Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2018-03-10 ⋅ NCC Group ⋅ Rob Smallridge
APT15 is alive and strong: An analysis of RoyalCli and RoyalDNS
BS2005 MS Exchange Tool RoyalCli Royal DNS APT15
2018-03-09 ⋅ Cert-UA ⋅ Cert-UA
Mass mailing of Pterodo-type spyware
Pteranodon
2018-03-09 ⋅ Kaspersky Labs ⋅ GReAT
Masha and these Bears - 2018 Sofacy Activity
2018-03-09 ⋅ Kaspersky Labs ⋅ Alexey Shulmin, Andrey Dolgushev, Sergey Yunakovsky, Vasily Berdnikov
The Slingshot APT
Slingshot
2018-03-09 ⋅ Lastline ⋅ lastline Labs Team
From Russia(?) with Code
Olympic Destroyer
2018-03-09 ⋅ Adam Senft, Bill Marczak, Jakub Dalek, John Scott-Railton, Ron Deibert, Sarah McKune
Sandvine’s PacketLogic Devices Used to Deploy Government Spyware in Turkey and Redirect Egyptian Users to Affiliate Ads?
StrongPity
2018-03-09 ⋅ Kaspersky Labs ⋅ Alexey Shulmin, Andrey Dolgushev, Sergey Yunakovsky, Vasily Berdnikov
The Slingshot APT FAQ
Slingshot Slingshot
2018-03-09 ⋅ Kaspersky Labs ⋅ Alex Perekalin
Cloning chip-and-PIN cards: Brazilian job
Prilex
2018-03-09 ⋅ NCCIC ⋅ NCCIC
Malware Analysis Report Sharpknot
SHARPKNOT
2018-03-09 ⋅ ESET Research ⋅ Filip Kafka
New traces of Hacking Team in the wild
RCS Hacking Team
2018-03-08 ⋅ NetScout ⋅ ASERT Team
Donot Team Leverages New Modular Malware Framework in South Asia
yty
2018-03-08 ⋅ Avast ⋅ Threat Intelligence Team
New investigations into the CCleaner incident point to a possible third stage that had keylogger capacities
CCleaner Backdoor
2018-03-08 ⋅ Kaspersky Labs ⋅ GReAT
The devil’s in the Rich header
Olympic Destroyer
2018-03-08 ⋅ Kaspersky Labs ⋅ GReAT
OlympicDestroyer is here to trick the industry
Olympic Destroyer
2018-03-08 ⋅ NetScout ⋅ Dennis Schwarz, Hardik Modi, Jill Sopko, Richard Hummel
Donot Team Leverages New Modular Malware Framework in South Asia
VICEROY TIGER
2018-03-08 ⋅ McAfee ⋅ Asheer Malhotra, Charles Crawford, Jessica Saavedra-Morales, Ryan Sherstobitoff
Hidden Cobra Targets Turkish Financial Sector With New Bankshot Implant
Lazarus Group
2018-03-07 ⋅ InfoSec Handlers Diary Blog ⋅ Brad Duncan
Ransomware news: GlobeImposter gets a facelift, GandCrab is still out there
Gandcrab GlobeImposter
2018-03-07 ⋅ Proofpoint ⋅ Proofpoint Staff
Leaked Ammyy Admin Source Code Turned into Malware
FlawedAmmyy QuantLoader
2018-03-07 ⋅ Palo Alto Networks Unit 42 ⋅ Brandon Levene, Brittany Ash, Josh Grunzweig
Patchwork Continues to Deliver BADNEWS to the Indian Subcontinent
BadNews
2018-03-06 ⋅ Github (TKCERT) ⋅ thyssenkrupp CERT
Network detector for Winnti malware
Winnti