Click here to download all references as Bib-File.•
2023-12-13
⋅
Trend Micro
⋅
Vishing via Microsoft Teams Facilitates DarkGate Malware Intrusion DarkGate |
2023-12-13
⋅
Fortinet
⋅
TeamCity Intrusion Saga: APT29 Suspected Among the Attackers Exploiting CVE-2023-42793 GraphDrop |
2023-12-13
⋅
CISA
⋅
Russian Foreign Intelligence Service (SVR) Exploiting JetBrains TeamCity CVE Globally GraphDrop |
2023-12-06
⋅
splunk
⋅
Unmasking the Enigma: A Historical Dive into the World of PlugX Malware PlugX |
2023-12-05
⋅
Proofpoint
⋅
TA422’s Dedicated Exploitation Loop—the Same Week After Week |
2023-12-03
⋅
Medium OSINT Team
⋅
SkidSec Hacker Group Announces Plans to Spread North Korean Propaganda Through Hacked Printers in South Korea SkidSec |
2023-11-30
⋅
Blackberry
⋅
AeroBlade on the Hunt Targeting the U.S. Aerospace Industry AeroBlade |
2023-11-13
⋅
Twitter (@malwrhunterteam)
⋅
Tweet on Qilin Linux Locker Qilin |
2023-11-13
⋅
Twitter (@malwrhunterteam)
⋅
Tweet on Linux version of Rhysida Rhysida |
2023-11-10
⋅
⋅
AhnLab
⋅
Detection of attacks exploiting asset management software (Andariel Group) Lilith Tiger RAT |
2023-11-09
⋅
CYBERWARZONE
⋅
Tasnim News Hacked By WeRedEvils WeRedEvils |
2023-10-27
⋅
Kaspersky Labs
⋅
Security Analyst Summit 2023: key research TetrisPhantom |
2023-10-26
⋅
Avast Decoded
⋅
Rhysida Ransomware Technical Analysis Rhysida |
2023-10-19
⋅
Symantec
⋅
Crambus: New Campaign Targets Middle Eastern Government Clipog |
2023-10-18
⋅
Microsoft
⋅
Multiple North Korean threat actors exploiting the TeamCity CVE-2023-42793 vulnerability FeedLoad ForestTiger HazyLoad RollSling Silent Chollima |
2023-10-17
⋅
⋅
AhnLab
⋅
Lazarus Group’s Operation Dream Magic LazarDoor wAgentTea |
2023-10-16
⋅
Sekoia
⋅
ClearFake: a newcomer to the “fake updates” threats landscape ClearFake |
2023-10-13
⋅
AhnLab
⋅
Analysis Report on Lazarus Threat Group’s Volgmer and Scout Malware JessieConTea Scout Volgmer |
2023-10-12
⋅
Trendmicro
⋅
DarkGate Opens Organizations for Attack via Skype, Teams DarkGate |
2023-10-12
⋅
Cluster25
⋅
CVE-2023-38831 Exploited by Pro-Russia Hacking Groups in RU-UA Conflict Zone for Credential Harvesting Operations Agent Tesla Crimson RAT Nanocore RAT SmokeLoader |