Click here to download all references as Bib-File.
2021-07-06 ⋅ Twitter (@_alex_il_) ⋅ Tweet on REvil ransomware actor using vulnerable defender executable in its infection flow in early may before Kaseya attack REvil |
2021-05-26 ⋅ Check Point ⋅ Melting Ice – Tracking IcedID Servers with a few simple steps IcedID |
2021-04-19 ⋅ Twitter (@_alex_il_) ⋅ Tweet on QakBot's additional decryption mechanism QakBot |
2021-03-11 ⋅ Check Point Research ⋅ Playing in the (Windows) Sandbox |
2020-08-27 ⋅ Checkpoint ⋅ An Old Bot’s Nasty New Tricks: Exploring Qbot’s Latest Attack Methods QakBot |