Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-09-14 ⋅ McAfee ⋅ Christiaan Beek
Operation ‘Harvest’: A Deep Dive into a Long-term Campaign
MimiKatz PlugX Winnti
2021-09-13 ⋅ McAfee ⋅ Fernando Ruiz
Android malware distributed in Mexico uses Covid-19 to steal financial credentials
2021-09-08 ⋅ McAfee ⋅ John Fokker, Max Kersten, Thibault Seret
How Groove Gang is Shaking up the Ransomware-as-a-Service Market to Empower Affiliates
Babuk BlackMatter Babuk BlackMatter CTB Locker
2021-09-03 ⋅ McAfee ⋅ Chanung Pak
Phishing Android Malware Targets Taxpayers in India
Elibomi
2021-09-03 ⋅ FireEye ⋅ Adrian Sanchez Hernandez, Alex Pennino, Andrew Rector, Brendan McKeague, Govand Sinjari, Harris Ansari, John Wolfram, Joshua Goddard, Yash Gupta
PST, Want a Shell? ProxyShell Exploiting Microsoft Exchange Servers
CHINACHOPPER HTran
2021-08-25 ⋅ FBI ⋅ FBI
MC-000150-MW: Indicators of Compromise Associated with Hive Ransomware
Hive
2021-08-11 ⋅ ESET Research ⋅ Zuzana Hromcová
IISerpent: Malware‑driven SEO fraud as a service
2021-08-09 ⋅ ESET Research ⋅ Zuzana Hromcová
IISpy: A complex server‑side backdoor with anti‑forensic features
IISpy JuicyPotato
2021-08-06 ⋅ ESET Research ⋅ Zuzana Hromcová
IIStealer: A server‑side threat to e‑commerce transactions
2021-08-06 ⋅ ESET Research ⋅ Anton Cherepanov, Zuzana Hromcová
Anatomy of native IIS malware
IISniff RGDoor
2021-08-04 ⋅ ESET Research ⋅ Zuzana Hromcová
Anatomy of Native IIS Malware (white papaer)
IISniff RGDoor
2021-08-04 ⋅ ESET Research ⋅ Zuzana Hromcová
Anatomy of Native IIS Malware (slides)
IISniff RGDoor
2021-08-04 ⋅ McAfee ⋅ Max Kersten
See Ya Sharp: A Loader’s Tale
2021-07-28 ⋅ McAfee ⋅ Noël Keijzer, Thibault Seret
Babuk: Moving to VM and *nix Systems Before Stepping Away
Babuk
2021-07-19 ⋅ Malwarebytes ⋅ Erika Noerenberg
Remcos RAT delivered via Visual Basic
Remcos
2021-07-08 ⋅ McAfee ⋅ McAfee Labs
Hancitor Making Use of Cookies to Prevent URL Scraping
Hancitor
2021-07-08 ⋅ McAfee ⋅ Kiran Raj, Kishan N.
Zloader With a New Infection Technique
Zloader
2021-07-07 ⋅ McAfee ⋅ McAfee Labs
Ryuk Ransomware Now Targeting Webservers
Cobalt Strike Ryuk
2021-06-29 ⋅ Twitter (@IntezerLabs) ⋅ Intezer
Tweet on unknown elf backdoor based on an open source remote shell named "amcsh"
BioSet
2021-06-16 ⋅ Mandiant ⋅ Jared Wilson, Jordan Nuce, Justin Moore, Mike Hunhoff, Nick Harbour, Robert Dean, Tyler McLellan
Smoking Out a DARKSIDE Affiliate’s Supply Chain Software Compromise
DarkSide Cobalt Strike DarkSide SMOKEDHAM UNC2465