Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-01-17 ⋅ Twitter (@AltShiftPrtScn) ⋅ Peter Mackenzie
Tweet on Conti Ransomware group exploiting FortiGate VPNs to drop in CobaltStrike loaders
Cobalt Strike Conti
2021-01-16 ⋅ Medium ⋅ Isha Kudkar
Oski Stealer : A Credential Theft Malware
Oski Stealer
2021-01-16 ⋅ Chuongdong blog ⋅ Chuong Dong
Babuk Ransomware v3
Babuk
2021-01-16 ⋅ Medium christiaanbeek ⋅ Christiaan Beek
VHD Forensics — the sequel
2021-01-16 ⋅ MECRA ⋅ MECRA
Iran’s Cyber Campaign, and Coercive Recruitment Methods
2021-01-15 ⋅ The Hacker News ⋅ Ravie Lakshmaman
Researchers Disclose Undocumented Chinese Malware Used in Recent Attacks
CROSSWALK
2021-01-15 ⋅ Bleeping Computer ⋅ Lawrence Abrams
Windows Finger command abused by phishing to download malware
MINEBRIDGE
2021-01-15 ⋅ nccgroup ⋅ David Cash
Sign over Your Hashes – Stealing NetNTLM Hashes via Outlook Signatures
2021-01-15 ⋅ Medium Dansec ⋅ Dan Lussier
Detecting Malicious C2 Activity -SpawnAs & SMB Lateral Movement in CobaltStrike
Cobalt Strike
2021-01-15 ⋅ GEMINI ⋅ GEMINI
Joker’s Stash, the Largest Carding Marketplace, Shuts Down
2021-01-15 ⋅ Symantec ⋅ Threat Hunter Team
SolarWinds: Insights into Attacker Command and Control Process
SUNBURST
2021-01-15 ⋅ Intel 471 ⋅ Intel 471
Last Dash for Joker’s Stash: Carding forum may close in 30 days
2021-01-15 ⋅ Swisscom ⋅ Markus Neis
Cracking a Soft Cell is Harder Than You Think
Ghost RAT MimiKatz PlugX Poison Ivy Trochilus RAT
2021-01-15 ⋅ Google ⋅ Heather Adkins, Phil Venables
How we’re helping to reshape the software supply chain ecosystem securely
2021-01-14 ⋅ Silas Cutler's Blog ⋅ Silas Cutler
Killed In Translation
2021-01-14 ⋅ PTSecurity ⋅ PT ESC Threat Intelligence
Higaisa or Winnti? APT41 backdoors, old and new
Cobalt Strike CROSSWALK FunnySwitch PlugX ShadowPad
2021-01-14 ⋅ RiskIQ ⋅ Jordan Herman
MediaLand: Magecart and Bulletproof Hosting
magecart
2021-01-14 ⋅ Imperva ⋅ Shiran Bareli
Python Cryptominer Botnet Quickly Adopts Latest Vulnerabilities
2021-01-14 ⋅ FBI ⋅ FBI
PIN Number 20210114-001: Cyber Criminals Exploit Network Access and Privilege Escalation
2021-01-14 ⋅ DomainTools ⋅ Joe Slowik
The Devil’s in the Details: SUNBURST Attribution
SUNBURST