Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2023-06-30 ⋅ Github (itaymigdal) ⋅ Itay Migdal
Formbook unpacking
Formbook
2023-06-29 ⋅ BusinessWire ⋅ Daria Zhukova
Dark Web Intelligence Shows Everest Ransomware Group Increasing Initial Access Broker Activity
2023-06-29 ⋅ MalwareBookReports ⋅ muzi
GuLoader: Navigating a Maze of Intricacy
CloudEyE
2023-06-29 ⋅ SentinelOne ⋅ Alex Delamotte, Jim Walter
Rhysida Ransomware | RaaS Crawls Out of Crimeware Undergrowth to Attack Chilean Army
Rhysida
2023-06-28 ⋅ BI. ZONE Cyber Threats Research Team ⋅ Oleg Skulkin
Red Wolf is back to spy on commercial firms Red Wolf is back to spy on commercial firms
RedCurl
2023-06-28 ⋅ Mandiant ⋅ Alexander Marvi, Greg Blaum, Ron Craft
Detection, Containment, and Hardening Opportunities for Privileged Guest Operations, Anomalous Behavior, and VMCI Backdoors on Compromised VMware Hosts
UNC3886
2023-06-28 ⋅ ⋅ AhnLab ⋅ Sanseo
Kimsuky Attack Group Abusing Chrome Remote Desktop
Appleseed
2023-06-27 ⋅ ⋅ Youtube (PROIDEA Events) ⋅ Michał Łopacki, Piotr Zarzycki
Piotr Zarzycki, Michał Łopacki - Proxy dla przestępców na Twoim urządzeniu [OMH 2022]
2023-06-26 ⋅ ThreatFabric ⋅ ThreatFabric
Anatsa banking Trojan hits UK, US and DACH with new campaign
Anatsa
2023-06-23 ⋅ Securonix ⋅ Den Iyzvyk, Oleg Kolesnikov, Tim Peck
Detecting New MULTI#STORM Attack Campaign Involving Python-based Loader Masquerading as OneDrive Utilities to Drop Multiple RAT Payloads With Security Analytics
Ave Maria
2023-06-23 ⋅ Phylum ⋅ Phylum Research Team
Phylum Discovers Sophisticated Ongoing Attack on NPM
2023-06-23 ⋅ Medium (Cryptax) ⋅ Axelle Apvrille
Inside KangaPack: the Kangaroo packer with native decryption
FluHorse
2023-06-22 ⋅ Reliaquest ⋅ Caroline Fenstermacher
Goot to Loot - How a Gootloader Infection Led to Credential Access
GootLoader SystemBC
2023-06-21 ⋅ Symantec ⋅ Threat Hunter Team
Graphican: Flea Uses New Backdoor in Attacks Targeting Foreign Ministries
Graphican
2023-06-21 ⋅ Zscaler ⋅ Gurkirat Singh, Shatak Jain
Ransomware Redefined: RedEnergy Stealer-as-a-Ransomware attacks
RedEnergy Stealer
2023-06-20 ⋅ SOCRadar ⋅ SOCRadar
Cyber Shadows Pact: Darknet Parliament (KillNet, Anonymous Sudan, REvil)
UserSec
2023-06-20 ⋅ Recorded Future ⋅ Insikt Group
BlueDelta Exploits Ukrainian Government Roundcube Mail Servers to Support Espionage Activities
2023-06-20 ⋅ Recorded Future ⋅ Insikt Group
BlueDelta Exploits Ukrainian Government Roundcube Mail Servers to Support Espionage Activities
2023-06-19 ⋅ ⋅ Cert-UA ⋅ Cert-UA
Targeted UAC-0102 cyber attacks against UKR.NET service users (CERT-UA#6858)
UAC-0102
2023-06-19 ⋅ Github (cocomelonc) ⋅ cocomelonc
Malware AV/VM evasion - part 17: bypass UAC via fodhelper.exe. Simple C++ example.
Glupteba