Click here to download all references as Bib-File.
| 2023-08-24 ⋅ Elastic ⋅ Revisting BLISTER: New development of the BLISTER loader Blister |
| 2023-08-24 ⋅ Elastic ⋅ Revisting BLISTER: New development of the BLISTER loader Blister |
| 2023-06-29 ⋅ Elastic ⋅ The DPRK strikes using a new variant of RUSTBUCKET RustBucket |
| 2023-06-21 ⋅ Elastic ⋅ Initial research exposing JOKERSPY JokerSpy |
| 2023-06-09 ⋅ Elastic ⋅ Elastic charms SPECTRALVIPER SPECTRALVIPER |
| 2023-06-09 ⋅ Elastic ⋅ Elastic charms SPECTRALVIPER |
| 2023-05-04 ⋅ Elastic ⋅ Unpacking ICEDID IcedID PhotoLoader |
| 2023-04-25 ⋅ Elastic ⋅ Elastic Security Labs discovers the LOBSHOT malware LOBSHOT |
| 2023-04-07 ⋅ Elastic ⋅ Attack chain leads to XWORM and AGENTTESLA Agent Tesla XWorm |
| 2023-03-30 ⋅ Elastic ⋅ Elastic users protected from SUDDENICON’s supply chain attack 3CX Backdoor |
| 2023-03-20 ⋅ Elastic ⋅ NAPLISTENER: more bad dreams from developers of SIESTAGRAPH NAPLISTENER SiestaGraph |
| 2023-03-17 ⋅ Elastic ⋅ Thawing the permafrost of ICEDID Summary IcedID PhotoLoader |
| 2023-02-02 ⋅ Elastic ⋅ Update to the REF2924 intrusion set and related campaigns DoorMe ShadowPad SiestaGraph |
| 2022-12-16 ⋅ Elastic ⋅ SiestaGraph: New implant uncovered in ASEAN member foreign ministry DoorMe SiestaGraph |
| 2022-10-31 ⋅ Elastic ⋅ ICEDIDs network infrastructure is alive and well IcedID |
| 2022-10-28 ⋅ Elastic ⋅ EMOTET dynamic config extraction Emotet |
| 2022-09-09 ⋅ Elastic ⋅ BUGHATCH Malware Analysis BUGHATCH |
| 2022-08-24 ⋅ Elastic ⋅ QBOT Malware Analysis QakBot |
| 2022-07-27 ⋅ Elastic ⋅ QBOT Configuration Extractor QakBot |
| 2022-07-27 ⋅ Elastic ⋅ Exploring the QBOT Attack Pattern QakBot |