Click here to download all references as Bib-File.•
| 2025-01-27
⋅
Zscaler
⋅
Technical Analysis of Xloader Versions 6 and 7 | Part 1 Xloader |
| 2025-01-27
⋅
The DFIR Report
⋅
Cobalt Strike and a Pair of SOCKS Lead to LockBit Ransomware GhostSocks LockBit SystemBC |
| 2025-01-27
⋅
SecurityScorecard
⋅
Operation Phantom Circuit: North Korea’s Global Data Exfiltration Campaign |
| 2025-01-27
⋅
Youtube (MalwareAnalysisForHedgehogs)
⋅
Malware Analysis - Binary Refinery URL extraction of Multi-Layered PoshLoader for LummaStealer Lumma Stealer |
| 2025-01-26
⋅
⋅
Youtube (greenplan)
⋅
[BINARY REFINERY] (Emmenhtal) - Deobfuscation stage JavaScript and PowerShell Emmenhtal |
| 2025-01-25
⋅
Sophos
⋅
Sophos MDR tracks two ransomware campaigns using “email bombing,” Microsoft Teams “vishing” ReedBed STAC5143 UNC4393 |
| 2025-01-24
⋅
Intrinsec
⋅
"Premium panel": phishing tool used in longstanding campaigns worldwide |
| 2025-01-23
⋅
SentinelOne
⋅
HellCat and Morpheus | Two Brands, One Payload as Ransomware Affiliates Drop Identical Code Morpheus |
| 2025-01-23
⋅
Github (PaloAltoNetworks)
⋅
Cluster of Infrastructure likely used by Affiliate of Dark Scorpius (Black Basta) ReedBed |
| 2025-01-23
⋅
Netskope
⋅
Lumma Stealer: Fake CAPTCHAs & New Techniques to Evade Detection Lumma Stealer |
| 2025-01-23
⋅
Hunt.io
⋅
Mapping Suspected KEYPLUG Infrastructure: TLS Certificates, GhostWolf, and RedGolf/APT41 Activity KEYPLUG |
| 2025-01-23
⋅
AhnLab
⋅
RID Hijacking Technique Utilized by Andariel Attack Group CreateHiddenAccount JuicyPotato |
| 2025-01-23
⋅
Lumen
⋅
The J-Magic Show: Magic Packets and Where to find them J-Magic SEASPY |
| 2025-01-23
⋅
ThreatMon
⋅
Helldown Ransomware Malware Analysis Report HellDown |
| 2025-01-22
⋅
Cyber Shafarat
⋅
DarkGaboon targets Russian FinServ DarkGaboon |
| 2025-01-22
⋅
Vertex
⋅
Categorizing Software with Code Families WarmCookie |
| 2025-01-22
⋅
ESET Research
⋅
PlushDaemon compromises supply chain of Korean VPN service SlowStepper PlushDaemon |
| 2025-01-21
⋅
Google
⋅
The Anatomy of China's Hacker Ecosystem: Espionage, Black Markets, and Financially Motivated Attacks ANGRYREBEL Cobalt Strike CROSSWALK GRAYRABBIT PlugX Remcos Rhadamanthys SiestaGraph ZXShell |
| 2025-01-21
⋅
Seqrite
⋅
Silent Lynx APT Targets Various Entities Across Kyrgyzstan & Neighbouring Nations Unidentified PS 005 (Telegram Bot) YoroTrooper |
| 2025-01-21
⋅
Financial Security Institute
⋅
Follow the Clues - Everyday is lazarus.day |