Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-07-27 ⋅ SentinelOne ⋅ Phil Stokes
Four Distinct Families of Lazarus Malware Target Apple’s macOS Platform
AppleJeus Casso Dacls WatchCat
2020-07-22 ⋅ SentinelOne ⋅ Jason Reaves, Joshua Platt
Enter the Maze: Demystifying an Affiliate Involved in Maze (SNOW)
ISFB Maze TrickBot Zloader
2020-07-08 ⋅ SentinelOne ⋅ Phil Stokes
“EvilQuest” Rolls Ransomware, Spyware & Data Theft Into One
EvilQuest
2020-06-17 ⋅ SentinelOne ⋅ Michael Myngerbayev
A Click from the Backyard | Analysis of CVE-2020-9332, a Vulnerable USB Redirection Software
2020-06-08 ⋅ SentinelOne ⋅ Phil Stokes
A Guide to macOS Threat Hunting and Incident Response
2020-05-20 ⋅ SentinelOne ⋅ Jim Walter
Why On-Device Detection Matters: New Ramsay Trojan Targets Air-Gapped Networks
Ramsay
2020-05-15 ⋅ SentinelOne ⋅ Phil Stokes
A Guide to macOS Threat Hunting and Incident Response
2020-05-14 ⋅ SentinelOne ⋅ Jason Reaves
Deep Dive Into TrickBot Executor Module “mexec”: Reversing the Dropper Variant
TrickBot
2020-05-11 ⋅ SentinelOne ⋅ Gal Kristal
The Anatomy of an APT Attack and CobaltStrike Beacon’s Encoded Configuration
Cobalt Strike
2020-05-04 ⋅ SentinelOne ⋅ Jim Walter
Meet NEMTY Successor, Nefilim/Nephilim Ransomware
Nefilim Nemty
2020-04-08 ⋅ SentinelOne ⋅ Jason Reaves
Deep Dive Into TrickBot Executor Module “mexec”: Hidden “Anchor” Bot Nexus Operations
Anchor TrickBot
2020-03-04 ⋅ SentinelOne ⋅ Jason Reaves
Breaking TA505’s Crypter with an SMT Solver
Clop CryptoMix MINEBRIDGE
2020-02-26 ⋅ SentinelOne ⋅ Jason Reaves
Revealing the Trick | A Deep Dive into TrickLoader Obfuscation
TrickBot
2020-02-25 ⋅ SentinelOne ⋅ Jim Walter
DPRK Hidden Cobra Update: North Korean Malicious Cyber Activity
ARTFULPIE BISTROMATH BUFFETLINE CHEESETRAY HOPLIGHT HOTCROISSANT SLICKSHOES
2020-02-05 ⋅ SentinelOne ⋅ Vitali Kremez
Pro-Russian CyberSpy Gamaredon Intensifies Ukrainian Security Targeting
Pteranodon
2020-01-23 ⋅ SentinelOne ⋅ Jim Walter
New Snake Ransomware Adds Itself to the Increasing Collection of Golang Crimeware
Snake
2020-01-09 ⋅ SentinelOne ⋅ Jason Reaves, Joshua Platt, Vitali Kremez
Top-Tier Russian Organized Cybercrime Group Unveils Fileless Stealthy “PowerTrick” Backdoor for High-Value Targets
TrickBot WIZARD SPIDER
2019-11-21 ⋅ SentinelOne ⋅ Mario Ciccarelli
Going Deep | A Guide to Reversing Smoke Loader Malware
SmokeLoader
2019-08-29 ⋅ SentinelOne ⋅ Daniel Bunce
Gootkit Banking Trojan | Part 2: Persistence & Other Capabilities
GootKit
2019-08-15 ⋅ SentinelOne ⋅ Daniel Bunce
Gootkit Banking Trojan | Deep Dive into Anti-Analysis Features
GootKit
2019-05-20 ⋅ SentinelOne ⋅ SentinelOne
GozNym Banking Malware: Gang Busted, But Is That The End?
Nymaim
2018-09-20 ⋅ SentinelOne ⋅ Phil Stokes
On the Trail of OSX.FairyTale | Adware Playing at Malware
FailyTale
2017-11-28 ⋅ SentinelOne ⋅ Arnaud Abbati
OSX.CPUMEANER: New Cryptocurrency Mining Trojan Targets MacOS
CpuMeaner
2017-08-23 ⋅ SentinelOne ⋅ Arnaud Abbati
CS: Go Hacks for Mac – OSX.Pwnet.A
Pwnet
2016-11-08 ⋅ SentinelOne ⋅ Arnaud Abbati
Analysis of IOS.GUIINJECT Adware Library
GuiInject
2016-05-05 ⋅ SentinelOne ⋅ Joseph Landry
Sophisticated New Packer Identified in CryptXXX Ransomware Sample
CryptXXXX