Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-06-08 ⋅ VMWare Carbon Black ⋅ A C
TAU Threat Analysis: Hakbit Ransomware
Hakbit
2020-06-08 ⋅ Proofpoint ⋅ Dennis Schwarz, Georgi Mladenov, Michael Raggi, Proofpoint Threat Research Team
TA410: The Group Behind LookBack Attacks Against U.S. Utilities Sector Returns with New Malware
FlowCloud Lookback APT10 TA410
2020-06-05 ⋅ Google ⋅ Clement Lecigne, Google Threat Analysis Group
Exploits of a TAG analyst chasing in the wild (slides)
2020-06-05 ⋅ ⋅ Google ⋅ Clement Lecigne, Google Threat Analysis Group
Exploits of a TAG analyst chasing in the wild (video)
2020-06-04 ⋅ Raytheon Blackbird Technologies ⋅ Blackberry Research
Threat Spotlight: Tycoon Ransomware Targets Education and Software Sectors
2020-06-04 ⋅ PTSecurity ⋅ PT ESC Threat Intelligence
COVID-19 and New Year greetings: an investigation into the tools and methods used by the Higaisa group
Ghost RAT SongXY
2020-06-03 ⋅ Palo Alto Networks Unit 42 ⋅ Alex Hinchliffe, Doel Santos
Threat Assessment: Hangover Threat Group
BackConfig VICEROY TIGER
2020-06-03 ⋅ paloalto Networks Unit 42 ⋅ Alex Hinchliffe, Doel Santos
Threat Assessment: Hangover Threat Group
2020-06-03 ⋅ Trend Micro ⋅ Daniel Lunghi
How to perform long term monitoring of careless threat actors
BBSRAT HyperBro Trochilus RAT
2020-05-31 ⋅ Kaspersky ⋅ David Emm
IT threat evolution Q1 2021
2020-05-28 ⋅ ⋅ Qianxin ⋅ Threat Intelligence Center
Analysis of recent rattlesnake APT attacks against surrounding countries and regions
SideWinder
2020-05-28 ⋅ Twitter (@Andrew___Morris) ⋅ Andrew Morris
Tweet on Sandworm threat actor exploiting CVE-2019-10149
2020-05-27 ⋅ SophosLabs ⋅ Andrew Brandt, Gabor Szappanos
Netwalker ransomware tools give insight into threat actor
Mailto
2020-05-26 ⋅ Youtube (GRIMM Cyber) ⋅ Konstantin Klinger
Passive DNS for Threat Detection & Hunting (Discussing some infrastructure related to APT32)
METALJACK
2020-05-25 ⋅ Elastic ⋅ Brent Murphy, David French, Jamie Butler
The Elastic Guide to Threat Hunting
2020-05-24 ⋅ Positive Technologies ⋅ PT ESC Threat Intelligence
Operation TA505: network infrastructure. Part 3.
AndroMut Buhtrap SmokeLoader
2020-05-22 ⋅ Positive Technologies ⋅ PT ESC Threat Intelligence
Operation TA505: investigating the ServHelper backdoor with NetSupport RAT. Part 2.
NetSupportManager RAT ServHelper
2020-05-20 ⋅ PTSecurity ⋅ PT ESC Threat Intelligence
Operation TA505: how we analyzed new tools from the creators of the Dridex trojan, Locky ransomware, and Neutrino botnet
FlawedAmmyy
2020-05-20 ⋅ Proofpoint ⋅ Dennis Schwarz, Matthew Mesa, Proofpoint Threat Research Team
ZLoader Loads Again: New ZLoader Variant Returns
Zloader
2020-05-15 ⋅ SentinelOne ⋅ Phil Stokes
A Guide to macOS Threat Hunting and Incident Response