Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2024-01-25 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Midnight Blizzard: Guidance for responders on nation-state attack
UNC2452
2024-01-23 ⋅ Rewterz Information Security ⋅ Rewterz Information Security
Rewterz Threat Alert –North Korean APT Kimsuky Aka Black Banshee - Active IOCs - Rewterz
FastFire FastSpy BabyShark Kimsuky Kimsuky
2024-01-23 ⋅ AhnLab ⋅ ATCP
Account Credential-Stealing Malware Detected by AhnLab MDS (Web Browsers, Email, FTP)
Kimsuky
2024-01-23 ⋅ CSIRT-CTI ⋅ CSIRT-CTI
Stately Taurus Targets Myanmar Amidst Concerns over Military Junta’s Handling of Rebel Attacks
PlugX PUBLOAD TONESHELL
2024-01-23 ⋅ Trend Micro ⋅ Christian Alpuerto, Christian Jason Geollegue, Don Ovid Ladores, Emmanuel Panopio, Emmanuel Roll, Francesca Villasanta, Gerald Fernandez, Julius Keith Estrellado, Raighen Sanchez, Raymart Yambot, Rhio Manaog, Shawn Austin Santos, Sophia Nilette Robles
Kasseika Ransomware Deploys BYOVD Attacks, Abuses PsExec and Exploits Martini Driver
Kasseika
2024-01-23 ⋅ YouTube (Invoke RE) ⋅ Josh Reynolds
Analyzing and Unpacking Qakbot using Binary Ninja Automation
QakBot
2024-01-23 ⋅ Medium ad12347 ⋅ Ariel Davidpur
NetSupport RAT hits again with new IOCs
NetSupportManager RAT
2024-01-22 ⋅ Resecurity ⋅ Resecurity
Cybercriminals leaked massive volumes of stolen PII data from Thailand in Dark Web
GhostR
2024-01-22 ⋅ SentinelOne ⋅ Aleksandar Milenkoski, Tom Hegel
ScarCruft | Attackers Gather Strategic Intelligence and Target Cybersecurity Professionals
Kimsuky
2024-01-19 ⋅ Mandiant ⋅ Mandiant
Chinese Espionage Group UNC3886 Found Exploiting CVE-2023-34048 Since Late 2021
2024-01-19 ⋅ Phylum ⋅ Phylum Research Team
npm Package Found Delivering Sophisticated RAT
Unidentified 113 (RAT)
2024-01-19 ⋅ Microsoft ⋅ MSRC Team
Microsoft Actions Following Attack by Nation State Actor Midnight Blizzard
2024-01-18 ⋅ eSentire ⋅ eSentire Threat Response Unit (TRU)
SmartApeSG Delivering NetSupport RAT
SmartApeSG
2024-01-18 ⋅ Google ⋅ Wesley Shields
Russian threat group COLDRIVER expands its targeting of Western officials to include the use of malware
RCS SPICA Callisto
2024-01-18 ⋅ Kroll ⋅ Sean Straw
Open the DARKGATE – Brute Forcing DARKGATE Encodings
DarkGate
2024-01-18 ⋅ Morphisec ⋅ Arnold Osipov
Chae$ Chronicles: Version 4.1 Dedicated to Morphisec Researchers
Chaes
2024-01-18 ⋅ Morphisec ⋅ Arnold Osipov
Chae$ Chronicles: Version 4.1 Dedicated to Morphisec Researchers
Chaes
2024-01-18 ⋅ Google ⋅ Google Threat Analysis Group, Wesley Shields
Russian threat group COLDRIVER expands its targeting of Western officials to include the use of malware
RCS SPICA
2024-01-17 ⋅ Rapid7 ⋅ Natalie Zargarov
Whispers of Atlantida: Safeguarding Your Digital Treasure
Atlantida
2024-01-17 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
New TTPs observed in Mint Sandstorm campaign targeting high-profile individuals at universities and research orgs
MediaPI APT35