Click here to download all references as Bib-File.•
| 2026-08-11
⋅
Aryaka Network
⋅
Beyond the Batch File Analysis of a Multi-Stage DonutLoader Infection Chain donut_injector |
| 2026-08-03
⋅
AhnLab
⋅
Analysis of the Connection Between Xctdoor and Past CRAT Attack Cases (Larva-26005) CRAT DRATzarus Larva-26005 |
| 2026-07-31
⋅
Medium @prtheus
⋅
1337_GTWK Linux Malware Analysis 1337_GTWK |
| 2026-07-30
⋅
Linux Malware 1337_GWTK Server Analysis 1337_GTWK |
| 2026-07-21
⋅
kienmanowar Blog
⋅
[QuickNote] Mustang Panda ToneShell (APT S1239) Beacon Shellcode – RE Analysis TONESHELL |
| 2026-07-21
⋅
ANY.RUN
⋅
SnappyClient Analysis SnappyClient |
| 2026-07-20
⋅
Medium Ireneusz Tarnowski
⋅
INC Ransom: Infrastructure Analysis, Operational Tradecraft, and Detection Opportunities INC INC |
| 2026-07-13
⋅
Github (VenzoV)
⋅
Lockbit 5.0 loader technical analysis LockBit |
| 2026-07-01
⋅
Fortinet
⋅
Analysis of Ongoing Ousaban Attacks Targeting the Iberian Peninsula Ousaban |
| 2026-06-19
⋅
Elastic
⋅
Lost in relocation: analysis of a new loader distributing CASTLESTEALER CASTLESTEALER |
| 2026-06-18
⋅
Lost in relocation: analysis of a new loader distributing CASTLESTEALER oxloader |
| 2026-06-11
⋅
⋅
ITOCH UCyber & Intelligence Inc.
⋅
Analysis of Suspicious Emails Targeting the Hotel Industry (Part 1: Campaign Overview) TonRAT |
| 2026-06-11
⋅
⋅
ITOCH UCyber & Intelligence Inc.
⋅
Analysis of Suspicious Emails Targeting the Hotel Industry (Part 2: Technical Details) TonRAT |
| 2026-06-09
⋅
Zscaler
⋅
Technical Analysis of MLTBackdoor MLTBackdoor |
| 2026-06-06
⋅
Antonio Parata Blogspot
⋅
shrun, apiwatcher, and argus: three malware analysis tools built with Claude Lorem Ipsum |
| 2026-05-27
⋅
bluecyber
⋅
MUSTANG PANDA x PLUGX - Analysis of the January 2026 sample: a multi-layer execution chain PlugX |
| 2026-05-18
⋅
Zynap
⋅
Zynap’s Next-Gen Sandbox Redefines Automatic Malware Analysis Black Basta HijackLoader |
| 2026-05-17
⋅
Github (zanez)
⋅
Analysis on Malware that attacks Israel's Water treatment facilities ZionSiphon |
| 2026-05-05
⋅
EG-FinCirt
⋅
Payload Ransomware: In-depth technical analysis Payload |
| 2026-05-05
⋅
EG-FinCirt
⋅
Payload Ransomware: In-depth technical analysis Payload |