Click here to download all references as Bib-File.•
| 2023-08-30
⋅
NSFOCUS
⋅
APT34 Unleashes New Wave of Phishing Attack with Variant of SideTwist Trojan SideTwist |
| 2023-08-29
⋅
Mandiant
⋅
Diving Deep into UNC4841 Operations Following Barracuda ESG Zero-Day Remediation (CVE-2023-2868) GhostEmperor |
| 2023-08-29
⋅
Google
⋅
Diving Deep into UNC4841 Operations Following Barracuda ESG Zero-Day Remediation (CVE-2023-2868) GhostEmperor UNC4841 |
| 2023-08-29
⋅
KrebsOnSecurity
⋅
U.S. Hacks QakBot, Quietly Removes Botnet Infections QakBot |
| 2023-08-28
⋅
⋅
360
⋅
APT-C-55 (Kimsuky) organization uses Korean domain names for malicious activities |
| 2023-08-28
⋅
Gamaredon Activity amid Ukraine's Counteroffensive Pteranodon |
| 2023-08-28
⋅
Github (cocomelonc)
⋅
Malware and cryptography 20: encrypt/decrypt payload via Skipjack. Simple C++ example. |
| 2023-08-28
⋅
Juniper
⋅
DreamBus Botnet Resurfaces, Targets RocketMQ vulnerability DreamBus |
| 2023-08-26
⋅
BushidoToken Blog
⋅
Tracking Adversaries: Scattered Spider, the BlackCat affiliate BlackLotus POORTRY |
| 2023-08-25
⋅
Github (telekom-security)
⋅
DarkGate configuration extractor DarkGate |
| 2023-08-25
⋅
Github (muha2xmad)
⋅
Warzone RAT configuration extractor Ave Maria |
| 2023-08-24
⋅
⋅
CYBERWISE
⋅
“Proxy” Based Phishing Attacks Are on the Rise Again |
| 2023-08-24
⋅
Github (muha2xmad)
⋅
StealC configuration extractor Stealc |
| 2023-08-24
⋅
Microsoft
⋅
Flax Typhoon using legitimate software to quietly access Taiwanese organizations Flax Typhoon |
| 2023-08-23
⋅
Avertium
⋅
Unraveling SCATTERED SPIEDER: A Stealthy and Persistent Threat Actor Targeting Telecom Networks |
| 2023-08-23
⋅
Twitter (@embee_research)
⋅
Extracting Xworm from Bloated Golang Executable XWorm |
| 2023-08-22
⋅
AhnLab
⋅
Analysis of APT Attack Cases Targeting Web Services of Korean Corporations Ladon Meterpreter MimiKatz Dalbit |
| 2023-08-22
⋅
⋅
AhnLab
⋅
Analyzing the new attack activity of the Andariel group Andardoor MimiKatz QuiteRAT Tiger RAT Volgmer |
| 2023-08-22
⋅
Symantec
⋅
Carderbee: APT Group use Legit Software in Supply Chain Attack Targeting Orgs in Hong Kong PlugX Carderbee |
| 2023-08-21
⋅
SentinelOne
⋅
XLoader's Latest Trick | New macOS Variant Disguised as Signed OfficeNote App Xloader |