Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-12-15 ⋅ Github (Dump-GUY) ⋅ Jiří Vinopal
Reverse engineering KPOT v2.0 Stealer
KPOT Stealer
2020-12-15 ⋅ Github (sophos-cybersecurity) ⋅ Sophos Cyber Security Team
solarwinds-threathunt
Cobalt Strike SUNBURST
2020-12-15 ⋅ Corelight ⋅ John Gamble
Finding SUNBURST Backdoor with Zeek Logs & Corelight
SUNBURST
2020-12-15 ⋅ Twitter (@darb0ng) ⋅ Minhee Lee
Tweet on Symrise group hit by Clop Ransomware
Clop
2020-12-15 ⋅ InfoSec Handlers Diary Blog ⋅ Didier Stevens
Analyzing FireEye Maldocs
2020-12-15 ⋅ Medium 0xthreatintel ⋅ 0xthreatintel
Reversing Conti Ransomware
Conti
2020-12-14 ⋅ Blueliv ⋅ Alberto Marín, Blueliv Labs Team, Carlos Rubio
Using Qiling Framework to Unpack TA505 packed samples
AndroMut Azorult Silence TinyMet
2020-12-14 ⋅ GuidePoint Security ⋅ GuidePoint Security
SUPERNOVA SolarWinds .NET Webshell Analysis
SUPERNOVA BRONZE SPIRAL
2020-12-14 ⋅ Solarwind ⋅ Solarwind
Security Advisory on SolarWinds Supply chain attack FAQ
SUNBURST SUPERNOVA
2020-12-14 ⋅ Solarwind ⋅ Solarwind
Security Advisory on SolarWinds Supply chain attack
SUNBURST SUPERNOVA
2020-12-14 ⋅ Symantec ⋅ Threat Hunter Team
Sunburst: Supply Chain Attack Targets SolarWinds Users
SUNBURST TEARDROP
2020-12-14 ⋅ Cisco Talos ⋅ Nick Biasini
Threat Advisory: SolarWinds supply chain attack
SUNBURST TEARDROP
2020-12-14 ⋅ Youtube (Ali Hadi) ⋅ Ali Hadi
Learning about .NET Malware by Going Over the SUNBURST SolarWinds Backdoor
SUNBURST
2020-12-14 ⋅ Juniper ⋅ Asher Langton
Everything but the kitchen sink: more attacks from the Gitpaste-12 worm
2020-12-14 ⋅ Medium Killbit ⋅ killbit
Applying the Diamond Model to Cognizant (MSP) vs. Maze Ransomware
Maze
2020-12-14 ⋅ TrustedSec ⋅ Nick Gilberti, Tyler Hudak
SolarWinds Orion and UNC2452 – Summary and Recommendations
SUNBURST
2020-12-14 ⋅ Trend Micro ⋅ Trend Micro Research
Egregor Ransomware Launches String of High-Profile Attacks to End 2020
Egregor
2020-12-14 ⋅ Sophos ⋅ Ross McKerchar
Incident response playbook for responding to SolarWinds Orion compromise
SUNBURST
2020-12-14 ⋅ Palo Alto Networks Unit 42 ⋅ Unit 42
Threat Brief: SolarStorm and SUNBURST Customer Coverage
Cobalt Strike SUNBURST
2020-12-14 ⋅ Volexity ⋅ Damien Cash, Matthew Meltzer, Sean Koessel, Steven Adair, Thomas Lancaster, Volexity Threat Research
Dark Halo Leverages SolarWinds Compromise to Breach Organizations
SUNBURST