Click here to download all references as Bib-File.
| 2023-03-28 ⋅ BitSight ⋅ Tofsee Botnet: Proxying and Mining Tofsee |
| 2022-11-30 ⋅ BitSight ⋅ Unpacking Colibri Loader: A Russian APT linked Campaign Colibri Loader PrivateLoader |
| 2022-11-03 ⋅ paloalto Netoworks: Unit42 ⋅ Cobalt Strike Analysis and Tutorial: Identifying Beacon Team Servers in the Wild Cobalt Strike |
| 2022-09-14 ⋅ Seguranca Informatica ⋅ URSA trojan is back with a new dance Mispadu |
| 2022-08-31 ⋅ BitSight ⋅ Tracking PrivateLoader: Malware Distribution Service PrivateLoader RedLine Stealer SmokeLoader |
| 2022-07-13 ⋅ Palo Alto Networks Unit 42 ⋅ Cobalt Strike Analysis and Tutorial: CS Metadata Encryption and Decryption Cobalt Strike |
| 2022-07-10 ⋅ Seguranca Informatica ⋅ Anubis Network is back with new C2 server |
| 2022-06-08 ⋅ Symantec ⋅ Attackers Exploit MSDT Follina Bug to Drop RAT, Infostealer AsyncRAT |
| 2022-06-06 ⋅ Hunting PrivateLoader: Pay-Per-Install Service PrivateLoader |
| 2022-05-06 ⋅ Palo Alto Networks Unit 42 ⋅ Cobalt Strike Analysis and Tutorial: CS Metadata Encoding and Decoding Cobalt Strike |
| 2022-04-20 ⋅ InfoSec Institute ⋅ Mars Stealer malware analysis Mars Stealer |
| 2022-04-11 ⋅ Seguranca Informatica ⋅ Analysis of the SunnyDay ransomware Curator |
| 2022-03-17 ⋅ Seguranca Informatica ⋅ Rook ransomware analysis Rook |
| 2022-03-16 ⋅ paloalto Netoworks: Unit42 ⋅ Cobalt Strike Analysis and Tutorial: How Malleable C2 Profiles Make Cobalt Strike Difficult to Detect Cobalt Strike |
| 2022-02-26 ⋅ Seguranca Informatica ⋅ The hidden C2: Lampion trojan release 212 is on the rise and using a C2 server for two years lampion |
| 2022-02-04 ⋅ BitSight ⋅ FluBot Malware Persists: Most Prevalent In Germany and Spain FluBot |
| 2022-01-31 ⋅ Seguranca Informatica ⋅ Taking the bait: The modus operandi of massive social engineering waves impacting banks in Portugal |
| 2022-01-25 ⋅ Seguranca Informatica ⋅ WastedLocker malware analysis WastedLocker |
| 2021-10-05 ⋅ Seguranca Informatica ⋅ Malware analysis: Details on LockBit ransomware LockBit |
| 2021-09-10 ⋅ Seguranca Informatica ⋅ The new maxtrilha trojan is being disseminated and targeting several banks Maxtrilha |