Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-08-03 ⋅ AhnLab ⋅ ASEC
Analysis of the Connection Between Xctdoor and Past CRAT Attack Cases (Larva-26005)
CRAT DRATzarus Larva-26005
2026-08-02 ⋅ AhnLab ⋅ ASEC
Analysis of a Phishing Email Attack Case by the Larva-24009 Threat Actor
Quasar RAT Larva-24009
2026-08-01 ⋅ GitHub (OpenSourceMalware) ⋅ OpenSourceMalware
Github Repository: NullReceiver
2026-07-31 ⋅ StealthMole ⋅ StealthMole
The Many Faces of ModernStealer: Tracing an Underground Military Data Network
ModernStealer
2026-07-31 ⋅ Medium @prtheus ⋅ Prtheus
1337_GTWK Linux Malware Analysis
1337_GTWK
2026-07-31 ⋅ Microsoft Threat Intelligence
CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft
ChocoShell CornFlake Storm-2945
2026-07-30 ⋅ AhnLab ⋅ ASEC
[Joint Cybersecurity Advisory] Operation Double Barrel (The Relationship Between a State-Sponsored Threat Actor and the Gunra Ransomware Group)
Bankshot Gunra PostNapTea
2026-07-30 ⋅ AhnLab ⋅ AhnLab
[Joint Cybersecurity Advisory] Operation Double Barrel (The Relationship Between a State-Sponsored Threat Actor and the Gunra Ransomware Group)
Gunra
2026-07-30 ⋅ Prtheus
Linux Malware 1337_GWTK Server Analysis
1337_GTWK
2026-07-29 ⋅ Amazon ⋅ CJ Moses
Amazon identifies North Korean hacker group behind open-source supply chain attacks
2026-07-29 ⋅ Proofpoint ⋅ Greg Lesnewich, Konstantin Klinger, Mark Kelly, Nick Attfield, Saher Naumaan, Stuart Del Caliz
Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click Exploit
ZimReaper Void Blizzard
2026-07-29 ⋅ SafeDep ⋅ SafeDep Team
Joyfill npm Packages Compromised with Blockchain C2 Loader
JADESNOW
2026-07-28 ⋅ SOCRadar ⋅ SOCRadar
Dark Web Profile: ExfilSquad
ExfilSquad
2026-07-28 ⋅ Omar Amin, Vasily Berdnikov
Mirage Kitten targets Middle East and Africa region with new malware
NightLedger
2026-07-28 ⋅ t0ast's blog ⋅ t0ast
Download Meccha Chameleon Cheats, Get Malware
Remus
2026-07-28 ⋅ StepSecurity ⋅ Varun Sharma
Compromised npm Packages: @joyfill/components and @joyfill/layouts Ship an Obfuscated Remote Access Trojan
JADESNOW
2026-07-28 ⋅ Socket ⋅ Socket Research Team
Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan
JADESNOW
2026-07-28 ⋅ Hunt.io ⋅ Hunt.io
Flying Eagle Android RAT: Leaked Source Code, 170 Active Servers, and a New Platform Called Night Dragon
2026-07-27 ⋅ Intezer ⋅ Joakim Kennedy
Two Trojan Families Trotting in Through Google Search Ads
2026-07-27 ⋅ Intrusiontruth ⋅ Intrusiontruth
Dear Diary, Today I found a Ghost in the Network