Click here to download all references as Bib-File.•
| 2025-09-30
⋅
Synthient
⋅
GhostSocks: From Initial Access to Residential Proxy GhostSocks Lumma Stealer |
| 2025-09-29
⋅
The DFIR Report
⋅
From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion Brute Ratel C4 Cobalt Strike Latrodectus |
| 2025-09-29
⋅
Shindan
⋅
DHCSpy - Discovering the Iranian APT MuddyWater DHCSpy |
| 2025-09-28
⋅
Malasada Tech
⋅
Oyster Malware Delivery via Teams Fake App Broomstick |
| 2025-09-26
⋅
abuse.ch
⋅
Twitter Post Kamasers |
| 2025-09-26
⋅
Arctic Wolf
⋅
Smash and Grab: Aggressive Akira Campaign Targets SonicWall VPNs, Deploys Ransomware in an Hour or Less Akira Akira |
| 2025-09-26
⋅
BlackPoint
⋅
Malicious Teams Installers Drop Oyster Malware Broomstick |
| 2025-09-25
⋅
Logpoint
⋅
XWorm RAT analysis: Steal, persist & control XWorm |
| 2025-09-25
⋅
Trend Micro
⋅
New LockBit 5.0 Targets Windows, Linux, ESXi LockBit LockBit |
| 2025-09-25
⋅
ESET Research
⋅
DeceptiveDevelopment: From primitive crypto theft to sophisticated AI-based deception BeaverTail OtterCookie InvisibleFerret PylangGhost AkdoorTea GolangGhost Tropidoor TsunamiKit |
| 2025-09-25
⋅
Virus Bulletin
⋅
DeceptiveDevelopment: From primitive crypto theft to sophisticated AI-based deception BeaverTail OtterCookie InvisibleFerret PylangGhost AkdoorTea GolangGhost Tropidoor TsunamiKit |
| 2025-09-25
⋅
Koi Security
⋅
First Malicious MCP in the Wild: The Postmark Backdoor That's Stealing Your Emails |
| 2025-09-24
⋅
Natto Thoughts
⋅
Who is Salt Typhoon Really? Unraveling the Attribution Challenge |
| 2025-09-24
⋅
Zscaler
⋅
COLDRIVER Updates Arsenal with BAITSWITCH and SIMPLEFIX NOROBOT |
| 2025-09-24
⋅
Google
⋅
Another BRICKSTORM: Stealthy Backdoor Enabling Espionage into Tech and Legal Sectors BRICKSTORM |
| 2025-09-24
⋅
The Hacker News
⋅
Chinese Hackers RedNovember Target Global Governments Using Pantegana and Cobalt Strike Cobalt Strike Leslieloader Pantegana SparkRAT Storm-2077 |
| 2025-09-24
⋅
Netresec
⋅
Gh0stKCP Protocol PseudoManuscrypt ValleyRAT |
| 2025-09-23
⋅
Malwarebytes
⋅
Fake Malwarebytes, LastPass, and others on GitHub serve malware AMOS |
| 2025-09-23
⋅
Bleeping Computer
⋅
Cloudflare mitigates new record-breaking 22.2 Tbps DDoS attack Aisuru |
| 2025-09-23
⋅
Zscaler
⋅
YiBackdoor: A New Malware Family With Links to IcedID and Latrodectus YiBackdoor |