Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2024-01-23 ⋅ CSIRT-CTI ⋅ CSIRT-CTI
Stately Taurus Targets Myanmar Amidst Concerns over Military Junta’s Handling of Rebel Attacks
PlugX PUBLOAD TONESHELL
2024-01-23 ⋅ Trend Micro ⋅ Christian Alpuerto, Christian Jason Geollegue, Don Ovid Ladores, Emmanuel Panopio, Emmanuel Roll, Francesca Villasanta, Gerald Fernandez, Julius Keith Estrellado, Raighen Sanchez, Raymart Yambot, Rhio Manaog, Shawn Austin Santos, Sophia Nilette Robles
Kasseika Ransomware Deploys BYOVD Attacks, Abuses PsExec and Exploits Martini Driver
Kasseika
2024-01-23 ⋅ YouTube (Invoke RE) ⋅ Josh Reynolds
Analyzing and Unpacking Qakbot using Binary Ninja Automation
QakBot
2024-01-22 ⋅ ShadowStackRE ⋅ ShadowStackRE
Cactus Ransomware
Cactus
2024-01-22 ⋅ SentinelOne ⋅ Aleksandar Milenkoski, Tom Hegel
ScarCruft | Attackers Gather Strategic Intelligence and Target Cybersecurity Professionals
Kimsuky
2024-01-19 ⋅ Phylum ⋅ Phylum Research Team
npm Package Found Delivering Sophisticated RAT
Unidentified 113 (RAT)
2024-01-19 ⋅ Microsoft ⋅ MSRC Team
Microsoft Actions Following Attack by Nation State Actor Midnight Blizzard
2024-01-16 ⋅ S2W LAB Inc. ⋅ Minyeop Choi
Detailed Analysis of DarkGate; Investigating new top-trend backdoor malware
DarkGate
2024-01-15 ⋅ Rewterz Information Security ⋅ Rewterz Information Security
Rewterz Threat Advisory - Ivanti VPN Zero-Days Weaponized by UNC5221 Threat Actors to Deploy Multiple
WIREFIRE UTA0178
2024-01-15 ⋅ TRUESEC ⋅ Viktor Sahin-Uppströmer
A Victim of Mallox Ransomware: How Truesec CSIRT Fought Back
TargetCompany
2024-01-14 ⋅ SecurityScorecard ⋅ SecurityScorecard STRIKE Team
Operation 99: North Korean State Sponsored Supply Chain Attack on Tech Innovation
2024-01-13 ⋅ YouTube (Embee Research) ⋅ Embee_research
Cobalt Strike Shellcode Analysis and C2 Extraction
Cobalt Strike
2024-01-12 ⋅ cyble ⋅ Cyble
Sneaky Azorult Back in Action and Goes Undetected
Azorult
2024-01-12 ⋅ Mandiant ⋅ Dimiter Andonov, Gabby Roncone, John Wolfram, Matt Lin, Robert Wallace, Tyler McLellan
Cutting Edge: Suspected APT Targets Ivanti Connect Secure VPN in New Zero-Day Exploitation
UTA0178
2024-01-11 ⋅ AhnLab ⋅ ATCP
Mimo CoinMiner and Mimus Ransomware Installed via Vulnerability Attacks
XMRIG Coinminer xmrig Hezb
2024-01-11 ⋅ Rewterz Information Security ⋅ Rewterz Information Security
Rewterz Threat Update – Pro-Ukraine Hacktivists Breach Russian ISP as Revenge for KyivStar Attack
BlackJack
2024-01-11 ⋅ Forescout ⋅ Jos Wetzels
Clearing the Fog of War – A critical analysis of recent energy sector cyberattacks in Denmark and Ukraine
2024-01-10 ⋅ Volexity ⋅ Matthew Meltzer, Robert Jan Mora, Sean Koessel, Steven Adair, Thomas Lancaster
Active Exploitation of Two Zero-Day Vulnerabilities in Ivanti Connect Secure VPN
UTA0178
2024-01-10 ⋅ Medium knight0x07 ⋅ 0x4427, knight0x07
Analyzing APT28’s OCEANMAP Backdoor & Exploring its C2 Server Artifacts
OCEANMAP
2024-01-09 ⋅ Securonix ⋅ Den Iyzvyk, Oleg Kolesnikov, Tim Peck
New RE#TURGENCE Attack Campaign: Turkish Hackers Target MSSQL Servers to Deliver Domain-Wide MIMIC Ransomware
Mimic Ransomware