Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2019-11-16 ⋅ Silas Cutler's Blog ⋅ Silas Cutler
Fresh PlugX October 2019
PlugX
2019-11-15 ⋅ Bleeping Computer ⋅ Ionut Ilascu
New NextCry Ransomware Encrypts Data on NextCloud Linux Servers
Nextcry
2019-11-15 ⋅ Positive Technologies ⋅ Positive Technologies
Studying Donot Team
yty
2019-11-14 ⋅ Youtube (mitrecorp) ⋅ Karl Scheuerman, Piotr Wojtyla
MITRE ATT&CKcon 2.0: How a Threat Hunting Team Has Upgraded Its Use of ATT&CK
Kimsuky
2019-11-14 ⋅ Proofpoint ⋅ Bryan Campbell, Proofpoint Threat Insight Team
TA2101 plays government imposter to distribute malware to German, Italian, and US organizations
Maze TA2101
2019-11-13 ⋅ CrowdStrike ⋅ Jason Rivera, Jen Ayers
Through the Eyes of the Adversary
TrickBot CLOCKWORK SPIDER
2019-11-13 ⋅ ID Ransomware ⋅ Andrew Ivanov
AnteFrigus Ransomware
AnteFrigus
2019-11-12 ⋅ SonicWall ⋅ SonicWall
Meeting a Russian Ransomware Cell
HILDACRYPT
2019-11-12 ⋅ CrowdStrike ⋅ Collin Montenegro, Mark Robinson
Weeding out WannaMine v4.0: Analyzing and Remediating This Mineware Nightmare
WannaMine
2019-11-12 ⋅ Johannes Bader Blog ⋅ Johannes Bader
The DGA of QSnatch
QSnatch
2019-11-12 ⋅ Intezer ⋅ Michael Kajiloti
PureLocker: New Ransomware-as-a-Service Being Used in Targeted Attacks Against Servers
PureLocker
2019-11-12 ⋅ Hatching.io ⋅ Markel Picado
Reversing Qakbot
QakBot
2019-11-11 ⋅ The Register ⋅ Gareth Corfield
If it sounds too good to be true, it most likely is: Nobody can decrypt the Dharma ransomware
Dharma
2019-11-11 ⋅ ⋅ PTSecurity ⋅ PT ESC Threat Intelligence
Operation TA505, part four. Twins
2019-11-11 ⋅ Virus Bulletin ⋅ Hiroshi Soeda, Shusei Tomonaga, Tomoaki Tani, Wataru Takahashi
APT cases exploiting vulnerabilities in region‑specific software
NodeRAT Emdivi PlugX
2019-11-11 ⋅ Binary Defense ⋅ Binary Defense
Revenge Is A Dish Best Served… Obfuscated?
Houdini Revenge RAT
2019-11-09 ⋅ NSFOCUS ⋅ Mina Hao
APT34 Event Analysis Report
BONDUPDATER DNSpionage
2019-11-09 ⋅ Lars Wallenborn
API-Hashing in the Sodinokibi/Revil Ransomware - Why and How?
REvil
2019-11-08 ⋅ Twitter (@certbund) ⋅ CERT-Bund
Tweet on Spam Mails containing MAZE
Maze
2019-11-08 ⋅ Wikipedia ⋅ Various
Wikipedia Entry on Equation Group
Equation Group