Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2023-04-20 ⋅ Symantec ⋅ Threat Hunter Team
Daggerfly: APT Actor Targets Telecoms Company in Africa
MgBot
2023-04-20 ⋅ Fortinet ⋅ Cara Lin
EvilExtractor – All-in-One Stealer
EvilExtractor
2023-04-20 ⋅ Securonix ⋅ Den Iyzvyk, Oleg Kolesnikov, Tim Peck
New OCX#HARVESTER Attack Campaign Leverages a Modernized More_eggs Suite to Target Victims
More_eggs
2023-04-20 ⋅ Mandiant ⋅ ADRIAN SANCHEZ, DANIEL SCOTT, Dimiter Andonov, Fred Plan, Jake Nicastro, JEFF JOHNSON, Marius Fodoreanu, RENATO FONTANA
3CX Software Supply Chain Compromise Initiated by a Prior Software Supply Chain Compromise; Suspected North Korean Actor Responsible
POOLRAT IconicStealer UNC4736
2023-04-20 ⋅ Github (dodo-sec) ⋅ dodo-sec
An analysis of syscall usage in Cobalt Strike Beacons
Cobalt Strike
2023-04-20 ⋅ Interlab ⋅ INTERLAB, Ovi Liber
Uncovering nation state watering hole credential harvesting campaigns targeting human rights activists by APT threat group UCID902
2023-04-19 ⋅ Bleeping Computer ⋅ Bill Toulas
March 2023 broke ransomware attack records with 459 incidents
Clop WhiteRabbit BianLian Black Basta BlackCat LockBit Medusa PLAY Royal Ransom
2023-04-19 ⋅ ⋅ F.A.C.C.T. ⋅ Editor
A new group of Shadow ransomware attacks large industrial enterprises in Russia
2023-04-19 ⋅ Medium (@simone.kraus) ⋅ Simone Kraus
Rorschach Ransomware Analysis with Attack Flow
Rorschach Ransomware
2023-04-18 ⋅ KrebsOnSecurity ⋅ Brian Krebs
Giving a Face to the Malware Proxy Service ‘Faceless’
2023-04-18 ⋅ Avast Decoded ⋅ Martin Chlumecký
DDosia Project: How NoName057(16) is trying to improve the efficiency of DDoS attacks
Dosia
2023-04-18 ⋅ Trend Micro ⋅ Don Ovid Ladores
An Analysis of the BabLock (aka Rorschach) Ransomware
Rorschach Ransomware
2023-04-18 ⋅ Trend Micro ⋅ Don Ovid Ladores
An Analysis of the BabLock (aka Rorschach) Ransomware (IoCs)
Rorschach Ransomware
2023-04-18 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Nation-state threat actor PHOSPHORUS refines tradecraft to attack high-value targets
Drokbk APT35
2023-04-18 ⋅ NCSC UK ⋅ United Kingdom’s National Cyber Security Centre (NCSC-UK)
Jaguar Tooth - Cisco IOS malware that collects device information and enables backdoor access
2023-04-18 ⋅ Zscaler ⋅ Meghraj Nandanwar, Shatak Jain
Introducing DevOpt: A Multifunctional Backdoor Arsenal
DevOpt
2023-04-18 ⋅ Microsoft ⋅ Daniel Simpson, Dianne Gali, Stacyrch140
How Microsoft names threat actors
2023-04-17 ⋅ AhnLab ⋅ ASEC
Trigona Ransomware Attacking MS-SQL Servers
Trigona
2023-04-17 ⋅ BE42LATE ⋅ B42 Labs
Noname057(16) Attack Tracker
Dosia
2023-04-17 ⋅ JUMPSEC LABS ⋅ max corbridge
Butting Heads with a Threat Actor on an Engagement