Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2019-07-09 ⋅ Cisco Talos ⋅ Paul Rascagnères
Sea Turtle keeps on swimming, finds new victims, DNS hijacking techniques
Sea Turtle
2019-07-09 ⋅ JPCERT/CC ⋅ Tomoaki Tani, Yukako Uchida
Spear Phishing against Cryptocurrency Businesses
CageyChameleon
2019-07-09 ⋅ Talos Intelligence ⋅ Danny Adamitis, Paul Rascagnères
Sea Turtle Keeps on Swimming
2019-07-09 ⋅ Check Point ⋅ Israel Gubi
The 2019 Resurgence of Smokeloader
SmokeLoader
2019-07-09 ⋅ Wikipedia ⋅ Various
Operation Newscaster
Charming Kitten
2019-07-09 ⋅ Fortinet ⋅ Kai Lu
A Deep Dive Into IcedID Malware: Part I - Unpacking, Hooking and Process Injection
IcedID
2019-07-08 ⋅ Medium Sebdraven ⋅ Sébastien Larinier
Copy cat of APT Sidewinder ?
AllaKore SideCopy
2019-07-08 ⋅ Johannes Bader
The DGA of Pitou
Pitou
2019-07-08 ⋅ 0ffset Blog ⋅ 0verfl0w_
Analyzing KSL0T (Turla’s Keylogger), Part 2 – Reupload
KSL0T
2019-07-08 ⋅ SANS ⋅ Josh M. Bryant, Robert Falcone
Hunting Webshells: Tracking TwoFace
TwoFace
2019-07-08 ⋅ KrebsOnSecurity ⋅ Brian Krebs
Who’s Behind the GandCrab Ransomware?
Gandcrab
2019-07-08 ⋅ 0ffset Blog ⋅ 0verfl0w_
Analyzing KSL0T (Turla’s Keylogger), Part 1 – Reupload
KSL0T
2019-07-08 ⋅ Microsoft ⋅ Microsoft Defender ATP Research Team
Dismantling a fileless campaign: Microsoft Defender ATP’s Antivirus exposes Astaroth attack
Astaroth
2019-07-08 ⋅ ESET Research ⋅ Zuzana Hromcová
Malicious campaign targets South Korean users with backdoor‑laced torrents
GoBotKR
2019-07-04 ⋅ Trend Micro ⋅ Trend Micro
Latest Spam Campaigns from TA505 Now Using New Malware Tools Gelup and FlowerPippi
AndroMut
2019-07-03 ⋅ Fortinet ⋅ Dario Durando
BianLian: A New Wave Emerges
BianLian
2019-07-03 ⋅ Kaspersky Labs ⋅ Artur Pakulov, Fedor Sinitsyn, Orkhan Mamedov
Sodin ransomware exploits Windows vulnerability and processor architecture
REvil
2019-07-03 ⋅ ⋅ ID Ransomware ⋅ Andrew Ivanov
Lilocked Ransomware
LiLock
2019-07-02 ⋅ Yoroi ⋅ Antonio Farina, Antonio Pirozzi, Luca Mella
LooCipher: The New Infernal Ransomware
2019-07-02 ⋅ Proofpoint ⋅ Dennis Schwarz, Matthew Mesa, Proofpoint Threat Insight Team
TA505 begins summer campaigns with a new pet malware downloader, AndroMut, in the UAE, South Korea, Singapore, and the United States
AndroMut FlawedAmmyy