Click here to download all references as Bib-File.

Enter keywords to filter the library entries below or Propose new Entry
2023-06-21 ⋅ Kaspersky Labs ⋅ Georgy Kucherin, Leonid Bezvershenko, Igor Kuznetsov
@online{kucherin:20230621:dissecting:2caf8b9, author = {Georgy Kucherin and Leonid Bezvershenko and Igor Kuznetsov}, title = {{Dissecting TriangleDB, a Triangulation spyware implant}}, date = {2023-06-21}, organization = {Kaspersky Labs}, url = {https://securelist.com/triangledb-triangulation-implant/110050/}, language = {English}, urldate = {2023-06-26} } Dissecting TriangleDB, a Triangulation spyware implant
TriangleDB
2023-06-01 ⋅ Kaspersky Labs ⋅ Igor Kuznetsov, Valentin Pashkov, Leonid Bezvershenko, Georgy Kucherin
@online{kuznetsov:20230601:operation:ad8eded, author = {Igor Kuznetsov and Valentin Pashkov and Leonid Bezvershenko and Georgy Kucherin}, title = {{Operation Triangulation: iOS devices targeted with previously unknown malware}}, date = {2023-06-01}, organization = {Kaspersky Labs}, url = {https://securelist.com/operation-triangulation/109842/}, language = {English}, urldate = {2023-06-01} } Operation Triangulation: iOS devices targeted with previously unknown malware
2023-05-19 ⋅ Kaspersky Labs ⋅ Leonid Bezvershenko, Georgy Kucherin, Igor Kuznetsov
@online{bezvershenko:20230519:cloudwizard:7ad05b6, author = {Leonid Bezvershenko and Georgy Kucherin and Igor Kuznetsov}, title = {{CloudWizard APT: the bad magic story goes on}}, date = {2023-05-19}, organization = {Kaspersky Labs}, url = {https://securelist.com/cloudwizard-apt/109722/}, language = {English}, urldate = {2023-06-01} } CloudWizard APT: the bad magic story goes on
PowerMagic CloudWizard CommonMagic Prikormka
2023-04-03 ⋅ Kaspersky Labs ⋅ Georgy Kucherin
@online{kucherin:20230403:not:ddfeb19, author = {Georgy Kucherin}, title = {{Not just an infostealer: Gopuram backdoor deployed through 3CX supply chain attack}}, date = {2023-04-03}, organization = {Kaspersky Labs}, url = {https://securelist.com/gopuram-backdoor-deployed-through-3cx-supply-chain-attack/109344}, language = {English}, urldate = {2023-04-08} } Not just an infostealer: Gopuram backdoor deployed through 3CX supply chain attack
Gopuram
2023-04-03 ⋅ Twitter (@kucher1n) ⋅ Georgy Kucherin
@online{kucherin:20230403:alternative:280883c, author = {Georgy Kucherin}, title = {{Tweet on an alternative Guporam sample}}, date = {2023-04-03}, organization = {Twitter (@kucher1n)}, url = {https://twitter.com/kucher1n/status/1642886340105601029?t=3GCn-ZhDjqWEMXya_PKseg}, language = {English}, urldate = {2023-04-08} } Tweet on an alternative Guporam sample
Gopuram
2023-03-21 ⋅ Kaspersky Labs ⋅ Leonid Bezvershenko, Georgy Kucherin, Igor Kuznetsov
@online{bezvershenko:20230321:bad:5749404, author = {Leonid Bezvershenko and Georgy Kucherin and Igor Kuznetsov}, title = {{Bad magic: new APT found in the area of Russo-Ukrainian conflict}}, date = {2023-03-21}, organization = {Kaspersky Labs}, url = {https://securelist.com/bad-magic-apt/109087/}, language = {English}, urldate = {2023-12-04} } Bad magic: new APT found in the area of Russo-Ukrainian conflict
PowerMagic CommonMagic
2023-03-21 ⋅ Kaspersky Labs ⋅ Leonid Bezvershenko, Georgy Kucherin, Igor Kuznetsov
@online{bezvershenko:20230321:bad:054dcba, author = {Leonid Bezvershenko and Georgy Kucherin and Igor Kuznetsov}, title = {{Bad magic: new APT found in the area of Russo-Ukrainian conflict}}, date = {2023-03-21}, organization = {Kaspersky Labs}, url = {https://securelist.com/bad-magic-apt/109087/?s=31}, language = {English}, urldate = {2023-03-21} } Bad magic: new APT found in the area of Russo-Ukrainian conflict
PowerMagic CommonMagic
2022-10-17 ⋅ Kaspersky ⋅ Kurt Baumgartner, Georgy Kucherin
@online{baumgartner:20221017:diceyf:8aa2bed, author = {Kurt Baumgartner and Georgy Kucherin}, title = {{DiceyF deploys GamePlayerFramework in online casino development studio}}, date = {2022-10-17}, organization = {Kaspersky}, url = {https://securelist.com/diceyf-deploys-gameplayerframework-in-online-casino-development-studio/107723/}, language = {English}, urldate = {2022-10-25} } DiceyF deploys GamePlayerFramework in online casino development studio
GamePlayerFramework DiceyF
2022-10-06 ⋅ YouTube ( BSides Budapest IT Security Conference) ⋅ Kurt Baumgartner, Georgy Kucherin
@online{baumgartner:20221006:diceyf:f69a639, author = {Kurt Baumgartner and Georgy Kucherin}, title = {{DiceyF deploys GamePlayerFramework (Video)}}, date = {2022-10-06}, organization = {YouTube ( BSides Budapest IT Security Conference)}, url = {https://www.youtube.com/watch?v=yVqALLtvkN8&t=8117s}, language = {English}, urldate = {2022-10-25} } DiceyF deploys GamePlayerFramework (Video)
GamePlayerFramework
2021-01-11 ⋅ Kaspersky Labs ⋅ Georgy Kucherin, Igor Kuznetsov, Costin Raiu
@online{kucherin:20210111:sunburst:a4ecf12, author = {Georgy Kucherin and Igor Kuznetsov and Costin Raiu}, title = {{Sunburst backdoor – code overlaps with Kazuar}}, date = {2021-01-11}, organization = {Kaspersky Labs}, url = {https://securelist.com/sunburst-backdoor-kazuar/99981/}, language = {English}, urldate = {2021-01-11} } Sunburst backdoor – code overlaps with Kazuar
Kazuar SUNBURST