Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-07-09 ⋅ Checkpoint ⋅ Aviran Hazum, Bogdan Melnykov, Israel Wernik
New Joker variant hits Google Play with an old trick
Joker
2020-07-09 ⋅ ESET Research ⋅ Matías Porolli
More evil: A deep look at Evilnum and its toolset
EVILNUM More_eggs EVILNUM TerraPreter TerraStealer TerraTV Evilnum
2020-07-08 ⋅ ThaiCERT ⋅ ThaiCERT
Threat Group Cards: A Threat Actor Encyclopedia
TA516 TA547 TA554 TA555
2020-07-08 ⋅ SentinelOne ⋅ Phil Stokes
“EvilQuest” Rolls Ransomware, Spyware & Data Theft Into One
EvilQuest
2020-07-08 ⋅ Bitdefender ⋅ Bogdan Botezatu, Janos Gergo Szeles
Kingminer –a Crypto-Jacking Botnet Under the Scope
Kingminer
2020-07-08 ⋅ Trend Micro ⋅ Trend Micro Threat Research Team
Ransomware Report: Avaddon and New Techniques Emerge, Industrial Sector Targeted
Avaddon
2020-07-08 ⋅ Trend Micro ⋅ Trend Micro
New Mirai Variant Expands Arsenal, Exploits CVE-2020-10173
Mirai
2020-07-08 ⋅ Seqrite ⋅ Kalpesh Mantri
Operation ‘Honey Trap’: APT36 Targets Defense Organizations in India
Crimson RAT
2020-07-08 ⋅ COLUMBIA | SIPA ⋅ Jennifer Keltz, John Patrick Dees, John Sakellariadis, Katherine von Ofenheim, Lan Pelekis, Matthew Armelli, Max Egar, Neal Pollard, Stuart Caudill, Vipratap Vikram Singh
Named But Hardly Shamed: What is the Impact of Information Disclosures on an APT Operations?
2020-07-08 ⋅ xunison ⋅ xunison
Analysis of SamoRAT
SamoRAT
2020-07-08 ⋅ Medium (@sevdraven) ⋅ Sébastien Larinier
How to unpack Chinoxy backdoor and decipher the configuration of the backdoor
Chinoxy
2020-07-08 ⋅ Intel 471 ⋅ Intel 471
Iran’s domestic espionage: Lessons from recent data leaks
2020-07-08 ⋅ Palantir
Restricting SMB-based lateral movement in a Windows environment
2020-07-08 ⋅ VMWare Carbon Black ⋅ Brian Baskin
TAU Threat Discovery: Conti Ransomware
Conti
2020-07-07 ⋅ Department of Justice ⋅ Department of Justice
United States District Court for the Eastern District of Washington vs. Li Xiaoyu (oro0lxy) and Dong Jiazhi
BRONZE SPRING
2020-07-07 ⋅ FireEye ⋅ Matthew Haigh, Trevor Haskell
Configuring a Windows Domain to Dynamically Analyze an Obfuscated Lateral Movement Tool
2020-07-07 ⋅ ⋅ ID Ransomware ⋅ Andrew Ivanov
SilentDeath Ransomware
2020-07-07 ⋅ Hornetsecurity ⋅ Hornetsecurity Security Lab
Clop, Clop! It’s a TA505 HTML malspam analysis
Clop Get2
2020-07-07 ⋅ MWLab ⋅ Ladislav Bačo
Cobalt Strike stagers used by FIN6
Cobalt Strike
2020-07-07 ⋅ GEMINI
"Keeper" Magecart Group Infects 570 Sites
magecart