Click here to download all references as Bib-File.•
| 2024-07-11
⋅
sysdig
⋅
CRYSTALRAY: Inside the Operations of a Rising Threat Actor Exploiting OSS Tools CRYSTALRAY |
| 2024-07-11
⋅
McAfee
⋅
ClickFix Deception: A Social Engineering Tactic to Deploy Malware DarkGate Lumma Stealer |
| 2024-07-10
⋅
Zscaler
⋅
DodgeBox: A deep dive into the updated arsenal of APT41 | Part 1 Cobalt Strike DUSTPAN DUSTTRAP |
| 2024-07-10
⋅
Risky.biz
⋅
Risky Biz News: US takes down RT's Twitter bot farm Lifting Zmiy |
| 2024-07-09
⋅
US Department of Justice
⋅
Justice Department Leads Efforts Among Federal, International, and Private Sector Partners to Disrupt Covert Russian Government-Operated Social Media Bot Farm |
| 2024-07-09
⋅
Twitter (@H4ckManac)
⋅
Tweet on data breaches caused by 888 group Threat Actor 888 |
| 2024-07-09
⋅
Spamhaus
⋅
Spamhaus Botnet Threat Update January to June 2024 Coper FluBot Hook Bashlite Mirai FAKEUPDATES AsyncRAT BianLian Cobalt Strike DCRat Havoc NjRAT QakBot Quasar RAT RedLine Stealer Remcos Rhadamanthys RisePro Sliver |
| 2024-07-08
⋅
Kaspersky Labs
⋅
CloudSorcerer – A new APT targeting Russian government entities CloudSorcerer |
| 2024-07-06
⋅
xeno-RAT open-source remote access tool (RAT) XenoRAT |
| 2024-07-05
⋅
⋅
Weixin
⋅
APT-C-26 (Lazarus) uses PyPI to attack Windows, Linux, and macOS platforms SimpleTea SimpleTea |
| 2024-07-05
⋅
Cloudways
⋅
Hacker Allegedly Leaks Data from Shopify Breach on BreachForums Threat Actor 888 |
| 2024-07-05
⋅
Kroll
⋅
CLEARFAKE Update Tricks Victim into Executing Malicious PowerShell Code ClearFake |
| 2024-07-02
⋅
Malsada Tech
⋅
The LandUpdate808 Fake Update Variant KongTuke |
| 2024-07-02
⋅
K7 Security
⋅
Kematian Stealer forked from PowerShell Token Grabber Kematian Stealer |
| 2024-07-02
⋅
Sekoia
⋅
Exposing FakeBat loader: distribution methods and adversary infrastructure BlackCat Royal Ransom EugenLoader Carbanak Cobalt Strike DICELOADER Gozi IcedID Lumma Stealer NetSupportManager RAT Pikabot RedLine Stealer SectopRAT Sliver SmokeLoader Vidar |
| 2024-07-01
⋅
Halcyon
⋅
Halcyon Identifies New Ransomware Operator Volcano Demon Serving Up LukaLocker lukalocker |
| 2024-07-01
⋅
Speakerdeck (takahiro_haruyama)
⋅
The Art of Malware C2 Scanning - How to Reverse and Emulate Protocol Obfuscated by Compiler DOPLUGS Hodur |
| 2024-06-30
⋅
ZW01f
⋅
Deep Analysis of Snake (404 keylogger) 404 Keylogger |
| 2024-06-28
⋅
HarfangLab
⋅
Supposed Grasshopper: operators impersonate Israeli government and private companies to deploy open-source malware donut_injector Sliver |
| 2024-06-28
⋅
Trend Micro
⋅
Examining Water Sigbin's Infection Routine Leading to an XMRig Cryptominer Water Sigbin |