Click here to download all references as Bib-File.•
| 2024-03-01
⋅
Ryan Weil
⋅
Agent Tesla Analysis [Part 2: Deobfuscation] Agent Tesla |
| 2024-03-01
⋅
Gatewatcher
⋅
CYBER THREATS SEMESTER REPORT (July - December 2023) (paywall) |
| 2024-03-01
⋅
Sekoia
⋅
NoName057(16)’s DDoSia project: 2024 updates and behavioural shifts Dosia |
| 2024-03-01
⋅
0x0v1
⋅
APT37's ROKRAT HWP Object Linking and Embedding RokRAT |
| 2024-02-29
⋅
Lookout
⋅
CryptoChameleon: New Phishing Tactics Exhibited in FCC-Targeted Attack CryptoChameleon |
| 2024-02-29
⋅
ANALYST1
⋅
LockBit Takedown & Operation Cronos: A Long-Awaited PsyOps Against Ransomware LockBit LockBit LockBit |
| 2024-02-29
⋅
CrowdStrike
⋅
The Anatomy of an ALPHA SPIDER Ransomware Attack BlackCat Alpha Spider |
| 2024-02-29
⋅
SANS ISC
⋅
Dissecting DarkGate: Modular Malware Delivery and Persistence as a Service DarkGate |
| 2024-02-28
⋅
eSentire
⋅
XRed Backdoor: The Hidden Threat in Trojanized Programs XRed |
| 2024-02-28
⋅
Security Intelligence
⋅
X-Force data reveals top spam trends, campaigns and senior superlatives in 2023 404 Keylogger Agent Tesla Black Basta DarkGate Formbook IcedID Loki Password Stealer (PWS) Pikabot QakBot Remcos |
| 2024-02-27
⋅
Mandiant
⋅
Cutting Edge, Part 3: Investigating Ivanti Connect Secure VPN Exploitation and Persistence Attempts BUSHWALK PITFUEL PITHOOK PITSOCK UNC5325 |
| 2024-02-27
⋅
Mandiant
⋅
Cutting Edge, Part 3: Investigating Ivanti Connect Secure VPN Exploitation and Persistence Attempts BUSHWALK Kubo Injector PITFUEL PITHOOK PITSOCK |
| 2024-02-27
⋅
Mandiant
⋅
When Cats Fly: Suspected Iranian Threat Actor UNC1549 Targets Israeli and Middle East Aerospace and Defense Sectors LIGHTRAIL MINIBIKE MINIBUS UNC1549 |
| 2024-02-27
⋅
Bitdefender
⋅
When Stealers Converge: New Variant of Atomic Stealer in the Wild AMOS |
| 2024-02-27
⋅
BitSight
⋅
Hunting PrivateLoader: The malware behind InstallsKey PPI service PrivateLoader RisePro |
| 2024-02-27
⋅
splunk
⋅
Unveiling Phemedrone Stealer: Threat Analysis and Detections Phemedrone Stealer |
| 2024-02-27
⋅
Zscaler
⋅
European diplomats targeted by SPIKEDWINE with WINELOADER WINELOADER SPIKEDWINE |
| 2024-02-27
⋅
US Department of Defense
⋅
Russian Cyber Actors Use Compromised Routers to Facilitate Cyber Operations MooBot |
| 2024-02-26
⋅
Morphisec
⋅
Unveiling UAC-0184: The Steganography Saga of the IDAT Loader Delivering Remcos RAT to a Ukraine Entity in Finland SystemBC Babadeda DanaBot HijackLoader Remcos SystemBC UAC-0184 |
| 2024-02-26
⋅
SOC Prime
⋅
UAC-0149 Attack Detection: Hackers Launch a Targeted Attack Against the Armed Forces of Ukraine, as CERT-UA Reports COOKBOX UAC-0149 |