Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-04-07 ⋅ Talos Intelligence ⋅ Ashley Shen
New Lua-based malware “LucidRook” observed in targeted attacks against Taiwanese organizations
LucidKnight LucidPawn LucidRook UAT-10362
2026-04-07 ⋅ RedPacket Security ⋅ RedPacket Security
[KRYBIT] – Ransomware Victim: fraper[.]com
Krybit
2026-04-07 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
SOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks
2026-04-07 ⋅ IC3 ⋅ CISA, CNMF, Department of Energy (DOE), EPA, FBI, NSA
AA26-097A: Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure
2026-04-07 ⋅ NCSC UK ⋅ NCSC UK
APT28 exploit routers to enable DNS hijacking operations
2026-04-06 ⋅ Decrypt ⋅ Stephen Graves, Vismaya V
North Korean Hackers Spent Six Months Infiltrating Drift Before $285M Exploit
2026-04-06 ⋅ PICUS Security ⋅ Umut Bayram
How NoName057(16) Uses DDoSia to Attack NATO Targets
Z-Pentest Alliance
2026-04-03 ⋅ Casco ⋅ Rene Brandel
The Blueprint of a North Korean Attack on Open-Source
JADESNOW
2026-04-03 ⋅ SafeDep ⋅ SafeDep Team
Compromised npm Package mgc Deploys Multi-Platform RAT
2026-04-03 ⋅ Panther ⋅ Michael Baker
jsonspack: Multi-Tenant Node.js RAT — DPRK Supply Chain Campaign
OtterCookie
2026-04-03 ⋅ Trend Micro ⋅ Jacob Santos, Jeffrey Francis Bonaobra, Sophia Nilette Robles
Weaponizing Trust Signals: Claude Code Lures and GitHub Release Payloads
GhostSocks Vidar
2026-04-02 ⋅ DailyDarkWeb ⋅ DailyDarkWeb
SnowSoul Attack Hits Multiple Chinese Organizations
SnowSoul
2026-04-02 ⋅ cocomelonc ⋅ cocomelonc
MacOS malware persistence 8: periodic scripts. Simple C example
2026-04-02 ⋅ tracebit ⋅ Alessandro Brucato
Detecting CI/CD Supply Chain Attacks with Canary Credentials
TeamPCP
2026-04-01 ⋅ SOC Prime ⋅ Daryna Olyniychuk
UAC-0255 Attack Detection: Threat Actors Impersonate CERT-UA to Infect Ukrainian Public and Private Sector Organizations With AGEWHEEZE RAT
AGEWHEEZE Cyber Serp
2026-04-01 ⋅ cocomelonc ⋅ cocomelonc
MacOS hacking part 13: sysinfo stealer via VirusTotal API. Simple C example
2026-03-31 ⋅ Google ⋅ Adrian Hernandez, Ashley Zaya, Austin Larsen, Christopher Gardner, Dima Lenz, Michael Rudden, Mon Liclican, Tyler McLellan
North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack
WAVESHAPER
2026-03-30 ⋅ Trend Micro ⋅ John Rainier Navato
TeamPCP’s Telnyx Attack Marks a Shift in Tactics Beyond LiteLLM
TeamPCP
2026-03-29 ⋅ ⋅ Cert-UA ⋅ Cert-UA
UAC-0255 cyberattack disguised as a notification from CERT-UA using the AGEWHEEZE software tool (CERT-UA#21075)
AGEWHEEZE Cyber Serp
2026-03-29 ⋅ cocomelonc ⋅ cocomelonc
MacOS malware persistence 7: Re-opened applications. Simple C example