Click here to download all references as Bib-File.

Enter keywords to filter the library entries below or Propose new Entry
2021-11-12 ⋅ Twitter (@Arkbird_SOLG) ⋅ Arkbird
@online{arkbird:20211112:tweets:3905e33, author = {Arkbird}, title = {{Tweets on Void Balaur using QuantLoader and ZStealer}}, date = {2021-11-12}, organization = {Twitter (@Arkbird_SOLG)}, url = {https://twitter.com/Arkbird_SOLG/status/1458973883068043264}, language = {English}, urldate = {2021-12-22} } Tweets on Void Balaur using QuantLoader and ZStealer
QuantLoader ZStealer
2021-08-30 ⋅ Twitter (@Arkbird_SOLG) ⋅ Arkbird
@online{arkbird:20210830:mercurialgrabber:0c3b718, author = {Arkbird}, title = {{Tweet on MercurialGrabber}}, date = {2021-08-30}, organization = {Twitter (@Arkbird_SOLG)}, url = {https://twitter.com/Arkbird_SOLG/status/1432127748001128459}, language = {English}, urldate = {2021-12-22} } Tweet on MercurialGrabber
MercurialGrabber
2021-03-27 ⋅ Github (StrangerealIntel) ⋅ Twitter (@Arkbird_SOLG)
@online{arkbirdsolg:20210327:terraloader:73371d5, author = {Twitter (@Arkbird_SOLG)}, title = {{Terraloader: Congrats, you have a new fake job!}}, date = {2021-03-27}, organization = {Github (StrangerealIntel)}, url = {https://github.com/StrangerealIntel/CyberThreatIntel/blob/master/Additional%20Analysis/Terraloader/2021-03-25/Analysis.md#terraloader--congrats-you-have-a-new-fake-job-}, language = {English}, urldate = {2021-05-03} } Terraloader: Congrats, you have a new fake job!
TerraLoader
2020-09-11 ⋅ Twitter (@Arkbird_SOLG) ⋅ Arkbird
@online{arkbird:20200911:discovery:99adb88, author = {Arkbird}, title = {{Tweet on discovery of a sample}}, date = {2020-09-11}, organization = {Twitter (@Arkbird_SOLG)}, url = {https://twitter.com/Arkbird_SOLG/status/1304187749373800455}, language = {English}, urldate = {2020-10-21} } Tweet on discovery of a sample
Turla SilentMoon
2020-09-03 ⋅ Twitter (@Arkbird_SOLG) ⋅ Arkbird
@online{arkbird:20200903:development:cf8dd7d, author = {Arkbird}, title = {{Tweet on development in more_eggs}}, date = {2020-09-03}, organization = {Twitter (@Arkbird_SOLG)}, url = {https://twitter.com/Arkbird_SOLG/status/1301536930069278727}, language = {English}, urldate = {2020-09-15} } Tweet on development in more_eggs
More_eggs
2020-08-17 ⋅ Twitter (@Arkbird_SOLG) ⋅ Arkbird
@online{arkbird:20200817:short:a510811, author = {Arkbird}, title = {{Short twitter thread with analysis on Loup ATM malware}}, date = {2020-08-17}, organization = {Twitter (@Arkbird_SOLG)}, url = {https://twitter.com/Arkbird_SOLG/status/1295396936896438272}, language = {English}, urldate = {2020-08-25} } Short twitter thread with analysis on Loup ATM malware
Loup
2020-06-22 ⋅ Github (StrangerealIntel) ⋅ Twitter (@Arkbird_SOLG)
@online{arkbirdsolg:20200622:ftcode:1f79b62, author = {Twitter (@Arkbird_SOLG)}, title = {{FTcode targets European countries}}, date = {2020-06-22}, organization = {Github (StrangerealIntel)}, url = {https://github.com/StrangerealIntel/CyberThreatIntel/blob/master/Additional%20Analysis/Unknown/2020-06-22/Analysis.md}, language = {English}, urldate = {2020-06-24} } FTcode targets European countries
FTCODE
2020-05-05 ⋅ Github (StrangerealIntel) ⋅ @Arkbird_SOLG
@online{arkbirdsolg:20200505:operation:448dc4a, author = {@Arkbird_SOLG}, title = {{Operation Flash Cobra}}, date = {2020-05-05}, organization = {Github (StrangerealIntel)}, url = {https://github.com/StrangerealIntel/CyberThreatIntel/blob/master/North%20Korea/APT/Lazarus/2020-05-05/Analysis.md}, language = {English}, urldate = {2020-05-07} } Operation Flash Cobra