Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-09-26 ⋅ Youtube (Virus Bulletin) ⋅ Takahiro Haruyama
Tracking the entire iceberg long term APT malware C2 protocol emulation and scanning
ShadowPad Winnti
2022-09-26 ⋅ SentinelOne ⋅ Dinesh Devadoss, Phil Stokes
Lazarus ‘Operation In(ter)ception’ Targets macOS Users Dreaming of Jobs in Crypto
Interception
2022-09-26 ⋅ Bleeping Computer ⋅ Bill Toulas
New Erbium password-stealing malware spreads as game cracks, cheats
Erbium Stealer
2022-09-26 ⋅ CrowdStrike ⋅ Ioan Iacob, Iulian Madalin Ionita
The Anatomy of Wiper Malware, Part 3: Input/Output Controls
CaddyWiper DEADWOOD DistTrack DoubleZero DUSTMAN HermeticWiper IsaacWiper Meteor Petya Sierra(Alfa,Bravo, ...) StoneDrill WhisperGate ZeroCleare
2022-09-25 ⋅ cocomelonc ⋅ cocomelonc
APT techniques: Access Token manipulation. Token theft. Simple C++ example.
2022-09-24 ⋅ Cyber And Ramen blog ⋅ Mike R
So Long (Go)Daddy | Tracking BlackTech Infrastructure
2022-09-22 ⋅ ComputerWeekly ⋅ Alex Scroxton
ALPHV/BlackCat ransomware family becoming more dangerous
BlackCat BlackCat FIN7
2022-09-22 ⋅ AhnLab ⋅ AhnLab ASEC Analysis Team
Analysis Report on Lazarus Group's Rootkit Attack Using BYOVD
FudModule
2022-09-22 ⋅ Medium s2wlab ⋅ Jeong Hyunsik, Yang HuiSeong
Quick Overview of Leaked LockBit 3.0 (Black) builder program
LockBit
2022-09-22 ⋅ Broadcom ⋅ Symantec Threat Hunter Team
Noberus Ransomware: Darkside and BlackMatter Successor Continues to Evolve its Tactics
BlackCat BlackMatter DarkSide
2022-09-21 ⋅ CISA ⋅ CISA, FBI
AA22-264A: Iranian State Actors Conduct Cyber Operations Against the Government of Albania (PDF)
Unidentified 095 (Iranian Wiper)
2022-09-21 ⋅ CISA ⋅ CISA, FBI
Alert (AA22-264A) Iranian State Actors Conduct Cyber Operations Against the Government of Albania
Unidentified 095 (Iranian Wiper)
2022-09-20 ⋅ vmware ⋅ Dana Behling
Threat Research: New Method of Volume Shadow Backup Deletion Seen in Recent Ransomware
2022-09-20 ⋅ Recorded Future ⋅ Insikt Group®
Threat Actors Continue to Abuse Google Tag Manager for Payment Card e-Skimming
2022-09-19 ⋅ CyberScoop ⋅ AJ Vicens
Hacking group focused on Central America dumps 10 terabytes of military emails, files
Guacamaya
2022-09-19 ⋅ Virus Bulletin ⋅ Takahiro Haruyama
Tracking the entire iceberg - long-term APT malware C2 protocol emulation and scanning
ShadowPad Winnti
2022-09-19 ⋅ Recorded Future ⋅ Insikt Group®
Russia-Nexus UAC-0113 Emulating Telecommunication Providers in Ukraine
Ave Maria Colibri Loader DCRat
2022-09-18 ⋅ K7 Security ⋅ Rahul R
Raccoon back with new claws!
Raccoon
2022-09-17 ⋅ Twitter (@MsftSecIntel) ⋅ Microsoft Threat Intelligence
Tweet on click fraud activity DEV-0796
Phlox Tempest
2022-09-16 ⋅ Cloudsek ⋅ Anandeshwar Unnikrishnan
Recordbreaker: The Resurgence of Raccoon
Raccoon RecordBreaker