Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-05-04 ⋅ Cybereason ⋅ Akihiro Tomita, Assaf Dahan, Chen Erlich, Daniel Frank, Fusao Tanida, Niv Yona, Ofir Ozer
Operation CuckooBees: A Winnti Malware Arsenal Deep-Dive
PRIVATELOG Spyder STASHLOG Winnti
2022-05-03 ⋅ Cluster25 ⋅ Cluster25
The Strange Link Between A Destructive Malware And A Ransomware-Gang Linked Custom Loader: IsaacWiper Vs Vatet
Cobalt Strike IsaacWiper PyXie
2022-04-27 ⋅ Zscaler ⋅ Brett Stone-Gross, Dennis Schwarz
Targeted attack on Thailand Pass customers delivers AsyncRAT
AsyncRAT
2022-04-21 ⋅ CrowdStrike ⋅ Manoj Ahuje
LemonDuck Targets Docker for Cryptomining Operations
Lemon Duck
2022-04-14 ⋅ Bleeping Computer ⋅ Bill Toulas
New ZingoStealer infostealer drops more malware, cryptominers
2022-04-13 ⋅ ESET Research ⋅ Jean-Ian Boutin, Tomáš Procházka
ESET takes part in global operation to disrupt Zloader botnets
Cobalt Strike Zloader
2022-04-07 ⋅ Github (Jhangju) ⋅ Jhangju
office-node (OFFODE) - This is POC of how an attacker automate user's responce and bypass outlook
OFFODE
2022-04-07 ⋅ Microsoft ⋅ Tom Burt
Disrupting cyberattacks targeting Ukraine (APT28)
2022-04-06 ⋅ Abnormal ⋅ Abnormal Security
Tax Return Customer Campaign Attempts to Infect Victims with Sorillus RAT
Sorillus RAT
2022-03-24 ⋅ Sentinel LABS ⋅ Tom Hegel
Chinese Threat Actor Scarab Targeting Ukraine
Scieron Scarab
2022-03-24 ⋅ Sentinel LABS ⋅ Tom Hegel
Chinese Threat Actor Scarab Targeting Ukraine
HeaderTip Scieron
2022-03-21 ⋅ The DFIR Report ⋅ The DFIR Report
APT35 Automates Initial Access Using ProxyShell
2022-03-21 ⋅ Azure DevOps (Mastadamus) ⋅ Mastadamus
Anatomy of An Mirai Botnet Attack
Mirai
2022-03-17 ⋅ CISA ⋅ US-CERT
Alert (AA22-076A) Strengthening Cybersecurity of SATCOM Network Providers and Customers
2022-03-15 ⋅ JPCERT/CC ⋅ Shusei Tomonaga
Anti-UPX Unpacking Technique
Mirai
2022-03-12 ⋅ Arash's Blog ⋅ Arash Parsa
Analyzing Malware with Hooks, Stomps, and Return-addresses
Cobalt Strike
2022-03-07 ⋅ Check Point Research ⋅ Check Point
Lapsus$ Ransomware gang uses stolen source code to disguise malware files as trustworthy. Check Point customers remain protected
LAPSUS
2022-03-02 ⋅ Bleeping Computer ⋅ Bill Toulas
Log4shell exploits now used mostly for DDoS botnets, cryptominers
Kinsing Tsunami BillGates
2022-03-01 ⋅ Cybereason ⋅ Ohav Peri, Tom Fakterman
Cybereason vs. BlackCat Ransomware
BlackCat
2022-02-26 ⋅ Atomic Matryoshka ⋅ z3r0day_504
Infographic: APTs in South America
Imminent Monitor RAT Machete