Click here to download all references as Bib-File.
| 2022-05-18 ⋅ Github (0x00-0x7f) ⋅ A Case of Vidar Infostealer - Part 2 Vidar |
| 2022-05-12 ⋅ cyble ⋅ A Closer Look At Eternity Malware: Threat Actors Leveraging Telegram To Build Malware Eternity Clipper Eternity Ransomware Eternity Stealer Eternity Worm |
| 2022-05-04 ⋅ HP ⋅ Tips for Automating IOC Extraction from GootLoader, a Changing JavaScript Malware GootLoader |
| 2022-04-26 ⋅ Intel 471 ⋅ Conti and Emotet: A constantly destructive duo Cobalt Strike Conti Emotet IcedID QakBot TrickBot |
| 2022-04-18 ⋅ National Intelligence University ⋅ Russian Intelligence: A Case-based Study of Russian Services and Missions Past and Present |
| 2022-03-31 ⋅ CrowdStrike ⋅ Cloudy with a Chance of Unclear Mailbox Sync: CrowdStrike Services Identifies Logging Inconsistencies in Microsoft 365 |
| 2022-03-27 ⋅ Github (0x00-0x7f) ⋅ A Case of Vidar Infostealer - Part 1 (Unpacking) Vidar |
| 2022-03-26 ⋅ n0p Blog ⋅ Analysis of a Caddy Wiper Sample Targeting Ukraine CaddyWiper |
| 2022-03-23 ⋅ KrebsOnSecurity ⋅ A Closer Look at the LAPSUS$ Data Extortion Group RedLine Stealer |
| 2022-03-23 ⋅ splunk ⋅ Gone in 52 Seconds…and 42 Minutes: A Comparative Analysis of Ransomware Encryption Speed Avaddon Babuk BlackMatter Conti DarkSide LockBit Maze Mespinoza REvil Ryuk |
| 2022-03-22 ⋅ The Hacker News ⋅ Microsoft and Okta Confirm Breach by LAPSUS$ Extortion Group RedLine Stealer |
| 2022-03-21 ⋅ Github (trendmicro) ⋅ Python script to check a Cyclops Blink C&C CyclopsBlink |
| 2022-03-13 ⋅ Security Affairs ⋅ The hidden C2: Lampion trojan release 212 is on the rise and using a C2 server for two years lampion |
| 2022-03-03 ⋅ LIFARS ⋅ A Closer Look at the Russian Actors Targeting Organizations in Ukraine HermeticWiper IsaacWiper Saint Bot WhisperGate |
| 2022-03-01 ⋅ Proofpoint ⋅ Asylum Ambuscade: State Actor Uses Compromised Private Ukrainian Military Emails to Target European Governments and Refugee Movement SunSeed |
| 2022-02-26 ⋅ Seguranca Informatica ⋅ The hidden C2: Lampion trojan release 212 is on the rise and using a C2 server for two years lampion |
| 2022-02-24 ⋅ nviso ⋅ Threat Update – Ukraine & Russia conflict EternalPetya GreyEnergy HermeticWiper Industroyer KillDisk WhisperGate |
| 2022-02-17 ⋅ Twitter (@Honeymoon_IoC) ⋅ Tweets on win.prometei caught via Cowrie Prometei |
| 2022-02-14 ⋅ Morphisec ⋅ Journey of a Crypto Scammer - NFT-001 AsyncRAT BitRAT Remcos |
| 2022-02-09 ⋅ Cisco ⋅ What’s with the shared VBA code between Transparent Tribe and other threat actors? |