Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2024-03-20 ⋅ CISA ⋅ Cyber Safety Review Board
Review of the Summer 2023 Microsoft Exchange Online Intrusion
Storm-0558
2024-03-13 ⋅ Trend Micro ⋅ Aliakbar Zahravi, Peter Girnus, Simon Zuckerbraun
CVE-2024-21412: DarkGate Operators Exploit Microsoft Windows SmartScreen Bypass in Zero-Day Campaign
DarkGate
2024-02-21 ⋅ Microsoft ⋅ Microsoft
Exploit:Python/CVE-2024-1709.A!dha
Storm-0506
2024-02-13 ⋅ Trend Micro ⋅ Aliakbar Zahravi, Peter Girnus, Simon Zuckerbraun
Water Hydra Targets Traders with Microsoft Defender SmartScreen Zero-Day
DarkMe
2024-02-11 ⋅ Microsoft Security Intelligence
Scano
Scano
2024-02-07 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Iran surges cyber-enabled influence operations in support of Hamas
2024-01-30 ⋅ AT&T Cybersecurity ⋅ Peter Boyle
DarkGate malware delivered via Microsoft Teams - detection and response
DarkGate
2024-01-26 ⋅ Ars Technica ⋅ Dan Goodin
The life and times of Cozy Bear, the Russian hackers who just hit Microsoft and HPE
2024-01-25 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Midnight Blizzard: Guidance for responders on nation-state attack
UNC2452
2024-01-19 ⋅ Microsoft ⋅ MSRC Team
Microsoft Actions Following Attack by Nation State Actor Midnight Blizzard
2024-01-17 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
New TTPs observed in Mint Sandstorm campaign targeting high-profile individuals at universities and research orgs
MediaPI APT35
2023-12-30 ⋅ Rewterz Information Security ⋅ Rewterz Information Security
Rewterz Threat Alert – Widely Abused MSIX App Installer Disabled by Microsoft – Active IOCs
EugenLoader POWERTRASH BATLOADER DarkGate FlawedGrace NetSupportManager RAT SectopRAT Storm-0506
2023-12-30 ⋅ Rewterz Information Security ⋅ Rewterz Information Security
Rewterz Threat Alert – Widely Abused MSIX App Installer Disabled by Microsoft – Active IOCs
HijackLoader Storm-1674
2023-12-29 ⋅ Security Boulevard ⋅ Wajahat Raja
Microsoft Storm-1152 Crackdown: Stopping Threat Actors
Storm-1152
2023-12-18 ⋅ Rewterz Information Security ⋅ Rewterz Information Security
Rewterz Threat Update – Microsoft Warns of Emerging Threat by Storm-0539 Behind Gift Card Frauds
Storm-0539 Storm-1152
2023-12-18 ⋅ Bridewell ⋅ Joshua Penny
Analysing a Widespread Microsoft 365 Credential Harvesting Campaign
Storm-1575
2023-12-13 ⋅ Trend Micro ⋅ Aprilyn Borja, Catherine Loveria, Gabriel Nicoleta, Jovit Samaniego
Vishing via Microsoft Teams Facilitates DarkGate Malware Intrusion
DarkGate
2023-12-13 ⋅ Microsoft ⋅ Amy Hogan-Burney
Disrupting the gateway services to cybercrime
Storm-1152
2023-12-12 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Threat actors misuse OAuth applications to automate financially driven attacks
Storm-1283 Storm-1286
2023-12-07 ⋅ Microsoft ⋅ Clint Watts
Russian influence and cyber operations adapt for long haul and exploit war fatigue
Storm-1099