Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2018-02-13 ⋅ RSA ⋅ Kevin Stear
Lotus Blossom Continues ASEAN Targeting
LOTUS PANDA
2018-02-13 ⋅ Endgame ⋅ Devon Kerr
Stopping Olympic Destroyer: New Process Injection Insights
Olympic Destroyer
2018-02-13 ⋅ Juniper ⋅ Paul Kimayong
New Gootkit Banking Trojan variant pushes the limits on evasive behavior
GootKit
2018-02-13 ⋅ Twitter (@ClearskySec) ⋅ ClearSky
Tweet on Enfal loader
CMSTAR
2018-02-12 ⋅ McAfee ⋅ Asheer Malhotra, Jessica Saavedra-Morales, Ryan Sherstobitoff, Thomas Roccia
Lazarus Resurfaces, Targets Global Banks and Bitcoin Users
CoreDN
2018-02-12 ⋅ Cisco ⋅ Ben Baker, Matthew Molyett, Paul Rascagnères, Warren Mercer
Olympic Destroyer Takes Aim At Winter Olympics
Olympic Destroyer
2018-02-09 ⋅ ExaTrack ⋅ Stéfan Le Berre
Hey Uroburos! What's up ?
Uroburos
2018-02-09 ⋅ Bleeping Computer ⋅ Lawrence Abrams
Black Ruby Ransomware Skips Victims in Iran and Adds a Miner for Good Measure
Blackruby
2018-02-09 ⋅ Bleeping Computer ⋅ Lawrence Abrams
DexCrypt MBRLocker Demands 30 Yuan To Gain Access to Computer
MBRlock
2018-02-08 ⋅ Kaspersky ⋅ Boris Larin, Vladislav Stolyarov
How not to use a driver to execute code with kernel privileges
2018-02-08 ⋅ ANY.RUN ⋅ ANY.RUN
ANY.RUN analysis of MBRLock
MBRlock
2018-02-08 ⋅ Trend Micro ⋅ Trend Micro
ShurL0ckr Ransomware as a Service Peddled on Dark Web, can Reportedly Bypass Cloud Applications
Shurl0ckr
2018-02-08 ⋅ Lockboxx ⋅ Action Dan
Merlin for Red Teams
Merlin
2018-02-08 ⋅ CrowdStrike ⋅ Adam Meyers
Meet CrowdStrike’s Adversary of the Month for February: MUMMY SPIDER
Emotet MUMMY SPIDER
2018-02-08 ⋅ ⋅ ID Ransomware ⋅ Andrew Ivanov
MBRlock Ransomware
MBRlock
2018-02-08 ⋅ Forcepoint ⋅ Luke Somerville, Robert Neumann
UDPoS - exfiltrating credit card data via DNS
UDPoS
2018-02-08 ⋅ Radware ⋅ Yuval Shapira
DarkSky Botnet
Darksky
2018-02-07 ⋅ Palo Alto Networks Unit 42 ⋅ Unit 42
Threat Brief: Hancitor Actors
Hancitor Moskalvzapoe
2018-02-07 ⋅ Github (blendin) ⋅ Brendon Tiszka
3snake - dump sshd and sudo credential related strings
3snake
2018-02-07 ⋅ Palo Alto Networks Unit 42 ⋅ Brad Duncan, Vicky Ray
Compromised Servers & Fraud Accounts: Recent Hancitor Attacks
Hancitor