Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-08-24 ⋅ cocomelonc ⋅ cocomelonc
Malware development trick 63: modifying PE version metadata and icon. Simple C example
2026-08-24 ⋅ Field Effect ⋅ Damon Toumbourou, Hugh Whitewood
A ClickFix cluster: Observed activity from recent ClickFix campaigns
Lorem Ipsum
2026-08-21 ⋅ cocomelonc ⋅ cocomelonc
Malware shellcode delivery via signal - part 5. Physics-guided AI demodulator. PyTorch example
2026-08-21 ⋅ Bitso Quetzal Team ⋅ Mauro Eldritch, Nelson Colon
North Korea’s Crypt: Hunting Ghosts
StoatWaffle
2026-08-21 ⋅ Netresec ⋅ Erik Hjelmvik
CNCMachineRMS C2 Protocol
Babadeda
2026-08-20 ⋅ Cisco Talos ⋅ Joey Chen
UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities
Meterpreter Havoc IISpy JuicyPotato Meterpreter Quasar RAT
2026-08-20 ⋅ Cisco Talos ⋅ Joey Chen
UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations
Meterpreter IISpy Meterpreter Quasar RAT
2026-08-20 ⋅ IBM X-Force ⋅ Agnes Ramos-Beauchamp, Golo Mühr, Joe Fasulo, Joshua Chung
Trapping a Mustang Panda
PUBLOAD TONESHELL Voldemort MUSTANG PANDA
2026-08-20 ⋅ Wiz.io ⋅ Benjamin Read, Rami McCarthy
Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns
2026-08-20 ⋅ trendai ⋅ Aliakbar Zahravi
Prompting the Payload: How an npm Supply Chain Attack Delivers the RedC2 AI-Powered Linux Implant
redshell
2026-08-19 ⋅ Bitdefender ⋅ Gheorghe Adrian Schipor, Marius Andrei Baciu, Victor Vrabie
SilkParasite: Inside a China-nexus espionage cluster and its seven-family RAT ecosystem across Central Asia
BloodAlchemy ShadowPad SNAPPYBEE
2026-08-19 ⋅ zimperium ⋅ Vishnu Pratapagiri
The ToxicPanda Never Sleeps: ToxicPanda 2.0 Prepares its Next Strike on Mobile
ToxicPanda
2026-08-19 ⋅ Bitdefender ⋅ Martin Zugec
SilkParasite: Tracking a China-Nexus APT Across Central Asia
BloodAlchemy ShadowPad SNAPPYBEE SilkParasite
2026-08-19 ⋅ abuse.ch ⋅ abuse.ch
MalwareBazaar | SHA256 9768b7e31324805672cfcba91cf4d6da91494e9899db58f22da9dda6c91931d6 (NeedleStealer)
NeedleStealer
2026-08-18 ⋅ Recorded Future ⋅ Insikt Group
PurpleDelta's Fraudulent Employment Operations
2026-08-18 ⋅ BitSight ⋅ Bitsight TRACE
Who Invited Aisuru to the LAN Party?
Kimwolf Aisuru
2026-08-18 ⋅ Gen ⋅ Vojtěch Krejsa
WordlistLoader Delivering Amatera via ClearFake Campaigns
ACR Stealer Amatera
2026-08-17 ⋅ The CyberSec Guru ⋅ The CyberSec Guru
Azure Data Exfiltration: TheHatman Campaign Exposes Millions of Records | The CyberSec Guru | The CyberSec
TheHatman
2026-08-17 ⋅ Github (Yavuzhanzgen) ⋅ Yavuzhan Özgen
AsyncRAT Technical Analysis
AsyncRAT
2026-08-17 ⋅ Zscaler ⋅ Zscaler ThreatLabz
C2Looper: A New Backdoor Likely Tied To Ransomware With GitHub C2
C2Looper