Click here to download all references as Bib-File.
| 2023-10-13 ⋅ Elastic ⋅ Disclosing the BLOODALCHEMY backdoor win.trojan.bloodalchemy REF5961 |
| 2023-10-03 ⋅ Elastic ⋅ Introducing the REF5961 intrusion set (RUDEBIRD, DOWNTOWN, and EAGERBEE) EagerBee SManager REF2924 REF5961 |
| 2023-06-09 ⋅ Elastic ⋅ Elastic charms SPECTRALVIPER SPECTRALVIPER |
| 2023-06-09 ⋅ Elastic ⋅ Elastic charms SPECTRALVIPER |
| 2023-05-04 ⋅ Elastic ⋅ Unpacking ICEDID IcedID PhotoLoader |
| 2023-03-17 ⋅ Elastic ⋅ Thawing the permafrost of ICEDID Summary IcedID PhotoLoader |
| 2023-02-02 ⋅ Elastic ⋅ Update to the REF2924 intrusion set and related campaigns DoorMe ShadowPad SiestaGraph |
| 2022-08-24 ⋅ Elastic ⋅ QBOT Malware Analysis QakBot |
| 2022-07-27 ⋅ Elastic ⋅ Exploring the QBOT Attack Pattern QakBot |
| 2022-07-27 ⋅ Elastic ⋅ QBOT Configuration Extractor QakBot |
| 2022-05-05 ⋅ Elastic ⋅ BLISTER Loader Blister |
| 2022-03-07 ⋅ Elastic ⋅ PHOREAL Malware Targets the Southeast Asian Financial Sector PHOREAL |
| 2022-03-01 ⋅ Elastic ⋅ Elastic protects against data wiper malware targeting Ukraine: HERMETICWIPER HermeticWiper |