Click here to download all references as Bib-File.•
| 2024-08-08
⋅
SOCRadar
⋅
Dark Peep #16: Play Ransomware & LockBit’s Alliance, BreachForums Leak, and CyberNiggers’ Revival AzzaSec |
| 2024-08-07
⋅
⋅
Kaspersky
⋅
Новый червь CMoon распространяется через скомпрометированный сайт cmoon |
| 2024-08-07
⋅
ThreatMon
⋅
AzzaSec Ransomware Technical Malware Analysis HiddenTear |
| 2024-08-06
⋅
Seqrite
⋅
Unmasking Cronus: How Fake PayPal Documents Deliver Fileless Ransomware via PowerShel |
| 2024-08-05
⋅
BreachNova
⋅
How attacker achive Email Spoofing, Message Spoofing, IP and UserAgent Spoofing |
| 2024-08-04
⋅
Twitter (@embee_research)
⋅
Decoding a Cobalt Strike Downloader Script With CyberChef Cobalt Strike |
| 2024-08-02
⋅
Palo Alto Networks Unit 42
⋅
Fighting Ursa Luring Targets With Car for Sale Headlace |
| 2024-08-02
⋅
Volexity
⋅
StormBamboo Compromises ISP to Abuse Insecure Software Update Mechanisms CDDS DUSTPAN MgBot |
| 2024-08-01
⋅
Bundesamt für Verfassungsschutz
⋅
BfV Cyber Insight - The i-Soon-Leaks: Industrialization of Cyber Espionage, Part 1: Organization and methods of i-Soon APT units |
| 2024-08-01
⋅
Cisco
⋅
APT41 likely compromised Taiwanese government-affiliated research institute with ShadowPad and Cobalt Strike Cobalt Strike ShadowPad |
| 2024-08-01
⋅
Elastic
⋅
BITS and Bytes: Analyzing BITSLOTH, a newly identified backdoor BITSloth |
| 2024-08-01
⋅
Krakz
⋅
Latrodectus dropped by BR4 Brute Ratel C4 Latrodectus |
| 2024-08-01
⋅
Intel 471
⋅
BlankBot - a new Android banking trojan with screen recording, keylogging and remote control capabilities BlankBot |
| 2024-07-31
⋅
Broadcom
⋅
DeerStealer malware spread via fake Google Authenticator websites DeerStealer |
| 2024-07-30
⋅
eSentire
⋅
Threat actor impersonates Google via fake ad for Authenticator DeerStealer |
| 2024-07-30
⋅
HackRead
⋅
Hacker Scrapes and Publishes 100,000-Line CrowdStrike IoC List SAMBASPIDER |
| 2024-07-29
⋅
loginsoft
⋅
Blue Screen Mayhem: When CrowdStrike's Glitch Became Threat Actor's Playground Daolpu HijackLoader Remcos |
| 2024-07-29
⋅
Microsoft
⋅
Ransomware operators exploit ESXi hypervisor vulnerability for mass encryption Black Basta Black Basta Storm-0506 |
| 2024-07-29
⋅
Mandiant
⋅
UNC4393 Goes Gently into the SILENTNIGHT Black Basta QakBot sRDI SystemBC Zloader UNC3973 UNC4393 |
| 2024-07-26
⋅
Darktrace
⋅
Disarming the WarmCookie Backdoor: Darktrace’s Oven-Ready Solution WarmCookie |