Click here to download all references as Bib-File.•
| 2025-02-20
⋅
Silent Push
⋅
Tweet on Tracking ValleyRAT Domains with ICP Licenses ValleyRAT |
| 2025-02-20
⋅
Infrawatch
⋅
GhostSocks - Lumma's Partner In Proxy GhostSocks Lumma Stealer |
| 2025-02-19
⋅
Natto Thoughts
⋅
The Pangu Team—iOS Jailbreak and Vulnerability Research Giant: A Member of i-SOON’s Exploit-Sharing Network |
| 2025-02-19
⋅
0x0d4y
⋅
Technical Analysis of Lockbit4.0 Evasion Tales LockBit |
| 2025-02-18
⋅
Reliaquest
⋅
Threat Spotlight: Inside the World’s Fastest Rising Ransomware Operator — BlackLock BlackLock |
| 2025-02-18
⋅
K7 Security
⋅
Exposing the Deceit: Phishing Sites Impersonating Government Entities |
| 2025-02-18
⋅
Varist
⋅
Malvertisements, Fake Captchas and Infostealers Lumma Stealer |
| 2025-02-18
⋅
Orange Cyberdefense
⋅
IOCs Green Nailao campaign (NailaoLocker, ShadowPad) NailaoLocker PlugX ShadowPad |
| 2025-02-18
⋅
inversecos
⋅
An inside look at NSA (Equation Group) TTPs from China’s lense SECONDDATE |
| 2025-02-18
⋅
Proofpoint
⋅
An Update on Fake Updates: Two New Actors, and New Mac Malware Marcher FAKEUPDATES FrigidStealer Lumma Stealer |
| 2025-02-15
⋅
c-b.io
⋅
Dissecting a fresh BlankGrabber sample BlankGrabber |
| 2025-02-15
⋅
Medium TRAC Labs
⋅
Don’t Ghost the SocGholish: GhostWeaver Backdoor FAKEUPDATES GhostWeaver |
| 2025-02-14
⋅
YouTube (Uriel Kosayev)
⋅
Reverse Engineering ARM based Mirai Botnet Mirai |
| 2025-02-14
⋅
Twitter (@DTCERT)
⋅
Twitter Thread on a password-protected loader observed in a vishing campaign Unidentified 120 |
| 2025-02-13
⋅
Recorded Future
⋅
Stimmen aus Moskau: Russian Influence Operations Target German Elections Storm-1516 |
| 2025-02-13
⋅
Moonlock
⋅
Cybercrooks Are Using Fake Job Listings to Steal Crypto GolangGhost |
| 2025-02-13
⋅
Securonix
⋅
Analyzing DEEP#DRIVE: North Korean Threat Actors Observed Exploiting Trusted Platforms for Targeted Attacks RandomQuery |
| 2025-02-13
⋅
Symantec
⋅
China-linked Espionage Tools Used in Ransomware Attacks PlugX |
| 2025-02-13
⋅
Recorded Future
⋅
Inside the Scam: North Korea’s IT Worker Threat BeaverTail OtterCookie InvisibleFerret |
| 2025-02-13
⋅
Recorded Future
⋅
RedMike (Salt Typhoon) Exploits Vulnerable Cisco Devices of Global Telecommunications Providers GhostEmperor |