Click here to download all references as Bib-File.•
2023-11-30
⋅
Twitter (@embee_research)
⋅
Advanced Threat Intel Queries - Catching 83 Qakbot Servers with Regex, Censys and TLS Certificates QakBot |
2023-11-27
⋅
Twitter (@embee_research)
⋅
Building Threat Intel Queries Utilising Regex and TLS Certificates - (BianLian) BianLian |
2023-11-22
⋅
Microsoft
⋅
Diamond Sleet supply chain compromise distributes a modified CyberLink installer LambLoad |
2023-11-21
⋅
Palo Alto Networks Unit 42
⋅
Hacking Employers and Seeking Employment: Two Job-Related Campaigns Bear Hallmarks of North Korean Threat Actors BeaverTail InvisibleFerret WageMole |
2023-11-21
⋅
adlumin
⋅
PlayCrypt Ransomware-as-a-Service Expands Threat from Script Kiddies and Sophisticated Attackers PLAY |
2023-11-16
⋅
YouTube (Swiss Cyber Storm)
⋅
Resilience Rising: Countering the Threat Actors Behind Black Basta Ransomware Black Basta |
2023-11-09
⋅
Microsoft
⋅
Microsoft shares threat intelligence at CYBERWARCON 2023 Blue Tsunami |
2023-11-08
⋅
Deep instinct
⋅
MuddyC2Go – Latest C2 Framework Used by Iranian APT MuddyWater Spotted in Israel PhonyC2 MuddyC2Go |
2023-11-03
⋅
Uptycs
⋅
GhostSec: From Fighting ISIS to Possibly Targeting Israel with RaaS GhostLocker GhostSec |
2023-11-02
⋅
eSentire
⋅
From DarkGate to DanaBot DanaBot DarkGate |
2023-11-02
⋅
DataBreaches.net
⋅
Jeffco Public Schools hit by the same threat actors that hit Clark County School District — and via the same way SingularityMD |
2023-11-01
⋅
Deep instinct
⋅
MuddyWater eN-Able spear-phishing with new TTPs PhonyC2 |
2023-10-31
⋅
Infoblox
⋅
Prolific Puma: Shadowy Link Shortening Service Enables Cybercrime Prolific Puma |
2023-10-30
⋅
Checkpoint
⋅
30TH OCTOBER – THREAT INTELLIGENCE REPORT SingularityMD |
2023-10-26
⋅
Fourcore
⋅
Threat Hunting: Detecting Browser Credential Stealing [T1555.003] LaZagne RedLine Stealer |
2023-10-26
⋅
Avast Decoded
⋅
Rhysida Ransomware Technical Analysis Rhysida |
2023-10-23
⋅
Proofpoint
⋅
From Copacabana to Barcelona: The Cross-Continental Threat of Brazilian Banking Malware Grandoreiro TA2725 |
2023-10-19
⋅
Symantec
⋅
Crambus: New Campaign Targets Middle Eastern Government Clipog |
2023-10-18
⋅
SOCRadar
⋅
Threat Actor Profile: SiegedSec SiegedSec |
2023-10-18
⋅
Microsoft
⋅
Multiple North Korean threat actors exploiting the TeamCity CVE-2023-42793 vulnerability FeedLoad ForestTiger HazyLoad RollSling Silent Chollima |