Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-06-09 ⋅ Infoblox ⋅ David Brunsdon, Nick Sundvall
Residential Proxies in the Wild
2026-06-09 ⋅ ExaTrack ⋅ ExaTrack
LotusLite: Believe me I am MustangPanda
LOTUSLITE
2026-06-08 ⋅ SYGNIA ⋅ Sygnia Team
Velvet Ant’s Operation Highland: How a China-Nexus Actor Infiltrated an Internal Network Undetected
2026-06-08 ⋅ Proofpoint ⋅ Carlos Rubio, Saher Naumaan
Don't Fear the Repo: UNK_DeadDrop Phishing Campaign Targets Developers to Steal Cryptocurrency
Overlord RAT
2026-06-08 ⋅ StepSecurity ⋅ Rohan Prabhu
The Hades Campaign: Graph ML PyPI Packages Deploy Cross-Platform Memory Scrapers, AI Analyst Misdirection, and a Wiper Deterrent
Shai-Hulud
2026-06-07 ⋅ Socket ⋅ Socket
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Shai-Hulud
2026-06-03 ⋅ Check Point Research ⋅ Alexey Bukhteyev
Impersonation, Click Hijacking, and TDS: Inside a Malware Distribution Ecosystem
AnimateClipper Remus
2026-06-03 ⋅ sonatype ⋅ Sonatype Security Research Team
Lazarus Group's Latest: Brandjacking Campaign on npm
2026-06-02 ⋅ Threat Review Journal ⋅ Threat Review Journal
Investigation into APT 5 and their inner workings of PLA Troop 61786
2026-06-02 ⋅ Qualys ⋅ Aniket Harne
The HazyBeacon Protocol – How Malware Weaponizes Amazon Web Services (AWS) Lambda Function URLs
CL-STA-1020
2026-06-01 ⋅ ExaTrack ⋅ ExaTrack
Tracking APT28 PixyNetLoader: Evolutions from 2024 to 2026
PixyNetLoader
2026-05-31 ⋅ Gridinsoft ⋅ Gridinsoft Malware Research Team
DriveSurge Turns Trusted Websites Into ClickFix Malware Traps
DriveSurge
2026-05-31 ⋅ Socket ⋅ Kirill Boychenko
Famous Chollima Targets PHP Developers Through Compromised Packagist Package
JADESNOW
2026-05-28 ⋅ neso.re ⋅ neso
ClickFix x HijackLoader: Dissecting a Live Stealer Campaign - Part 2
HijackLoader
2026-05-28 ⋅ Mohammad Kazem Hassan Nejad
GREYVIBE: A Russia-nexus group leveraging AI across state-aligned operations
LegionRelay PhantomRelay
2026-05-28 ⋅ WithSecure ⋅ Mohammad Kazem Hassan Nejad
GREYVIBE: A Russia-nexus group leveraging AI across state-aligned operations
GreyVibe
2026-05-27 ⋅ Straiker ⋅ Amanda Rousseau, Carl Vincent
Fake Claude Code, Real Malware: Inside the Campaign Targeting AI Developers
ACR Stealer Amatera
2026-05-27 ⋅ Group-IB ⋅ Kuvonchbek Yorkulov, Yuan Huang
The GHOST STADIUM Score: Billions At Stake At The World’s Largest Football Tournament
GHOST STADIUM
2026-05-26 ⋅ Intrinsec ⋅ CTI Intrinsec, David Sardinha
Pivoting on a malspam infrastructure delivering JS malware backed by bulletproof networks
2026-05-24 ⋅ cocomelonc ⋅ cocomelonc
Malware shellcode delivery via signal - part 1. FSK Basics. Simple python script