Click here to download all references as Bib-File.•
2024-02-29
⋅
CrowdStrike
⋅
The Anatomy of an ALPHA SPIDER Ransomware Attack BlackCat Alpha Spider |
2024-02-29
⋅
StrikeReady
⋅
Don't get BITTER about being targeted -- fight back with the help of the community. Bitter RAT |
2024-02-29
⋅
Margin Research
⋅
Same Same, but Different |
2024-02-29
⋅
SANS ISC
⋅
Dissecting DarkGate: Modular Malware Delivery and Persistence as a Service DarkGate |
2024-02-28
⋅
EchoCTI
⋅
Raccoon Stealer V2.0 Technical Analysis Raccoon |
2024-02-28
⋅
Security Intelligence
⋅
X-Force data reveals top spam trends, campaigns and senior superlatives in 2023 404 Keylogger Agent Tesla Black Basta DarkGate Formbook IcedID Loki Password Stealer (PWS) Pikabot QakBot Remcos |
2024-02-28
⋅
Avast Decoded
⋅
Lazarus and the FudModule Rootkit: Beyond BYOVD with an Admin-to-Kernel Zero-Day FudModule |
2024-02-28
⋅
Twitter (@haxrob)
⋅
Tweet series regarding GTPDOOR GTPDOOR |
2024-02-28
⋅
VMRay
⋅
Just Carry A Ladder: Why Your EDR Let Pikabot Jump Through Pikabot |
2024-02-28
⋅
Spamhaus
⋅
Toot about SmokeLoader dropping Xehook Stealer SmokeLoader |
2024-02-27
⋅
Mandiant
⋅
When Cats Fly: Suspected Iranian Threat Actor UNC1549 Targets Israeli and Middle East Aerospace and Defense Sectors LIGHTRAIL MINIBIKE MINIBUS UNC1549 |
2024-02-27
⋅
Bitdefender
⋅
When Stealers Converge: New Variant of Atomic Stealer in the Wild AMOS |
2024-02-27
⋅
BitSight
⋅
Hunting PrivateLoader: The malware behind InstallsKey PPI service PrivateLoader RisePro |
2024-02-27
⋅
Doubleagent.net
⋅
GTPDOOR - A novel backdoor tailored for covert access over the roaming exchange GTPDOOR |
2024-02-27
⋅
Twitter (@greglesnewich)
⋅
Tweet with context on TA421 / APT29 / Midnight Blizzard / BlueBravo / Cozy Bear WINELOADER |
2024-02-27
⋅
splunk
⋅
Unveiling Phemedrone Stealer: Threat Analysis and Detections Phemedrone Stealer |
2024-02-27
⋅
Github (VenzoV)
⋅
Wikiloader part 3 -> Explorer shellcode WikiLoader |
2024-02-27
⋅
Zscaler
⋅
European diplomats targeted by SPIKEDWINE with WINELOADER WINELOADER SPIKEDWINE |
2024-02-27
⋅
US Department of Defense
⋅
Russian Cyber Actors Use Compromised Routers to Facilitate Cyber Operations MooBot |
2024-02-26
⋅
SpyCloud
⋅
“Pantsless Data”: Decoding Chinese Cybercrime TTPs |