Click here to download all references as Bib-File.•
| 2024-05-27
⋅
AhnLab
⋅
SmallTiger malware in use in attack against domestic companies (Kimsuky, Andariel Group) |
| 2024-05-26
⋅
ZW01f
⋅
QakBOT v5 Deep Malware Analysis QakBot |
| 2024-05-23
⋅
ITOCHU
⋅
Malware Transmutation! - Unveiling the Hidden Traces of BloodAlchemy BloodAlchemy ShadowPad |
| 2024-05-23
⋅
Palo Alto Networks Unit 42
⋅
Operation Diplomatic Specter: An Active Chinese Cyberespionage Campaign Leverages Rare Tool Set to Target Governmental Entities in the Middle East, Africa and Asia Agent Racoon CHINACHOPPER Ghost RAT JuicyPotato MimiKatz Ntospy PlugX SweetSpecter TunnelSpecter CL-STA-0043 |
| 2024-05-22
⋅
Bitdefender
⋅
Deep Dive Into Unfading Sea Haze: A New Threat Actor in the South China Sea SilentGh0st |
| 2024-05-22
⋅
Kaspersky Labs
⋅
Stealers, stealers and more stealers |
| 2024-05-21
⋅
Yoroi
⋅
Uncovering an undetected KeyPlug implant attacking industries in Italy KEYPLUG |
| 2024-05-21
⋅
Elastic
⋅
Invisible miners: unveiling GHOSTENGINE’s crypto mining operations win.ghostengine |
| 2024-05-21
⋅
Twitter (@embee_research)
⋅
Tweets on decoding a Latrodectus loader Latrodectus |
| 2024-05-17
⋅
CTO at NCSC
⋅
CTO at NCSC Summary: week ending May 19th Kimsuky |
| 2024-05-16
⋅
cyble
⋅
New Antidot Android Banking Trojan Masquerading as Fake Google Play Updates Antidot |
| 2024-05-16
⋅
⋅
AhnLab
⋅
Analysis of APT attack cases targeting domestic companies using Dora RAT (Andariel Group) |
| 2024-05-16
⋅
Elastic
⋅
Spring Cleaning with LATRODECTUS: A Potential Replacement for ICEDID IcedID Latrodectus |
| 2024-05-16
⋅
Symantec
⋅
Springtail: New Linux Backdoor Added to Toolkit Gomir Kimsuky |
| 2024-05-16
⋅
ANY.RUN
⋅
Malware trend: Latrodectus Latrodectus |
| 2024-05-15
⋅
Microsoft
⋅
Threat actors misusing Quick Assist in social engineering attacks leading to ransomware Black Basta Cobalt Strike QakBot SystemBC |
| 2024-05-15
⋅
ESET Research
⋅
To the Moon and back(doors): Lunar landing in diplomatic missions LunarMail |
| 2024-05-15
⋅
Stairwell
⋅
Stairwell threat report: Black Basta overview and detection rules Black Basta Black Basta |
| 2024-05-15
⋅
Microsoft
⋅
Threat actors misusing Quick Assist in social engineering attacks leading to ransomware Black Basta Cobalt Strike QakBot UNC4393 |
| 2024-05-14
⋅
Darkowl
⋅
What are CVEs? Ukrainian Cyber Alliance |