Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2019-09-24 ⋅ Secureworks ⋅ CTU Research Team
REvil/Sodinokibi Ransomware
REvil GOLD SOUTHFIELD
2019-09-22 ⋅ Proofpoint ⋅ Michael Raggi, Proofpoint Threat Insight Team
LookBack Forges Ahead: Continued Targeting of the United States’ Utilities Sector Reveals Additional Adversary TTPs
Lookback TA410
2019-09-19 ⋅ NSHC ⋅ ThreatRecon Team
Hagga of SectorH01 continues abusing Bitly, Blogger and Pastebin to deliver RevengeRAT and NanoCore
Nanocore RAT Revenge RAT
2019-09-18 ⋅ Symantec ⋅ Security Response Attack Investigation Team
Tortoiseshell Group Targets IT Providers in Saudi Arabia in Probable Supply Chain Attacks
SysKit Tortoiseshell
2019-09-16 ⋅ Malwarebytes ⋅ Threat Intelligence Team
Emotet is back: botnet springs back to life with new spam campaign
Emotet
2019-09-11 ⋅ Secureworks ⋅ CTU Research Team
COBALT DICKENS Goes Back to School…Again
Silent Librarian
2019-09-06 ⋅ Proofpoint ⋅ Proofpoint Threat Insight Team
PsiXBot Now Using Google DNS over HTTPS and Possible New Sexploitation Module
PsiX
2019-09-05 ⋅ Proofpoint ⋅ Michael Walsh, Proofpoint Threat Insight Team
Seems Phishy: Back to School Lures Target University Students and Staff
Silent Librarian
2019-09-04 ⋅ SonicWall ⋅ SonicWall CaptureLabs Threats Research Team
HILDACRYPT ransomware actively spreading in the wild
HILDACRYPT
2019-08-29 ⋅ ThreatRecon ⋅ ThreatRecon Team
SectorJ04 Group’s Increased Activity in 2019
FlawedAmmyy ServHelper TA505
2019-08-28 ⋅ Cylance ⋅ Cylance Threat Research Team
Inside the APT28 DLL Backdoor Blitz
PocoDown
2019-08-27 ⋅ Secureworks ⋅ CTU Research Team
TrickBot Modifications Target U.S. Mobile Users
TrickBot WIZARD SPIDER
2019-08-27 ⋅ Secureworks ⋅ CTU Research Team
LYCEUM Takes Center Stage in Middle East Campaign
LYCEUM
2019-08-26 ⋅ Qianxin ⋅ Red Raindrop Team
APT-C-09 Reappeared as Conflict Intensified Between India and Pakistan
BadNews
2019-08-24 ⋅ SonicWall ⋅ SonicWall CaptureLabs Threats Research Team
Simda Process Injection into Winlogon DGA Found
Simda
2019-08-12 ⋅ Proofpoint ⋅ Proofpoint Threat Insight Team
PsiXBot Continues to Evolve with Updated DNS Infrastructure
PsiX
2019-08-05 ⋅ Microsoft ⋅ MSRC Team
Corporate IoT – a path to intrusion (APT28/STRONTIUM)
VPNFilter
2019-08-02 ⋅ NSHC ⋅ ThreatRecon Team
SectorE02 Updates YTY Framework in New Targeted Campaign Against Pakistan Government
yty
2019-08-01 ⋅ Proofpoint ⋅ Dennis Schwarz, Michael Raggi, Proofpoint Threat Insight Team
LookBack Malware Targets the United States Utilities Sector with Phishing Attacks Impersonating Engineering Licensing Boards
GUP Proxy Tool Lookback TA410
2019-07-31 ⋅ Proofpoint ⋅ Dennis Schwarz, Kade Harmon, Kafeine, Proofpoint Threat Insight Team
SystemBC is like Christmas in July for SOCKS5 Malware and Exploit Kits
SystemBC