Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2025-06-12 ⋅ Symantec ⋅ Carbon Black, Threat Hunter Team
Fog Ransomware: Unusual Toolset Used in Recent Attack
Fog
2023-11-06 ⋅ VMWare Carbon Black ⋅ Abe Schneider, Alan Ngo, Bria Beathley, Swee Lai Lee
Jupyter Rising: An Update on Jupyter Infostealer
solarmarker
2023-06-01 ⋅ vmware ⋅ Fae Carlisle
Carbon Black’s TrueBot Detection
Silence
2021-03-29 ⋅ VMWare Carbon Black ⋅ Giovanni Vigna, Jason Zhang, Oleg Boyarchuk
Dridex Reloaded: Analysis of a New Dridex Campaign
Dridex
2021-03-25 ⋅ VMWare Carbon Black ⋅ Baibhav Singh, Giovanni Vigna, Threat Analysis Unit
Memory Forensics for Virtualized Hosts
2021-02-24 ⋅ ⋅ VMWare Carbon Black ⋅ Takahiro Haruyama
Knock, knock, Neo. - Active C2 Discovery Using Protocol Emulation
Cobalt Strike
2020-07-24 ⋅ VMWare Carbon Black ⋅ Andrew Costis
TAU Threat Discovery: Cryptocurrency Clipper Malware Evolves
Poulight Stealer
2020-07-08 ⋅ VMWare Carbon Black ⋅ Brian Baskin
TAU Threat Discovery: Conti Ransomware
Conti
2020-06-15 ⋅ VMWare Carbon Black ⋅ A C
TAU Threat Analysis: Relations to Hakbit Ransomware
Hakbit
2020-06-08 ⋅ VMWare Carbon Black ⋅ A C
TAU Threat Analysis: Hakbit Ransomware
Hakbit
2020-06-03 ⋅ VMWare Carbon Black ⋅ Brian Baskin
Medusa Locker Ransomware
MedusaLocker
2020-05-28 ⋅ VMWare Carbon Black ⋅ Ryan Murphy, Tom Kellermann
Modern Bank Heists 3.0
Emotet
2020-05-21 ⋅ VMWare Carbon Black ⋅ Jared Myers
TAU Technical Report: New Attack Combines TinyPOS With Living-off-the-Land Techniques for Scraping Credit Card Data
AbaddonPOS
2020-04-16 ⋅ VMWare Carbon Black ⋅ Scott Knight
The Evolution of Lazarus
HOTCROISSANT Rifdoor
2020-03-26 ⋅ VMWare Carbon Black ⋅ Scott Knight
The Dukes of Moscow
Cobalt Strike LiteDuke MiniDuke OnionDuke PolyglotDuke PowerDuke
2020-02-20 ⋅ Carbon Black ⋅ Takahiro Haruyama
Threat Analysis: Active C2 Discovery Using Protocol Emulation Part2 (Winnti 4.0)
Winnti
2020-02-12 ⋅ VMWare Carbon Black ⋅ AC, Rachel E. King
Ryuk Ransomware Technical Analysis
Ryuk
2019-11-19 ⋅ VMWare Carbon Black ⋅ VMWare
Threat Analysis Unit (TAU) Threat Intelligence Notification: AsyncRAT
AsyncRAT
2019-10-24 ⋅ Carbon Black ⋅ Takahiro Haruyama
Defeating APT10 Compiler-level Obfuscations
Anel
2019-03-28 ⋅ Carbon Black ⋅ CB TAU Threat Intelligence
CryptoMix Clop Ransomware Disables Startup Repair, Removes & Edits Shadow Volume Copies
Clop
2018-07-10 ⋅ Carbon Black ⋅ Jared Myers
Carbon Black TAU Threat Analysis: Recent Dharma Ransomware Highlights Attackers’ Continued Use of Open-Source Tools
Dharma
2018-02-27 ⋅ VMWare Carbon Black ⋅ Jared Myers
Threat Analysis: ROKRAT Malware
RokRAT
2017-08-18 ⋅ vmware ⋅ Jared Myers
Threat Analysis: Carbon Black Threat Research Dissects PNG Dropper
Uroburos
2017-05-09 ⋅ VMWare Carbon Black ⋅ Jared Myers
Carbon Black Threat Research Dissects Red Leaves Malware, Which Leverages DLL Side Loading
RedLeaves
2013-02-08 ⋅ VMWare Carbon Black ⋅ Patrick Morley
Bit9 and Our Customers’ Security
APT17