Click here to download all references as Bib-File.•
| 2024-03-05
⋅
Kroll
⋅
TODDLERSHARK: ScreenConnect Vulnerability Exploited to Deploy BABYSHARK Variant BabyShark |
| 2024-03-05
⋅
Team Cymru
⋅
Coper / Octo - A Conductor for Mobile Mayhem… With Eight Limbs? Coper |
| 2024-03-05
⋅
CIP
⋅
Semi-Annual Chronicles of UAC-0006 Operations SmokeLoader |
| 2024-03-05
⋅
Reliaquest
⋅
Anxun and Chinese APT Activity ShadowPad |
| 2024-03-05
⋅
Medium walmartglobaltech
⋅
Unknown Nim Loader using PSBypassCLM Unidentified 115 (Nim Loader) |
| 2024-03-04
⋅
Securi
⋅
40 New Domains of Magecart Veteran ATMZOW Found in Google Tag Manager magecart |
| 2024-03-04
⋅
Cleafy
⋅
On-Device Fraud on the rise: exposing a recent Copybara fraud campaign Copybara |
| 2024-03-04
⋅
Logpoint
⋅
Inside DarkGate: Exploring the infection chain and capabilities DarkGate |
| 2024-03-04
⋅
Proofpoint
⋅
TA577’s Unusual Attack Chain Leads to NTLM Data Theft |
| 2024-03-04
⋅
⋅
Weixin
⋅
Shadow Hunting: Analysis of APT37’s attack activities against South Korea using North Korean political topics RokRAT |
| 2024-03-03
⋅
OALabs
⋅
GitHub Bug Used to Infect Game Hackers With Lua Malware SmartLoader |
| 2024-03-02
⋅
Twitter (@SinghSoodeep)
⋅
Tweet on WINELOADER targeting with German embassy themed lure WINELOADER |
| 2024-03-01
⋅
Ryan Weil
⋅
Agent Tesla Analysis [Part 2: Deobfuscation] Agent Tesla |
| 2024-03-01
⋅
HarfangLab
⋅
A Comprehensive Analysis of i-SOON’s Commercial Offering ShadowPad Winnti |
| 2024-03-01
⋅
Gatewatcher
⋅
CYBER THREATS SEMESTER REPORT (July - December 2023) (paywall) |
| 2024-03-01
⋅
Sekoia
⋅
NoName057(16)’s DDoSia project: 2024 updates and behavioural shifts Dosia |
| 2024-03-01
⋅
farghlymal github.io
⋅
Taking a deep dive into SmokeLoader SmokeLoader |
| 2024-03-01
⋅
0x0v1
⋅
APT37's ROKRAT HWP Object Linking and Embedding RokRAT |
| 2024-03-01
⋅
Medium b.magnezi
⋅
Malware Analysis - Cobalt Strike Cobalt Strike |
| 2024-02-29
⋅
Vipyr Security
⋅
Novel ELF64 Remote Access Tool Embedded in Malicious PyPI Uploads SimpleTea |