Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2023-04-10 ⋅ Check Point ⋅ Check Point
March 2023’s Most Wanted Malware: New Emotet Campaign Bypasses Microsoft Blocks to Distribute Malicious OneNote Files
Agent Tesla CloudEyE Emotet Formbook Nanocore RAT NjRAT QakBot Remcos Tofsee
2023-04-07 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
MERCURY and DEV-1084: Destructive attack on hybrid environment
DarkBit MuddyWater Storm-1084
2023-04-03 ⋅ ⋅ Cert-UA ⋅ Cert-UA
Use of unlicensed Microsoft Office software as a vector for initial compromise of information and communication systems
DCRat Sandworm
2023-03-30 ⋅ United States District Court (Eastern District of New York) ⋅ Fortra, HEALTH-ISAC, Microsoft
Cracked Cobalt Strike (1:23-cv-02447)
Black Basta BlackCat LockBit RagnarLocker LockBit Black Basta BlackCat Cobalt Strike Cuba Emotet LockBit Mount Locker PLAY QakBot RagnarLocker Royal Ransom Zloader
2023-03-24 ⋅ Microsoft ⋅ Microsoft Incident Response
Guidance for investigating attacks using CVE-2023-23397
2023-03-17 ⋅ Microsoft ⋅ Azure Network Security Team
KillNet and affiliate hacktivist groups targeting healthcare with DDoS attacks
2023-03-15 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
A year of Russian hybrid warfare in Ukraine
CaddyWiper DesertBlade DoubleZero HermeticWiper INDUSTROYER2 IsaacWiper PartyTicket SwiftSlicer WhisperGate
2023-03-14 ⋅ Google ⋅ Benoit Sevens
Magniber ransomware actors used a variant of Microsoft SmartScreen bypass
Magniber
2023-03-13 ⋅ Microsoft ⋅ Microsoft Threat Intelligence Center
DEV-1101 enables high-volume AiTM campaigns with open-source phishing kit
2023-03-02 ⋅ Youtube (Microsoft Security Response Center (MSRC)) ⋅ Ben Magee, Daniel Taylor
BlueHat 2023: Hunting Qakbot with Daniel Taylor & Ben Magee
QakBot
2023-03-02 ⋅ YouTube (Microsoft Security) ⋅ Laurie Kirk
BlueHat 2023 Lightning Talk: Android Malware Obfuscation
2023-02-13 ⋅ Twitter (@MsftSecIntel) ⋅ Microsoft Threat Intelligence
Tweet on DEV-0147 compromising diplomatic targets in South America
Cobalt Strike ShadowPad DEV-0147
2023-02-03 ⋅ Microsoft ⋅ Clint Watts
Iran responsible for Charlie Hebdo attacks
Cotton Sandstorm
2023-02-02 ⋅ Microsoft ⋅ Microsoft
Iran responsible for Charlie Hebdo attacks
Cotton Sandstorm
2023-02-02 ⋅ YouTube (SLEUTHCON) ⋅ Christopher Glyer, Microsoft Threat Intelligence Center (MSTIC)
Lions, Tigers, and Infostealers - Oh my!
RecordBreaker RedLine Stealer Vidar
2023-01-01 ⋅ Microsoft ⋅ Microsoft
Microsoft Digital Defense Report 2023
Storm-0381 Storm-1133
2022-12-21 ⋅ Trustwave ⋅ Wojciech Cieslak
Malicious Macros Adapt to Use Microsoft Publisher to Push Ekipa RAT
Ekipa RAT
2022-12-21 ⋅ Microsoft ⋅ Microsoft Security Threat Intelligence
Microsoft research uncovers new Zerobot capabilities
ZeroBot SparkRAT
2022-12-15 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
MCCrash: Cross-platform DDoS botnet targets private Minecraft servers
DEV-1028
2022-12-03 ⋅ Microsoft ⋅ Cliff Watts
Preparing for a Russian cyber offensive against Ukraine this winter
CaddyWiper HermeticWiper Prestige