Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-12-01 ⋅ CitizenLab ⋅ Bill Marczak, John Scott-Railton, Ron Deibert, Siddharth Prakash Rao, Siena Anstis
Running in Circles Uncovering the Clients of Cyberespionage Firm Circles
2020-11-27 ⋅ Marco Ramilli's Blog ⋅ Marco Ramilli
Threat Actor: Unkown
Unidentified JS 004
2020-10-28 ⋅ Malwarebytes ⋅ hasherezade, Hossein Jazi, Jérôme Segura, Marcelo Rivero
Fake COVID-19 survey hides ransomware in Canadian university attack
Vaggen
2020-10-22 ⋅ Sentinel LABS ⋅ Marco Figueroa
An Inside Look at How Ryuk Evolved Its Encryption and Evasion Techniques
Ryuk
2020-09-25 ⋅ Github (sisoma2) ⋅ Marc
Turla Carbon System
Cobra Carbon System
2020-07-16 ⋅ ESET Research ⋅ Marc-Etienne M.Léveillé
Mac cryptocurrency trading application rebranded, bundled with malware
Gmera
2020-06-24 ⋅ Marco Ramilli's Blog ⋅ Marco Ramilli
Is upatre downloader coming back ?
Upatre
2020-06-22 ⋅ m.alvar.es ⋅ Marcos Alvares
Comparative analysis between Bindiff and Diaphora - Patched Smokeloader Study Case
SmokeLoader
2020-06-10 ⋅ m.alvar.es ⋅ Marcos Alvares
Unpacking Smokeloader and Reconstructing PE Programatically using LIEF
SmokeLoader
2020-06-09 ⋅ CitizenLab ⋅ Adam Hulcoop, Bahr Abdul Razzak, Bill Marczak, John Scott-Railton, Ron Deibert, Siena Anstis
Dark Basin Uncovering a Massive Hack-For-Hire Operation
Dark Basin
2020-04-02 ⋅ McAfee ⋅ Alexandre Mundo, Marc Rivero López
Nemty Ransomware – Learning by Doing
Nemty
2020-03-20 ⋅ Bitdefender ⋅ Liviu Arsene
5 Times More Coronavirus-themed Malware Reports during March
ostap HawkEye Keylogger Koadic Loki Password Stealer (PWS) Nanocore RAT Remcos
2020-03-19 ⋅ Yoroi ⋅ Marco Ramilli
Is APT 27 Abusing COVID-19 To Attack People ?!
2020-02-19 ⋅ Yoroi ⋅ Marco Ramilli
Uncovering New Magecart Implant Attacking eCommerce
magecart
2020-02-02 ⋅ ESET Research ⋅ Ignacio Sanmillan, Marc-Etienne M.Léveillé
TLP: WHITE A WILD KOBALOS APPEARSTricksy Linux malware goes after HPCs
Kobalos
2020-01-28 ⋅ CitizenLab ⋅ Bill Marczak, John Scott-Railton, Masashi Crete-Nishihata, Ron Deibert, Siena Anstis
Stopping the Press: New York Times Journalist Targeted by Saudi-linked Pegasus Spyware Operator
Chrysaor
2020-01-15 ⋅ Marco Ramilli's Blog ⋅ Marco Ramilli
Iranian Threat Actors: Preliminary Analysis
POWERSTATS
2019-12-05 ⋅ Marco Ramilli's Blog ⋅ Marco Ramilli
APT28 Attacks Evolution
APT28
2019-11-05 ⋅ McAfee ⋅ Alexandre Mundo, Marc Rivero López
Buran Ransomware; the Evolution of VegaLocker
VegaLocker
2019-11-04 ⋅ Marco Ramilli's Blog ⋅ Marco Ramilli
Is Lazarus/APT38 Targeting Critical Infrastructures?
Dtrack