Click here to download all references as Bib-File.•
| 2025-06-18
⋅
Cisco Talos
⋅
Famous Chollima deploying Python version of GolangGhost RAT PylangGhost |
| 2025-06-05
⋅
Cisco Talos
⋅
Newly identified wiper malware “PathWiper” targets critical infrastructure in Ukraine PathWiper |
| 2025-05-22
⋅
Cisco Talos
⋅
UAT-6382 exploits Cityworks zero-day vulnerability to deliver malware Tetra Loader |
| 2025-05-13
⋅
Cisco Talos
⋅
Defining a new methodology for modeling and tracking compartmentalized threats |
| 2025-04-23
⋅
Cisco Talos
⋅
Introducing ToyMaker, an initial access broker working in cahoots with double extortion gangs HOLERUN |
| 2025-04-17
⋅
Cisco Talos
⋅
Unmasking the new XorDDoS controller and infrastructure XOR DDoS |
| 2025-03-28
⋅
Cisco Talos
⋅
Gamaredon campaign abuses LNK files to distribute Remcos backdoor Remcos |
| 2025-03-26
⋅
Cisco Talos
⋅
Year in Review |
| 2025-03-20
⋅
Cisco Talos
⋅
UAT-5918 targets critical infrastructure entities in Taiwan ShortLeash LaZagne JuicyPotato Meterpreter MimiKatz ShortLeash UAT-5918 |
| 2025-02-20
⋅
Cisco Talos
⋅
Weathering the storm: In the midst of a Typhoon |
| 2025-02-13
⋅
Recorded Future
⋅
RedMike (Salt Typhoon) Exploits Vulnerable Cisco Devices of Global Telecommunications Providers GhostEmperor |
| 2024-11-07
⋅
Cisco Talos
⋅
Unwrapping the emerging Interlock ransomware attack Interlock Rhysida |
| 2024-10-24
⋅
Cisco Talos
⋅
Writing a BugSleep C2 server and detecting its traffic with Snort bugsleep |
| 2024-10-23
⋅
Cisco Talos
⋅
Highlighting TA866/Asylum Ambuscade Activity Since 2021 WasabiSeed Cobalt Strike csharp-streamer RAT Resident Rhadamanthys WarmCookie |
| 2024-10-23
⋅
Cisco Talos
⋅
Threat Spotlight: WarmCookie/BadSpace Cobalt Strike csharp-streamer RAT WarmCookie |
| 2024-10-22
⋅
Cisco Talos
⋅
Threat actor abuses Gophish to deliver new PowerRAT and DCRAT PowerRAT |
| 2024-10-17
⋅
Cisco Talos
⋅
UAT-5647 targets Ukrainian and Polish entities with RomCom malware variants MeltingClaw ROMCOM RAT ShadyHammock RomCom |
| 2024-08-21
⋅
Cisco Talos
⋅
MoonPeak malware from North Korean actors unveils new details on attacker infrastructure MoonPeak XenoRAT UAT-5394 |
| 2024-08-01
⋅
Cisco
⋅
APT41 likely compromised Taiwanese government-affiliated research institute with ShadowPad and Cobalt Strike Cobalt Strike ShadowPad |
| 2024-06-21
⋅
Cisco Talos
⋅
SneakyChef espionage group targets government agencies with SugarGh0st and more infection techniques SneakyChef |