Click here to download all references as Bib-File.
| 2023-03-01 ⋅ Trend Micro ⋅ Iron Tiger’s SysUpdate Reappears, Adds Linux Targeting HyperSSL HyperSSL |
| 2022-08-12 ⋅ Trend Micro ⋅ Iron Tiger Compromises Chat Application Mimi, Targets Windows, Mac, and Linux Users Rshell HyperBro |
| 2022-08-12 ⋅ Trend Micro ⋅ Iron Tiger Compromises Chat Application Mimi, Targets Windows, Mac, and Linux Users (IOCs) HyperBro |
| 2022-05-23 ⋅ Trend Micro ⋅ Operation Earth Berberoka reptile oRAT Ghost RAT PlugX pupy Earth Berberoka |
| 2022-05-07 ⋅ YouTube (botconf eu) ⋅ Operation Gamblingpuppet: Analysis Of A Multiplatform Campaign Targeting Online Gambling Customers Earth Berberoka |
| 2022-04-27 ⋅ Trend Micro ⋅ New APT Group Earth Berberoka Targets Gambling Websites With Old and New Malware AsyncRAT Ghost RAT PlugX Quasar RAT Earth Berberoka |
| 2022-04-27 ⋅ Trendmicro ⋅ Operation Gambling Puppet reptile oRAT AsyncRAT Cobalt Strike DCRat Ghost RAT PlugX Quasar RAT Trochilus RAT Earth Berberoka |
| 2022-01-17 ⋅ Trend Micro ⋅ Delving Deep: An Analysis of Earth Lusca’s Operations BIOPASS Cobalt Strike FunnySwitch JuicyPotato ShadowPad Winnti Earth Lusca |
| 2021-09-13 ⋅ Trend Micro ⋅ APT-C-36 Updates Its Spam Campaign Against South American Entities With Commodity RATs (IOCs) AsyncRAT Ave Maria BitRAT Imminent Monitor RAT LimeRAT NjRAT Remcos |
| 2021-09-13 ⋅ Trend Micro ⋅ APT-C-36 Updates Its Spam Campaign Against South American Entities With Commodity RATs AsyncRAT Ave Maria BitRAT Imminent Monitor RAT LimeRAT NjRAT Remcos |
| 2021-08-17 ⋅ Trend Micro ⋅ Confucius Uses Pegasus Spyware-related Lures to Target Pakistani Military Chrysaor Confucius |
| 2021-06-02 ⋅ Trend Micro ⋅ Taking Advantage of PE Metadata, or How To Complete Your Favorite Threat Actor’s Sample Collection HyperSSL |
| 2021-06-02 ⋅ Trend Micro ⋅ Taking Advantage of PE Metadata,or How To Complete your Favorite ThreatActor’s Sample Collection (Paper) HyperSSL |
| 2021-04-09 ⋅ Trend Micro ⋅ Iron Tiger APT Updates Toolkit With Evolved SysUpdate Malware HyperBro HyperSSL |
| 2020-10-28 ⋅ Trend Micro ⋅ Operation Earth Kitsune: A Dance of Two New Backdoors AgfSpy DneSpy SLUB |
| 2020-10-19 ⋅ Trend Micro ⋅ Operation Earth Kitsune: Tracking SLUB’s Current Operations SLUB |
| 2020-10-03 ⋅ Trend Micro ⋅ Earth Akhlut: Exploring the Tools, Tactics, and Procedures of an Advanced Threat Actor Operating a Large Infrastructure Dexbia TypeHash |
| 2020-06-03 ⋅ Trend Micro ⋅ How to perform long term monitoring of careless threat actors BBSRAT HyperBro Trochilus RAT |
| 2020-02-18 ⋅ Trend Micro ⋅ Uncovering DRBControl: Inside the Cyberespionage Campaign Targeting Gambling Operations Cobalt Strike HyperBro PlugX Trochilus RAT |
| 2020-02-18 ⋅ Trend Micro ⋅ Uncovering DRBControl Clambling |