Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2025-02-12 ⋅ Bleeping Computer ⋅ Bill Toulas
Surge in attacks exploiting old ThinkPHP and ownCloud flaws
2025-01-07 ⋅ SANS ISC ⋅ Yee Ching Tok
PacketCrypt Classic Cryptocurrency Miner on PHP Servers
2024-12-12 ⋅ XLab ⋅ XLab Team
Glutton: A New Zero-Detection PHP Backdoor from Winnti Targets Cybercrimals
Winnti Glutton
2024-10-24 ⋅ RedPacket Security ⋅ RedPacket Security
[APT73] – Ransomware Victim: hpecds[.]com
APT73
2024-10-08 ⋅ Trustwave ⋅ Cris Tomboc, King Orande
Pronsis Loader: A JPHP-Driven Malware Diverging from D3F@ck Loader
Pronsis Loader Latrodectus Lumma Stealer
2024-01-26 ⋅ Ars Technica ⋅ Dan Goodin
The life and times of Cozy Bear, the Russian hackers who just hit Microsoft and HPE
2023-07-17 ⋅ Flashpoint ⋅ Flashpoint
The New Release of Danabot Version 3: What You Need to Know
DanaBot
2023-03-06 ⋅ Flashpoint ⋅ Flashpoint
Private Malware for Sale: A Closer Look at AresLoader
AresLoader
2022-10-26 ⋅ Flashpoint ⋅ Flashpoint
Pro-Kremlin Hacktivist Groups Seeking Impact By Courting Notoriety
RaHDit
2022-10-13 ⋅ HP ⋅ Patrick Schläpfer
Magniber Ransomware Adopts JavaScript, Targeting Home Users with Fake Software Updates
Magniber
2022-10-07 ⋅ Flashpoint ⋅ Flashpoint
Analysis of CISA releases Advisory on Top CVEs Exploited Chinese State-Sponsored Groups
Lilac Typhoon
2022-09-13 ⋅ Sansec Threat Research ⋅ Sansec Threat Research Team
Magento vendor Fishpig hacked, backdoors added
Rekoobe
2022-07-15 ⋅ HP ⋅ Patrick Schläpfer
Stealthy OpenDocument Malware Deployed Against Latin American Hotels
AsyncRAT
2022-06-06 ⋅ HP ⋅ Patrick Schläpfer
SVCReady: A New Loader Gets Ready
SVCReady
2022-05-20 ⋅ HP ⋅ Patrick Schläpfer
PDF Malware Is Not Yet Dead
404 Keylogger
2022-05-16 ⋅ FBI ⋅ FBI
FBI Flash MC-000170-MW: Cyber Actors Scrape Credit Card Data from US Business’ Online Checkout Page and Maintain Persistence by Injecting Malicious PHP Code
2022-05-11 ⋅ HP ⋅ HP Wolf Security
Threat Insights Report Q1 - 2022
AsyncRAT Emotet Mekotio Vjw0rm
2022-05-04 ⋅ HP ⋅ Patrick Schläpfer
Tips for Automating IOC Extraction from GootLoader, a Changing JavaScript Malware
GootLoader
2022-04-12 ⋅ HP ⋅ Patrick Schläpfer
Malware Campaigns Targeting African Banking Sector
CloudEyE Remcos
2022-03-30 ⋅ Twitter (@hpsecurity) ⋅ HP Wolf Security
Tweet on recent Mekotio Banker campaign
Mekotio