Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-06-02 ⋅ Mandiant ⋅ Mandiant Intelligence
To HADES and Back: UNC2165 Shifts to LOCKBIT to Evade Sanctions
FAKEUPDATES Blister Cobalt Strike DoppelPaymer Dridex FriedEx Hades LockBit Macaw MimiKatz Phoenix Locker WastedLocker
2022-06-02 ⋅ Microsoft ⋅ Microsoft Digital Security Unit (DSU), Microsoft Threat Intelligence Center (MSTIC)
Exposing POLONIUM activity and infrastructure targeting Israeli organizations
POLONIUM
2022-06-02 ⋅ Microsoft ⋅ Microsoft Digital Crimes Unit
Complaint filed by Microsoft Digital Crimes Unit against BOHRIUM, a Iranian threat actor
2022-06-01 ⋅ Avertium ⋅ Avertium
An In-Depth Look At Black Basta Ransomware
Black Basta
2022-06-01 ⋅ Deep instinct ⋅ Simon Kenin
Iranian Threat Actor Continues to Develop Mass Exploitation Tools
CobaltMirage FRP
2022-06-01 ⋅ Qianxin Threat Intelligence Center ⋅ Red Raindrop Team
Analysis of the attack activities of the Maha grass group using the documents of relevant government agencies in Pakistan as bait
BadNews QUILTED TIGER
2022-06-01 ⋅ Avast ⋅ Jakub Vávra
SMSFactory Android Trojan producing high costs for victims
2022-06-01 ⋅ Group-IB ⋅ Alexander Badaev, Nikita Rostovcev
SideWinder.AntiBot.Script Analysis of SideWinder's new infrastructure and tool that narrows their reach to Pakistan
2022-05-30 ⋅ ⋅ NSFOCUS ⋅ NSFOCUS
Operation DarkCasino: In-Depth Analysis of Recent Attacks by APT Group EVILNUM
DarkMe
2022-05-30 ⋅ Matthieu Walter
Automatically Unpacking IcedID Stage 1 with Angr
IcedID
2022-05-28 ⋅ Bleeping Computer ⋅ Sergiu Gatlan
Clop ransomware gang is back, hits 21 victims in a single month
Clop
2022-05-27 ⋅ Malwarology ⋅ Gaetano Pellegrino
Janicab Series: The Core Artifact
Janicab
2022-05-27 ⋅ ⋅ PTSecurity ⋅ Aleksey Vishnyakov, Anton Belousov
How bootkits are implemented in modern firmware and how UEFI differs from Legacy BIOS
LoJax MoonBounce
2022-05-26 ⋅ Darktrace ⋅ DarkTrace
Worm-like propagation of Sysrv-hello crypto-jacking botnet: Network traffic analysis and latest TTPs
Sysrv-hello Sysrv-hello
2022-05-26 ⋅ Trustwave ⋅ Bernard Bautista
Grandoreiro Banking Malware Resurfaces for Tax Season
Grandoreiro
2022-05-26 ⋅ IBM ⋅ Dave McMillen, Kevin Henson
Black Basta Besting Your Network?
Black Basta
2022-05-25 ⋅ Medium walmartglobaltech ⋅ Jason Reaves, Joshua Platt
SocGholish Campaigns and Initial Access Kit
FAKEUPDATES Blister Cobalt Strike NetSupportManager RAT
2022-05-25 ⋅ Team Cymru ⋅ S2 Research Team
Bablosoft; Lowering the Barrier of Entry for Malicious Actors
BlackGuard BumbleBee RedLine Stealer
2022-05-25 ⋅ cyble ⋅ Cyble Research Labs
ERMAC Back In Action: Latest Version Of Android Banking Trojan Targets Over 400 Applications
ERMAC
2022-05-25 ⋅ Reuters ⋅ Christopher Bing, James Pearson, Raphael Satter
Russian hackers are linked to new Brexit leak website, Google says