Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2024-03-06 ⋅ Proofpoint ⋅ Dusty Miller, Jake G, Selena Larson
TA4903: Actor Spoofs U.S. Government, Small Businesses in Phishing, BEC Bids
TA4903
2024-03-06 ⋅ BushidoToken ⋅ BushidoToken
Tracking Adversaries: UAC-0050, Cracking The DaVinci Code
2024-03-05 ⋅ CIP ⋅ paloalto Networks: Unit42, State Service of Special Communication and Information Protection of Ukraine (CIP)
Semi-Annual Chronicles of UAC-0006 Operations
SmokeLoader
2024-03-05 ⋅ Reliaquest ⋅ RELIAQUEST THREAT RESEARCH TEAM
Anxun and Chinese APT Activity
ShadowPad
2024-03-04 ⋅ Proofpoint ⋅ Kelsey Merriman, Selena Larson, Tommy Madjar
TA577’s Unusual Attack Chain Leads to NTLM Data Theft
2024-03-04 ⋅ ⋅ Weixin ⋅ Hunting Shadow Lab
Shadow Hunting: Analysis of APT37’s attack activities against South Korea using North Korean political topics
RokRAT
2024-03-03 ⋅ OALabs ⋅ herrcore
GitHub Bug Used to Infect Game Hackers With Lua Malware
SmartLoader
2024-02-29 ⋅ Lookout ⋅ Lookout
CryptoChameleon: New Phishing Tactics Exhibited in FCC-Targeted Attack
CryptoChameleon
2024-02-29 ⋅ Vipyr Security ⋅ Vipyr Security
Novel ELF64 Remote Access Tool Embedded in Malicious PyPI Uploads
SimpleTea
2024-02-29 ⋅ CrowdStrike ⋅ Jean-Philippe Teissier
The Anatomy of an ALPHA SPIDER Ransomware Attack
BlackCat Alpha Spider
2024-02-29 ⋅ StrikeReady ⋅ StrikeReady Labs
Don't get BITTER about being targeted -- fight back with the help of the community.
Bitter RAT
2024-02-28 ⋅ Bleeping Computer ⋅ Lawrence Abrams
Epic Games: "Zero evidence" we were hacked by Mogilevich gang
Mogilevich
2024-02-28 ⋅ The Record ⋅ Alexander Martin
Irish foreign affairs ministry says 'no evidence' of cyber breach following extortion claim
Mogilevich
2024-02-28 ⋅ eSentire ⋅ eSentire Threat Response Unit (TRU)
XRed Backdoor: The Hidden Threat in Trojanized Programs
XRed
2024-02-28 ⋅ EchoCTI ⋅ Bilal BAKARTEPE, bixploit
Raccoon Stealer V2.0 Technical Analysis
Raccoon
2024-02-27 ⋅ Mandiant ⋅ Ashley Frazer, Ashley Pearson, Austin Larsen, Jacob Thompson, Matt Lin, Robert Wallace, Ryan Gandrud
Cutting Edge, Part 3: Investigating Ivanti Connect Secure VPN Exploitation and Persistence Attempts
BUSHWALK PITFUEL PITHOOK PITSOCK UNC5325
2024-02-27 ⋅ Mandiant ⋅ Ashley Frazer, Ashley Pearson, Austin Larsen, Jacob Thompson, Matt Lin, Robert Wallace, Ryan Gandrud
Cutting Edge, Part 3: Investigating Ivanti Connect Secure VPN Exploitation and Persistence Attempts
BUSHWALK Kubo Injector PITFUEL PITHOOK PITSOCK
2024-02-27 ⋅ Cisco Talos ⋅ Guilherme Venere, Jacob Finn, Jacob Stanfill, James Nutland, Tucker Favreau
TimbreStealer campaign targets Mexican users with financial lures
TimbreStealer
2024-02-27 ⋅ Mandiant ⋅ Chen Evgi, Jonathan Leathery, Ofir Rozmann
When Cats Fly: Suspected Iranian Threat Actor UNC1549 Targets Israeli and Middle East Aerospace and Defense Sectors
LIGHTRAIL MINIBIKE MINIBUS UNC1549
2024-02-27 ⋅ Doubleagent.net ⋅ haxrob
GTPDOOR - A novel backdoor tailored for covert access over the roaming exchange
GTPDOOR