Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-12-17 ⋅ ⋅ EST Security ⋅ Alyac
Thallium organization attacks domestic blockchain company with documents of non-delinquency confirmation
2020-12-14 ⋅ Volexity ⋅ Damien Cash, Matthew Meltzer, Sean Koessel, Steven Adair, Thomas Lancaster, Volexity Threat Research
Dark Halo Leverages SolarWinds Compromise to Breach Organizations
SUNBURST
2020-12-09 ⋅ FireEye ⋅ Mitchell Clarke, Tom Hall
It's not FINished The Evolving Maturity in Ransomware Operations (SLIDES)
Cobalt Strike DoppelPaymer QakBot REvil
2020-11-30 ⋅ FireEye ⋅ Mitchell Clarke, Tom Hall
It's not FINished The Evolving Maturity in Ransomware Operations
Cobalt Strike DoppelPaymer MimiKatz QakBot REvil
2020-11-10 ⋅ lacework ⋅ Chris Hall
Meet Muhstik – IoT Botnet Infecting Cloud Servers
Tsunami
2020-10-16 ⋅ ⋅ Alyac ⋅ Alyac
탈륨조직의 국내 암호화폐 지갑 펌웨어로 위장한 다차원 APT 공격 분석출처 ( THALLIUM)
2020-10-15 ⋅ lacework ⋅ Chris Hall
Moobot's Cloud Migration
2020-10-14 ⋅ Palo Alto Networks Unit 42 ⋅ Ken Hsu, Qi Deng, Vaibhav Singhal, Yue Guan
Two New IoT Vulnerabilities Identified with Mirai Payloads
Mirai
2020-10-13 ⋅ Nozomi Networks ⋅ Alessandro Di Pinto
Overcoming the Challenges of Detecting P2P Botnets on Your Network
Mozi
2020-10-03 ⋅ Medium vishal_thakur ⋅ Vishal Thakur
Grinju Downloader: Anti-analysis (on steroids) | Part 2
Grinju Downloader
2020-09-22 ⋅ Medium (@vishal_thakur) ⋅ Vishal Thakur
Grinju Downloader
Grinju Downloader
2020-09-21 ⋅ Cisco Talos ⋅ Joe Marshall, JON MUNSHAW, Nick Mavis
The art and science of detecting Cobalt Strike
Cobalt Strike
2020-08-06 ⋅ Trend Micro ⋅ Fyodor Yarochkin, Loseway Lu, Marshall Chen, Yorkbing Yap
Water Nue Phishing Campaign Targets C-Suite’s Office 365 Accounts
2020-07-28 ⋅ Medium (@vishal_thakur) ⋅ Vishal Thakur
LOLSnif Malware
LOLSnif
2020-07-25 ⋅ ⋅ ESTsecurity ⋅ Alyac
[Special Report] Thallium Group sued by Microsoft in the US, threatens 'Fake Striker' APT campaign against South Korea
2020-06-11 ⋅ Talos Intelligence ⋅ Joe Marshall, Kendall McKay
Tor2Mine is up to their old tricks — and adds a few new ones
Azorult Remcos
2020-05-01 ⋅ Macnica Networks ⋅ Macnica Networks, TeamT5
Cyber Espionage Tradecraft in the Real World Adversaries targeting Japan in the second half of 2019
TSCookie LODEINFO
2020-01-31 ⋅ Virus Bulletin ⋅ Michal Poslušný, Peter Kálnai
Rich Headers: leveraging this mysterious artifact of the PE format
Dridex Exaramel Industroyer Neutrino RCS Sathurbot
2020-01-24 ⋅ Github (TheEnergyStory) ⋅ R136a1
Project TajMahal IOCs and Registry Data Decrypter
Chaperone
2020-01-01 ⋅ FireEye ⋅ Mandiant, Mitchell Clarke, Tom Hall
Mandiant IR Grab Bag of Attacker Activity
TwoFace CHINACHOPPER HyperBro HyperSSL