Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2018-12-21 ⋅ FireEye ⋅ Alex Orleans, Andrew Thompson, Geoff Ackerman, Nick Carr, Rick Cole
OVERRULED: Containing a Potentially Destructive Adversary
POWERTON PoshC2 pupy
2018-11-19 ⋅ FireEye ⋅ Andrew Thompson, Ben Withnell, Jonathan Leathery, Matthew Dunwoody, Michael Matonis, Nick Carr
Not So Cozy: An Uncomfortable Examination of a Suspected APT29 Phishing Campaign
Cobalt Strike
2018-11-06 ⋅ Twitter (@ItsReallyNick) ⋅ Nick Carr
Tweet on a GRIFFON sample
Griffon
2018-10-01 ⋅ FireEye ⋅ Katie Nickels, Regina Elwell
ATT&CKing FIN7
Bateleur BELLHOP Griffon ANTAK POWERPIPE POWERSOURCE HALFBAKED BABYMETAL Carbanak Cobalt Strike DNSMessenger DRIFTPIN PILLOWMINT SocksBot
2018-08-01 ⋅ FireEye ⋅ Barry Vengerik, Kimberly Goody, Nick Carr, Steve Miller
On the Hunt for FIN7: Pursuing an Enigmatic and Evasive Global Criminal Operation
BELLHOP POWERPIPE BABYMETAL SocksBot FIN7
2018-05-09 ⋅ Cisco Talos ⋅ Christopher Marczewski, Nick Biasini, Nick Lister
Gandcrab Ransomware Walks its Way onto Compromised Sites
Gandcrab
2017-12-07 ⋅ FireEye ⋅ Jacqueline O’Leary, Manish Sardiwal, Nalani Fraser, Nick Richard, Vincent Cannon, Yogesh Londhe
New Targeted Attack in the Middle East by APT34, a Suspected Iranian Threat Group, Using CVE-2017-11882 Exploit
OilRig
2017-10-26 ⋅ FireEye ⋅ Barry Vengerik, Ben Read, Brian Mordosky, Christopher Glyer, Ian Ahl, Matt Williams, Michael Matonis, Nick Carr
BACKSWING - Pulling a BADRABBIT Out of a Hat
EternalPetya
2017-10-24 ⋅ Cisco Talos ⋅ Nick Biasini
Threat Spotlight: Follow the Bad Rabbit
EternalPetya
2017-09-21 ⋅ FireEye ⋅ Nick Carr, Stuart Davis
APT33: New Insights into Iranian Cyber Espionage Group
APT33
2017-08-08 ⋅ SC Magazine ⋅ Doug Olenick
HBO breach accomplished with hard work by hacker, poor security practices by victim
Charming Kitten
2017-06-30 ⋅ FireEye ⋅ Daniel Bohannon, Nick Carr
Obfuscation in the Wild: Targeted Attackers Lead the Way in Evasion Techniques
FIN8
2017-05-24 ⋅ BrightTALK (FireEye) ⋅ Nick Carr
APT32: New Cyber Espionage Group
APT32
2017-05-14 ⋅ FireEye ⋅ Nick Carr
Cyber Espionage is Alive and Well: APT32 and the Threat to Global Corporations
OceanLotus Cuegoe KOMPROGO SOUNDBITE APT32
2017-04-24 ⋅ FireEye ⋅ Barry Vengerik, Dominik Weber, Nick Carr, Saravanan Mohankumar, Yogesh Londhe
FIN7 Evolution and the Phishing LNK
HALFBAKED FIN7
2017-03-11 ⋅ Marc Maiffret's Blog ⋅ Marc Maiffret
Wikileaks Vault7 JQJSNICKER code leak
JQJSNICKER
2017-02-15 ⋅ Adventures in Security ⋅ Nick Hoffman
The Rambo Backdoor
Rambo
2017-02-15 ⋅ Morphick ⋅ Jeremy Humble, Nick Hoffman
Deep Dive on the DragonOK Rambo Backdoor
Rambo DragonOK
2016-12-14 ⋅ Adventures in Security ⋅ Nick Hoffman
MiKey - A Linux keylogger
MiKey
2016-11-28 ⋅ SecurityKitten Blog ⋅ Nick Hoffman
The KLRD Keylogger
KLRD
2016-11-15 ⋅ Nick Hoffman
ScanPOS, new POS malware being distributed by Kronos
ScanPOS
2015-11-16 ⋅ Nick Hoffman
Introducing LogPOS
LogPOS
2015-07-14 ⋅ Nick Hoffman
BernhardPOS
BernhardPOS
2015-03-20 ⋅ Cisco Talos ⋅ Alain Zidouemba, Andrea Allievi, Angel Villegas, Ben Baker, Douglas Goddard, JJ Cummings, Nick Biasini, William Largent
Threat Spotlight: PoSeidon, A Deep Dive Into Point of Sale Malware
FindPOS
2015-01-11 ⋅ Security Kitten Blog ⋅ Nick Hoffman
The Mozart RAM Scraper
mozart
2015-01-08 ⋅ SecurityKitten Blog ⋅ Nick Hoffman
Getmypass Point of Sale Malware Update
GetMyPass
2014-12-01 ⋅ SecurityKitten Blog ⋅ Nick Hoffman
LusyPOS and Tor
2014-11-26 ⋅ Nick Hoffman
Getmypass Point of Sale Malware
GetMyPass
2014-11-25 ⋅ Adventures in Security ⋅ Nick Hoffman
Curious Korlia
Korlia