Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-08-26 ⋅ FBI ⋅ FBI
China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems
2026-08-26 ⋅ Lumen ⋅ Black Lotus Labs
The infrastructure quartermaster: inside a China-nexus state enablement model
2026-08-26 ⋅ Github (blacklotuslabs) ⋅ Black Lotus Labs
The infrastructure quartermaster: inside a China-nexus state enablement model (IOCs)
2026-08-26 ⋅ Abstract Security ⋅ Abstract Security Threat Research Organization (ASTRO)
RMM Hunting: Leveraging LOLRMM for Detection
2026-08-26 ⋅ Microsoft ⋅ Parasharan Raghavan, Sagar Patil, Suriyaraj Natarajan
TerminalFix campaign deploys a reverse tunnel through multistage intrusion
Lorem Ipsum
2026-08-25 ⋅ cocomelonc ⋅ cocomelonc
Malware development trick 64: PE file bloating and overlay data. Simple C example
2026-08-25 ⋅ Github (Yavuzhanzgen) ⋅ Yavuzhan Özgen
KoiLoader Technical Analysis Report
Koi Loader
2026-08-24 ⋅ cocomelonc ⋅ cocomelonc
Malware development trick 63: modifying PE version metadata and icon. Simple C example
2026-08-24 ⋅ Field Effect ⋅ Damon Toumbourou, Hugh Whitewood
A ClickFix cluster: Observed activity from recent ClickFix campaigns
Lorem Ipsum
2026-08-21 ⋅ cocomelonc ⋅ cocomelonc
Malware shellcode delivery via signal - part 5. Physics-guided AI demodulator. PyTorch example
2026-08-21 ⋅ Bitso Quetzal Team ⋅ Mauro Eldritch, Nelson Colon
North Korea’s Crypt: Hunting Ghosts
StoatWaffle
2026-08-21 ⋅ Netresec ⋅ Erik Hjelmvik
CNCMachineRMS C2 Protocol
Babadeda
2026-08-20 ⋅ Wiz.io ⋅ Benjamin Read, Rami McCarthy
Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns
botking
2026-08-20 ⋅ StepSecurity ⋅ Sai Likhith
Rust Supply-Chain Attack: arrayref, internment, and append-only-vec Poisoned by the proc-macro1 Build-Time Dropper
botking
2026-08-20 ⋅ SafeDep ⋅ SafeDep Team
Malicious Rust Crate arrayref Runs a Build-Time Payload
botking
2026-08-20 ⋅ Aikido ⋅ Ilyas Makari
Popular Rust crates arrayref, append-only-vec, and internment compromised in Supply Chain Attack
botking
2026-08-20 ⋅ Cisco Talos ⋅ Joey Chen
UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities
Meterpreter Havoc IISpy JuicyPotato Meterpreter Quasar RAT UAT-10147
2026-08-20 ⋅ Cisco Talos ⋅ Joey Chen
UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations
Meterpreter IISpy Meterpreter Quasar RAT UAT-10147
2026-08-20 ⋅ IBM X-Force ⋅ Agnes Ramos-Beauchamp, Golo Mühr, Joe Fasulo, Joshua Chung
Trapping a Mustang Panda
PUBLOAD TONESHELL Voldemort MUSTANG PANDA
2026-08-20 ⋅ trendai ⋅ Aliakbar Zahravi
Prompting the Payload: How an npm Supply Chain Attack Delivers the RedC2 AI-Powered Linux Implant
redshell