2022-41128 vulnerability called with HWP, HWPX, DOCX, XLSX files |
2023-11-30
⋅
PTSecurity
⋅
Hellhounds: operation Lahat Decoy Dog RAT |
2023-11-30
⋅
Twitter (@embee_research)
⋅
Advanced Threat Intel Queries - Catching 83 Qakbot Servers with Regex, Censys and TLS Certificates QakBot |
2023-11-29
⋅
Emerging MaaS Operator Sordeal Releases Nova Infostealer Nova Stealer |
2023-11-28
⋅
Intrinsec
⋅
Aki-RATs – Command and Control Party Akira |
2023-11-28
⋅
FortiGuard Labs
⋅
GoTitan Botnet - Ongoing Exploitation on Apache ActiveMQ GoTitan |
2023-11-28
⋅
ANY.RUN
⋅
RisePro Malware Analysis: Exploring C2 Communication of a New Version RisePro |
2023-11-27
⋅
Twitter (@embee_research)
⋅
Building Threat Intel Queries Utilising Regex and TLS Certificates - (BianLian) BianLian |
2023-11-26
⋅
Twitter (@embee_research)
⋅
Identifying Suspected PrivateLoader Servers with Censys PrivateLoader |
2023-11-23
⋅
Infosec Writeups
⋅
Malware analysis Remcos RAT- 4.9.2 Pro Remcos |
2023-11-23
⋅
Trend Micro
⋅
ParaSiteSnatcher: How Malicious Chrome Extensions Target Brazil ParaSiteSnatcher |
2023-11-22
⋅
Microsoft
⋅
Diamond Sleet supply chain compromise distributes a modified CyberLink installer LambLoad |
2023-11-21
⋅
Checkpoint
⋅
The Platform Matters: A Comparative Study on Linux and Windows Ransomware Attacks Gwisin |
2023-11-21
⋅
Reliaquest
⋅
Scattered Spider Attack Analysis |
2023-11-21
⋅
IBM
⋅
Stealthy WailingCrab Malware misuses MQTT Messaging Protocol Gozi WikiLoader |
2023-11-21
⋅
Trellix
⋅
The Continued Evolution of the DarkGate Malware-as-a-Service DarkGate |
2023-11-21
⋅
Palo Alto Networks Unit 42
⋅
Hacking Employers and Seeking Employment: Two Job-Related Campaigns Bear Hallmarks of North Korean Threat Actors BeaverTail InvisibleFerret WageMole |
2023-11-21
⋅
Medium infoSec Write-ups
⋅
Unmasking NJRat: A Deep Dive into a Notorious Remote Access Trojan Part1 NjRAT |
2023-11-21
⋅
adlumin
⋅
PlayCrypt Ransomware-as-a-Service Expands Threat from Script Kiddies and Sophisticated Attackers PLAY |
2023-11-21
⋅
ANY.RUN
⋅
XWorm Malware: Exploring C&C Communication XWorm |