Click here to download all references as Bib-File.•
| 2024-09-23
⋅
Palo Alto Networks Unit 42
⋅
Inside SnipBot: The Latest RomCom Malware Variant ROMCOM RAT |
| 2024-09-21
⋅
Malware Analysis - PXRECVOWEIWOEI 0bj3ctivityStealer |
| 2024-09-20
⋅
CISO Series
⋅
Cybersecurity News: INC targets healthcare, Providence schools cyberattack, Apple iPads bricked INC Storm-0494 |
| 2024-09-20
⋅
McAfee
⋅
Behind the CAPTCHA: A Clever Gateway of Malware Emmenhtal Lumma Stealer |
| 2024-09-19
⋅
Mandiant
⋅
UNC1860 and the Temple of Oats: Iran’s Hidden Hand in Middle Eastern Networks OATBOAT |
| 2024-09-19
⋅
Mandiant
⋅
UNC1860 and the Temple of Oats: Iran’s Hidden Hand in Middle Eastern Networks CRYPTOSLAY PipeSnoop TEMPLEDOOR UNC1860 |
| 2024-09-19
⋅
Gen Digital
⋅
Evolution of Lazarus ‘FudModule - no longer (stand)alone’ FudModule |
| 2024-09-19
⋅
Trend Micro
⋅
Earth Baxia Uses Spear-Phishing and GeoServer Exploit to Target APAC Cobalt Strike Earth Baxia |
| 2024-09-19
⋅
Trend Micro
⋅
Earth Baxia Uses Spear-Phishing and GeoServer Exploit to Target APAC (IoCs) Cobalt Strike Earth Baxia |
| 2024-09-18
⋅
Twitter (@MsftSecIntel)
⋅
Tweet about threat actor Vanilla Tempest INC GootLoader Storm-0494 |
| 2024-09-18
⋅
loginsoft
⋅
Medusa Ransomware: Evolving Tactics in Modern Cyber Extortion MedusaLocker |
| 2024-09-18
⋅
People’s Republic of China-Linked Actors Compromise Routers and IoT Devices for Botnet Operations Nosedive |
| 2024-09-18
⋅
Lumen
⋅
Derailing the Raptor Train Nosedive |
| 2024-09-18
⋅
Court-Authorized Operation Disrupts Worldwide Botnet Used by People’s Republic of China State-Sponsored Hackers Nosedive |
| 2024-09-18
⋅
Lumen
⋅
Derailing The Raptor Train Nosedive |
| 2024-09-13
⋅
Aqua Nautilus
⋅
Hadooken Malware Targets Weblogic Applications Hadooken |
| 2024-09-13
⋅
Bleeping Computer
⋅
New Linux malware Hadooken targets Oracle WebLogic servers Hadooken |
| 2024-09-12
⋅
cocomelonc
⋅
Malware and cryptography 32: encrypt payload via FEAL-8 algorithm. Simple C example. |
| 2024-09-12
⋅
Cado Security
⋅
From Automation to Exploitation: The Growing Misuse of Selenium Grid for Cryptomining and Proxyjacking perfctl |
| 2024-09-12
⋅
kienmanowar Blog
⋅
[QuickNote] The Xworm malware is being spread through a phishing email XWorm |