Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-12-02 ⋅ ESET Research ⋅ Matthieu Faou
Turla Crutch: Keeping the “back door” open
Crutch Gazer Turla
2020-12-01 ⋅ ⋅ LAC ⋅ Yoshihiro Ishikawa
[Urgent Report] Targeted attack by "SigLoader" that exploits Microsoft's digital signature file confirmed
SigLoader
2020-12-01 ⋅ Qianxin ⋅ Qi Anxin Threat Intelligence Center
Blade Eagle Group - Targeted attack group activities circling the Middle East and West Asia's cyberspace revealed
SpyNote BladeHawk
2020-12-01 ⋅ Juniper ⋅ Paul Kimayong
DarkIRC bot exploits recent Oracle WebLogic vulnerability
DarkIRC
2020-12-01 ⋅ FireEye ⋅ FireEye
Solarwinds Breach Resource Center
SUNBURST
2020-12-01 ⋅ Group-IB ⋅ Group-IB, Oleg Skulkin, Roman Rezvukhin, Semyon Rogachev
Egregor ransomware: The legacy of Maze lives on
Egregor QakBot
2020-12-01 ⋅ 360.cn ⋅ jindanlong
Hunting Beacons
Cobalt Strike
2020-12-01 ⋅ Intel 471 ⋅ Intel 471
Steal, then strike: Access merchants are first clues to future ransomware attacks
DoppelPaymer
2020-12-01 ⋅ FireEye ⋅ James T. Bennett
Using Speakeasy Emulation Framework Programmatically to Unpack Malware
2020-12-01 ⋅ FREE RUSSIA FOUNDATION ⋅ Catherine A. Fitzpatrick, Michael Weiss
Aquarium Leaks. Inside the GRU’S Psychological Warfare Program
2020-12-01 ⋅ mez0.cc ⋅ mez0
Cobalt Strike PowerShell Execution
Cobalt Strike
2020-12-01 ⋅ sonatype ⋅ Ax Sharma
There’s a RAT in my code: new npm malware with Bladabindi trojan spotted
NjRAT
2020-12-01 ⋅ Talos ⋅ Adam Pridgen, Vanja Svajcer
Xanthe - Docker aware miner
Xanthe
2020-12-01 ⋅ Trend Micro ⋅ Ryan Flores
The Impact of Modern Ransomware on Manufacturing Networks
Maze Petya REvil
2020-12-01 ⋅ CitizenLab ⋅ Bill Marczak, John Scott-Railton, Ron Deibert, Siddharth Prakash Rao, Siena Anstis
Running in Circles Uncovering the Clients of Cyberespionage Firm Circles
2020-12-01 ⋅ Kaspersky Labs ⋅ Dmitry Galov, Leonid Bezvershenko, Vladislav Tushkanov
Dox, steal, reveal. Where does your personal data end up?
2020-12-01 ⋅ SUCURI ⋅ Luke Leal
“Free” Symchanger Malware Tricks Users Into Installing Backdoor
2020-12-01 ⋅ US-CERT ⋅ US-CERT
Alert (AA20-336A): Advanced Persistent Threat Actors Targeting U.S. Think Tanks
2020-12-01 ⋅ Gdata ⋅ Karsten Hahn
IceRat evades antivirus by running PHP on Java VM
IceRat
2020-11-30 ⋅ Yoroi ⋅ Antonio Pirozzi, Luca Mella, Luigi Martire
Shadows From The Past Threaten Italian Enterprises
Rekoobe LaZagne Responder MimiKatz win.rekoobe