Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2019-10-01 ⋅ vargroup ⋅ Mario Ciccarelli
p0sT5n1F3r - Reverse Engineering of a breach
p0sT5n1F3r
2019-10-01 ⋅ Sophos ⋅ Michael Wood, Rajesh Nataraj, Vikas Singh
Lemon_Duck PowerShell malware cryptojacks enterprise networks
Lemon Duck
2019-10-01 ⋅ CrowdStrike ⋅ Karl Scheuerman, Piotr Wojtyla
Don't miss the forest for the trees gleaning hunting value from too much intrusion data
Winnti
2019-10-01 ⋅ ⋅ Macnica Networks ⋅ Macnica Networks
Trends in Cyber ​​Espionage Targeting Japan 1st Half of 2019
PLEAD TSCookie Datper PLEAD
2019-10-01 ⋅ Virus Bulletin ⋅ Anna Shirokova, María José Erquiaga, Sebastian García
Geost botnet. The story of the discovery of a new Android banking trojan from an OpSec error
Geost
2019-10-01 ⋅ ESET Research ⋅ Zuzana Hromcová
AT COMMANDS, TOR-BASED COMMUNICATIONS: MEET ATTOR, A FANTASY CREATURE AND ALSO A SPY PLATFORM
Attor
2019-10-01 ⋅ Brian Krebs
Mariposa Botnet Author, Darkcode Crime Forum Admin Arrested in Germany
NgrBot Mariposa
2019-10-01 ⋅ Trend Micro ⋅ Jaromír Hořejší, Joseph C. Chen
New Fileless Botnet Novter Distributed by KovCoreG Malvertising Campaign
Divergent
2019-10-01 ⋅ Trend Micro ⋅ Jaromír Hořejší, Joseph C. Chen
New Fileless Botnet Novter Distributed by KovCoreG Malvertising Campaign
Divergent
2019-09-30 ⋅ ⋅ Qianxin ⋅ Red Raindrop Team
Analysis and disclosure of the CIA's cyber arsenal
Lambert
2019-09-30 ⋅ vmware ⋅ Scott Knight
CB Threat Analysis Unit: Technical Analysis of “Crosswalk”
CROSSWALK
2019-09-30 ⋅ Lastline ⋅ Jason Zhang, Stefano Ortolani
HELO Winnti: Attack or Scan?
Winnti
2019-09-28 ⋅ The MalwareMustDie Blog ⋅ unixfreaxjp
MMD-0064-2019 - Linux/AirDropBot
AirDropBot
2019-09-26 ⋅ Juniper ⋅ Paul Kimayong
Masad Stealer: Exfiltrating using Telegram
Masad Stealer
2019-09-26 ⋅ Microsoft ⋅ Microsoft Defender ATP Research Team
Bring your own LOLBin: Multi-stage, fileless Nodersok campaign delivers rare Node.js-based malware
Divergent
2019-09-26 ⋅ Proofpoint ⋅ Bryan Campbell, Jeremy Hedges, Proofpoint Threat Insight Team
New WhiteShadow downloader uses Microsoft SQL to retrieve malware
WhiteShadow Agent Tesla Azorult Crimson RAT Formbook Nanocore RAT NetWire RC NjRAT Remcos
2019-09-26 ⋅ Cisco Talos ⋅ Edmund Brumaghin
Divergent: "Fileless" NodeJS Malware Burrows Deep Within the Host
Divergent
2019-09-25 ⋅ Cylance ⋅ Cylance Research and Intelligence Team
PcShare Backdoor Attacks Targeting Windows Users with FakeNarrator Malware
PcShare
2019-09-25 ⋅ GovCERT.ch ⋅ GovCERT.ch
Trickbot - An analysis of data collected from the botnet
TrickBot
2019-09-25 ⋅ Twitter (@QW5kcmV3) ⋅ Andrew Thompson
Tweet on APT35 activity
SysKit