Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-08-18 ⋅ F-Secure Labs ⋅ F-Secure Labs
Lazarus Group: Campaign Targeting the Cryptocurrency Vertical
2020-08-18 ⋅ Arete ⋅ Arete Incident Response
Is Conti the New Ryuk?
Conti Ryuk
2020-08-18 ⋅ Menlo Security ⋅ Krishnan Subramanian
New Attack Alert: Duri
2020-08-18 ⋅ Medium mariohenkel ⋅ Mario Henkel
Decrypt MassLogger 2.4.0.0 configuration
MASS Logger
2020-08-17 ⋅ Cado Security ⋅ Chris Doman
Team TNT – The First Crypto-Mining Worm to Steal AWS Credentials
TeamTNT TeamTNT
2020-08-17 ⋅ Twitter (@Arkbird_SOLG) ⋅ Arkbird
Short twitter thread with analysis on Loup ATM malware
Loup
2020-08-17 ⋅ Aqua ⋅ Yaniv Agman
Uncover Malware Payload Executions Automatically with Tracee
2020-08-17 ⋅ PWC ⋅ PWC UK
WellMess malware: analysis of its Command and Control (C2) server
elf.wellmess
2020-08-17 ⋅ Cado Security ⋅ Chris Doman, James Campbell
Team TNT - The First Crypto-Mining Worm to Steal AWS Credentials
TeamTNT
2020-08-17 ⋅ Twitter (@r3c0nst) ⋅ Frank Boldewin
Tweet on Loup
Loup
2020-08-16 ⋅ ⋅ Hatena Blog ⋅ 谷川哲司
WastedLocker IoC collection
WastedLocker
2020-08-16 ⋅ kienmanowar Blog ⋅ m4n0w4r
Manual Unpacking IcedID Write-up
IcedID
2020-08-15 ⋅ Twitter (@Int2e_) ⋅ Adrien B
Tweet on DoubleFantasy
DoubleFantasy
2020-08-14 ⋅ NSA ⋅ NSA
Drovorub Malware: Fact Sheet & FAQs
2020-08-14 ⋅ Twitter (@VK_intel) ⋅ Vitali Kremez
Tweet on Zloader infection leading to Cobaltstrike Installation
Cobalt Strike Zloader
2020-08-14 ⋅ Zscaler ⋅ Mohd Sadique
PurpleWave - A New Infostealer from Russia
PurpleWave
2020-08-14 ⋅ Binary Defense ⋅ James Quinn
EmoCrash: Exploiting a Vulnerability in Emotet Malware for Defense
Emotet
2020-08-14 ⋅ Twitter (@3xp0rtblog) ⋅ 3xp0rt
Tweet on Osiris
Kronos
2020-08-14 ⋅ Department of Homeland Security ⋅ US-CERT
Alert (AA20-227A): Phishing Emails Used to Deploy KONNI Malware
Konni
2020-08-14 ⋅ Twitter (@James_inthe_box) ⋅ James_inthe_box
Tweet on Echelon Stealer