Click here to download all references as Bib-File.•
2020-05-23
⋅
InfoSec Handlers Diary Blog
⋅
AgentTesla Delivered via a Malicious PowerPoint Add-In Agent Tesla |
2020-05-23
⋅
360 netlab
⋅
New activity of DoubleGuns Group, control hundreds of thousands of bots via public cloud service |
2020-05-23
⋅
Australian Cyber Security Centre
⋅
Summary of Tradecraft Trends for 2019-20: Tactics, Techniques and Procedures Used to Target Australian Networks |
2020-05-22
⋅
Yoroi
⋅
Cyber-Criminal espionage Operation insists on Italian Manufacturing Agent Tesla |
2020-05-22
⋅
Positive Technologies
⋅
Operation TA505: investigating the ServHelper backdoor with NetSupport RAT. Part 2. NetSupportManager RAT ServHelper |
2020-05-22
⋅
ESET Research
⋅
Insidious Android malware gives up all malicious features but one to gain stealth DEFENSOR ID |
2020-05-22
⋅
ThreatConnect
⋅
ThreatConnect Research Roundup: Possible APT33 Infrastructure |
2020-05-22
⋅
⋅
Antiy CERT
⋅
Analysis of Ramsay components of Darkhotel's infiltration and isolation network Ramsay DarkHotel |
2020-05-21
⋅
Sophos
⋅
Asnarök attackers twice modified attack midstream NOTROBIN Ragnarok |
2020-05-21
⋅
Intel 471
⋅
A brief history of TA505 AndroMut Bart Dridex FlawedAmmyy FlawedGrace Gandcrab Get2 GlobeImposter Jaff Kegotip Locky Necurs Philadephia Ransom Pony QuantLoader Rockloader SDBbot ServHelper Shifu Snatch TrickBot |
2020-05-21
⋅
BrightTALK (FireEye)
⋅
Navigating MAZE: Analysis of a Rising Ransomware Threat Maze |
2020-05-21
⋅
PICUS Security
⋅
T1055 Process Injection BlackEnergy Cardinal RAT Downdelph Emotet Kazuar RokRAT SOUNDBITE |
2020-05-21
⋅
Malwarebytes
⋅
Cybercrime tactics and techniques Ave Maria Azorult DanaBot Loki Password Stealer (PWS) NetWire RC |
2020-05-21
⋅
Bitdefender
⋅
Iranian Chafer APT Targeted Air Transportation and Government in Kuwait and Saudi Arabia MimiKatz Remexi |
2020-05-21
⋅
Armorblox
⋅
Blox Tales #6: Subpoena-Themed Phishing With CAPTCHA Redirect |
2020-05-21
⋅
ESET Research
⋅
No “Game over” for the Winnti Group ACEHASH HTran MimiKatz PipeMon |
2020-05-21
⋅
Intezer
⋅
The Evolution of APT15’s Codebase 2020 Ketrican Ketrum Okrum |
2020-05-21
⋅
Sophos
⋅
Ragnar Locker ransomware deploys virtual machine to dodge security RagnarLocker |
2020-05-21
⋅
VMWare Carbon Black
⋅
TAU Technical Report: New Attack Combines TinyPOS With Living-off-the-Land Techniques for Scraping Credit Card Data AbaddonPOS |
2020-05-21
⋅
Trend Micro
⋅
Backdoor, Devil Shadow Botnet Hidden in Fake Zoom Installers |