Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2023-08-18 ⋅ TEAMT5 ⋅ Still Hsu, Zih-Cing Liao
Unmasking CamoFei: An In-depth Analysis of an Emerging APT Group Focused on Healthcare Sectors in East Asia
CatB Cobalt Strike DoorMe GIMMICK
2023-08-18 ⋅ d01a ⋅ Mohamed Adel
Understanding Syscalls: Direct, Indirect, and Cobalt Strike Implementation
Cobalt Strike
2023-08-17 ⋅ CISA ⋅ CISA
MAR-10459736.r1.v1 WHIRLPOOL Backdoor
WHIRLPOOL UNC4841
2023-08-17 ⋅ Brandefense ⋅ Brandefense
Godfather Android Banking Trojan Technical Analysis
Godfather
2023-08-17 ⋅ SentinelOne ⋅ Aleksandar Milenkoski, Tom Hegel
Chinese Entanglement | DLL Hijacking in the Asian Gambling Sector
Cobalt Strike HUI Loader BRONZE STARLIGHT
2023-08-17 ⋅ Lumen ⋅ Black Lotus Labs
No Rest For The Wicked: HiatusRAT Takes Little Time Off In A Return To Action
HiatusRAT
2023-08-16 ⋅ Knownsec ⋅ Knownsec 404 Team
APT-K-47 “Mysterious Elephant”, a new APT organization in South Asia
ORPCBackdoor Confucious
2023-08-14 ⋅ Group-IB ⋅ Artem Grischenko, Pavel Naumov
Breaking down Gigabud banking malware with Group-IB Fraud Matrix
Gigabud
2023-08-10 ⋅ Avast Decoded ⋅ Threat Research Team
Unveiling the Dominance of Scams Amidst a 24% Surge in Blocked Attacks
Storm-1567
2023-08-10 ⋅ Trellix ⋅ Antonio Ribeiro, Jonell Baltazar
Exploring New Techniques of Fake Browser Updates Leading to NetSupport RAT
NetSupportManager RAT
2023-08-10 ⋅ CrowdStrike ⋅ Counter Adversary Operations, Ken Balint, Marco Ortisi, Nicolas Zilio
Discovering and Blocking a Zero-Day Exploit with CrowdStrike Falcon Complete: The Case of CVE-2023-36874
2023-08-10 ⋅ EclecticIQ ⋅ Arda Büyükkaya
German Embassy Lure: Likely Part of Campaign Against NATO Aligned Ministries of Foreign Affairs
Unidentified 107 (APT29)
2023-08-10 ⋅ Kaspersky ⋅ Kurt Baumgartner
Focus on DroxiDat/SystemBC
SystemBC
2023-08-09 ⋅ BleepingComputer ⋅ Bill Toulas
Rhysida ransomware behind recent attacks on healthcare
Rhysida
2023-08-08 ⋅ CISA ⋅ CISA
MAR-10454006.r4.v2 SEASPY and WHIRLPOOL Backdoors
SEASPY WHIRLPOOL UNC4841
2023-08-08 ⋅ CrowdStrike ⋅ CrowdStrike
CrowdStrike 2023 Threat Hunting Report
SocksProxyGo
2023-08-08 ⋅ Techtarget ⋅ Alecander Culafi
CrowdStrike observes massive spike in identity-based attacks
VICE SPIDER
2023-08-08 ⋅ Cisco Talos ⋅ Cisco Talos
What Cisco Talos knows about the Rhysida ransomware
Rhysida
2023-08-08 ⋅ Checkpoint ⋅ Checkpoint Research
THE RHYSIDA RANSOMWARE: ACTIVITY ANALYSIS AND TIES TO VICE SOCIETY
Rhysida Vanilla Tempest
2023-08-08 ⋅ Security Service of Ukraine ⋅ Security Service of Ukraine
Cyber Operation of Russian Intelligence Services as a Component of Confrontation on the Battlefield