Click here to download all references as Bib-File.
| 2021-11-16 ⋅ Cisco ⋅ Attackers use domain fronting technique to target Myanmar with Cobalt Strike Cobalt Strike |
| 2021-11-10 ⋅ Cisco Talos ⋅ North Korean attackers use malicious blogs to deliver malware to high-profile South Korean targets GoldDragon |
| 2021-11-09 ⋅ Cisco Talos ⋅ Cisco Talos finds 10 vulnerabilities in Azure Sphere’s Linux kernel, Security Monitor and Pluton |
| 2021-11-03 ⋅ Cisco Talos ⋅ Microsoft Exchange vulnerabilities exploited once again for ransomware, this time with Babuk Babuk CHINACHOPPER |
| 2021-10-26 ⋅ Cisco Talos ⋅ SQUIRRELWAFFLE Leverages malspam to deliver Qakbot, Cobalt Strike Cobalt Strike QakBot Squirrelwaffle |
| 2021-10-19 ⋅ Cisco Talos ⋅ Malicious campaign uses a barrage of commodity RATs to target Afghanistan and India DCRat Quasar RAT |
| 2021-10-19 ⋅ Cisco ⋅ STRRAT, ZLoader, and HoneyGain STRRAT Zloader |
| 2021-10-04 ⋅ Cisco ⋅ Threat hunting in large datasets by clustering security events BazarBackdoor TrickBot |
| 2021-09-30 ⋅ Cisco ⋅ A wolf in sheep's clothing: Actors spread malware by leveraging trust in Amnesty International and fear of Pegasus |
| 2021-09-16 ⋅ Cisco ⋅ Operation Layover: How we tracked an attack on the aviation industry to five years of compromise AsyncRAT Houdini NjRAT |
| 2021-08-31 ⋅ Cisco Talos ⋅ Attracting flies with Honey(gain): Adversarial abuse of proxyware |
| 2021-08-12 ⋅ Cisco Talos ⋅ Signed MSI files, Raccoon and Amadey are used for installing ServHelper RAT Amadey Raccoon ServHelper |
| 2021-06-22 ⋅ Cisco ⋅ Attackers in Executive Clothing - BEC continues to separate orgs from their money |
| 2021-06-01 ⋅ Cisco ⋅ Backdoors, RATs, Loaders evasion techniques BazarNimrod GoldMax Oblique RAT |
| 2021-05-26 ⋅ Cisco Talos ⋅ Elizabethan England has nothing on modern-day Russia |
| 2021-05-07 ⋅ Cisco Talos ⋅ Lemon Duck spreads its wings: Actors target Microsoft Exchange servers, incorporate new TTPs CHINACHOPPER Cobalt Strike |
| 2021-03-24 ⋅ Cisco ⋅ Quarterly Report: Incident Response trends from Winter 2020-21 Egregor REvil WastedLocker |
| 2021-03-09 ⋅ Cisco Talos ⋅ Hafnium Update: Continued Microsoft Exchange Server Exploitation |
| 2021-03-02 ⋅ Cisco Talos ⋅ ObliqueRAT returns with new campaign using hijacked websites Oblique RAT |
| 2021-02-17 ⋅ Cisco Talos ⋅ Masslogger campaigns exfiltrates user credentials MASS Logger |