Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2023-09-25 ⋅ Video Games Chronicle ⋅ Tom Ivan
A ransomware group claims to have breached ‘all Sony systems’
RansomVC
2023-09-25 ⋅ NSFOCUS ⋅ NSFOCUS
Warning: Newly Discovered APT Attacker AtlasCross Exploits Red Cross Blood Drive Phishing for Cyberattack
AtlasAgent AtlasCross
2023-09-25 ⋅ Securonix ⋅ D. Iuzvyk, Oleg Kolesnikov, Tim Peck
Securonix Threat Labs Security Advisory: New STARK#VORTEX Attack Campaign: Threat Actors Use Drone Manual Lures to Deliver MerlinAgent Payloads
Merlin
2023-09-25 ⋅ 0x0v1 ⋅ Ovi
REArchive: Reverse engineering APT37’s GOLDBACKDOOR dropper
GOLDBACKDOOR
2023-09-25 ⋅ cocomelonc ⋅ cocomelonc
Malware development trick - part 36: Enumerate process modules. Simple C++ example.
4h_rat Aria-body
2023-09-24 ⋅ Virus Bulletin ⋅ Takuma Matsumoto, Yoshihiro Ishikawa
Let's GO Door with KCP
gokcpdoor
2023-09-23 ⋅ Mandiant ⋅ Fernando Tomlinson, Nader Zaveri
Special Delivery: Defending and Investigating Advanced Intrusions on Secure Email Gateways
SALTWATER SEASPY WHIRLPOOL UNC4841
2023-09-23 ⋅ Zscaler ⋅ Niraj Shivtarkar, Satyam Singh
BunnyLoader, the newest Malware-as-a-Service
BunnyLoader
2023-09-22 ⋅ Palo Alto Networks Unit 42 ⋅ Lior Rochberger, Robert Falcone, Tom Fakterman
Cyberespionage Attacks Against Southeast Asian Government Linked to Stately Taurus, Aka Mustang Panda
Cobalt Strike MimiKatz RemCom ShadowPad TONESHELL
2023-09-22 ⋅ Palo Alto Networks Unit 42 ⋅ Lior Rochberger, Robert Falcone, Tom Fakterman
Persistent Attempts at Cyberespionage Against Southeast Asian Government Target Have Links to Alloy Taurus
Reshell GALLIUM
2023-09-22 ⋅ Mandiant ⋅ Dan Black, Josh Atkins, Luke Jenkins
Backchannel Diplomacy: APT29’s Rapidly Evolving Diplomatic Phishing Operations
Brute Ratel C4 Cobalt Strike EnvyScout GraphDrop QUARTERRIG sRDI Unidentified 107 (APT29)
2023-09-22 ⋅ PRODAFT ⋅ PRODAFT
DarkGate IOCs
DarkGate
2023-09-22 ⋅ Github (LaurieWired) ⋅ Laurie Kirk
Unmasking the Godfather
Godfather
2023-09-22 ⋅ Sophos X-Ops ⋅ Sophos X-Ops
Mastodon Thread on observed activity involving TinyTurla
TinyTurla
2023-09-22 ⋅ R136a1 ⋅ Dominik Reichel
More on DreamLand
LuaDream
2023-09-21 ⋅ Medium shaddy43 ⋅ Shayan Ahmed Khan
Secrets of commercial RATs! NanoCore dissected
Nanocore RAT
2023-09-21 ⋅ Security Onion ⋅ Security Onion
Quick Malware Analysis: PIKABOT INFECTION WITH COBALT STRIKE pcap from 2023-05-23
Pikabot
2023-09-21 ⋅ ESET Research ⋅ Zuzana Hromcová
OilRig’s Outer Space and Juicy Mix: Same ol’ rig, new drill pipes
Mango Solar
2023-09-21 ⋅ Sentinel LABS ⋅ Aleksandar Milenkoski, QGroup
Sandman APT | A Mystery Group Targeting Telcos with a LuaJIT Toolkit
LuaDream
2023-09-21 ⋅ Sentinel LABS ⋅ Tom Hegel
Cyber Soft Power | China’s Continental Takeover
Earth Estries