Click here to download all references as Bib-File.•
| 2026-08-26
⋅
Github (blacklotuslabs)
⋅
The infrastructure quartermaster: inside a China-nexus state enablement model (IOCs) |
| 2026-08-26
⋅
Abstract Security
⋅
RMM Hunting: Leveraging LOLRMM for Detection |
| 2026-08-26
⋅
Microsoft
⋅
TerminalFix campaign deploys a reverse tunnel through multistage intrusion Lorem Ipsum |
| 2026-08-25
⋅
cocomelonc
⋅
Malware development trick 64: PE file bloating and overlay data. Simple C example |
| 2026-08-24
⋅
cocomelonc
⋅
Malware development trick 63: modifying PE version metadata and icon. Simple C example |
| 2026-08-21
⋅
cocomelonc
⋅
Malware shellcode delivery via signal - part 5. Physics-guided AI demodulator. PyTorch example |
| 2026-08-20
⋅
Cisco Talos
⋅
UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities Meterpreter Havoc IISpy JuicyPotato Meterpreter Quasar RAT UAT-10147 |
| 2026-08-20
⋅
Cisco Talos
⋅
UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations Meterpreter IISpy Meterpreter Quasar RAT UAT-10147 |
| 2026-08-20
⋅
Wiz.io
⋅
Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns |
| 2026-08-20
⋅
trendai
⋅
Prompting the Payload: How an npm Supply Chain Attack Delivers the RedC2 AI-Powered Linux Implant redshell |
| 2026-08-19
⋅
Bitdefender
⋅
SilkParasite: Inside a China-nexus espionage cluster and its seven-family RAT ecosystem across Central Asia BloodAlchemy ShadowPad SNAPPYBEE |
| 2026-08-19
⋅
zimperium
⋅
The ToxicPanda Never Sleeps: ToxicPanda 2.0 Prepares its Next Strike on Mobile ToxicPanda |
| 2026-08-18
⋅
Recorded Future
⋅
PurpleDelta's Fraudulent Employment Operations |
| 2026-08-18
⋅
Gen
⋅
WordlistLoader Delivering Amatera via ClearFake Campaigns ACR Stealer Amatera |
| 2026-08-17
⋅
The CyberSec Guru
⋅
Azure Data Exfiltration: TheHatman Campaign Exposes Millions of Records | The CyberSec Guru | The CyberSec TheHatman |
| 2026-08-17
⋅
Github (Yavuzhanzgen)
⋅
AsyncRAT Technical Analysis AsyncRAT |
| 2026-08-17
⋅
Zscaler
⋅
C2Looper: A New Backdoor Likely Tied To Ransomware With GitHub C2 C2Looper |
| 2026-08-15
⋅
Github (Yavuzhanzgen)
⋅
KermitRAT-Malware-Analysis |
| 2026-08-14
⋅
QUIRSO GmbH
⋅
Global Exploitation of CVE-2026–59310 by Suspected Chinese-Nexus APT & Related CVE-2026–59309 Activity |
| 2026-08-14
⋅
⋅
Ministere de l'Economie et des Finances
⋅
Illegitimate access to the information system of the Directorate General of Public Finances ZeroBytes |