Click here to download all references as Bib-File.•
| 2026-05-26
⋅
Intrinsec
⋅
Pivoting on a malspam infrastructure delivering JS malware backed by bulletproof networks |
| 2025-11-26
⋅
Intrinsec
⋅
Trouble in the air: A spree of campaigns targeting the aerospace industry in Russia DarkWatchman CloudEyE Formbook PhantomCore Remcos |
| 2025-07-31
⋅
Intrinsec
⋅
Shadow syndicate infrastructure illumination AMOS BlackCat Cactus Cicada3301 Clop LockBit PLAY RansomHub Royal Ransom Silence |
| 2025-01-30
⋅
⋅
Intrinsec
⋅
Telegram Stories: voice spoofers, tools and operating modes |
| 2025-01-24
⋅
Intrinsec
⋅
"Premium panel": phishing tool used in longstanding campaigns worldwide |
| 2024-12-30
⋅
Intrinsec
⋅
CryptBot: Hunting for initial access vectors CryptBot Lumma Stealer PrivateLoader |
| 2024-11-21
⋅
Intrinsec
⋅
PROSPERO & Proton66: Uncovering the links between bulletproof networks Coper SpyNote FAKEUPDATES GootLoader EugenLoader |
| 2023-10-17
⋅
Intrinsec
⋅
Lumma Stealer actively deployed in multiple campaigns Lumma Stealer |
| 2023-10-04
⋅
Twitter (@Intrisec)
⋅
Tweet about new Bumblebee campaign leveraging CVE-2023-38831 BumbleBee |
| 2023-09-29
⋅
Intrinsec
⋅
Ongoing threats targeting the energy industry Agent Tesla CloudEyE |
| 2023-09-07
⋅
Twitter (@Intrisec)
⋅
Tweets on Bumblebee campaign spreading via Html smuggling downloading RAR archive with European Central Bank PDF lure and folder containing Bumblebee EXE payload. BumbleBee |
| 2023-02-14
⋅
Intrinsec
⋅
Vice-Society spreads its own ransomware HelloKitty PolyVice Zeppelin |
| 2023-01-09
⋅
Intrinsec
⋅
Emotet returns and deploys loaders BumbleBee Emotet IcedID PHOTOLITE |