Click here to download all references as Bib-File.
| 2021-10-18 ⋅ Flashpoint ⋅ REvil Disappears Again: ‘Something Is Rotten in the State of Ransomware’ REvil REvil |
| 2021-09-28 ⋅ Flashpoint ⋅ REvil’s “Cryptobackdoor” Con: Ransomware Group’s Tactics Roil Affiliates, Sparking a Fallout REvil |
| 2021-09-19 ⋅ HP ⋅ MirrorBlast and TA505: Examining Similarities in Tactics, Techniques and Procedures MirrorBlast |
| 2021-08-10 ⋅ Flashpoint ⋅ REvil Master Key for Kaseya Attack Posted to XSS REvil |
| 2021-07-30 ⋅ HP ⋅ Detecting TA551 domains Valak Dridex IcedID ISFB QakBot |
| 2021-07-27 ⋅ Flashpoint ⋅ Chatter Indicates BlackMatter as REvil Successor REvil |
| 2021-07-09 ⋅ Seqrite ⋅ Seqrite uncovers second wave of Operation SideCopy targeting Indian critical infrastructure PSUs NjRAT ReverseRAT |
| 2021-06-28 ⋅ HP ⋅ Snake Keylogger’s Many Skins: Analysing Code Reuse Among Infostealers 404 Keylogger Phoenix Keylogger |
| 2021-06-15 ⋅ Nextron Systems ⋅ Use YARA math Module Extension in THOR TechPreview and THOR Lite |
| 2021-06-04 ⋅ JPCERT/CC ⋅ PHP Malware Used in Lucky Visitor Scam |
| 2021-05-25 ⋅ Hydra: Where The Crypto Money Laundering Trail Goes Dark |
| 2021-05-21 ⋅ Twitter (@alberto__segura) ⋅ Tweet on Flubt version 4.2 (p.php variant) with new AES strings encryption FluBot |
| 2021-05-13 ⋅ Malwarebytes ⋅ Newly observed PHP-based skimmer shows ongoing Magecart Group 12 activity magecart |
| 2021-05-11 ⋅ Flashpoint ⋅ DarkSide Ransomware Links to REvil Group Difficult to Dismiss DarkSide REvil |
| 2021-04-30 ⋅ Flashpoint ⋅ A Second Iranian State-Sponsored Ransomware Operation “Project Signal” Emerges |
| 2021-04-30 ⋅ MADRID Labs ⋅ Qbot: Analyzing PHP Proxy Scripts from Compromised Web Server QakBot |
| 2021-04-14 ⋅ HP ⋅ From PoC to Exploit Kit: Purple Fox now exploits CVE-2021-26411 win.purplefox |
| 2021-04-08 ⋅ HP ⋅ Nation States, Cyberconflict and the Web of Profit |
| 2021-03-17 ⋅ HP ⋅ Threat Insights Report Q4-2020 Agent Tesla BitRAT ComodoSec Dridex Emotet Ficker Stealer Formbook Zloader |
| 2021-03-11 ⋅ Flashpoint ⋅ CL0P and REvil Escalate Their Ransomware Tactics Clop REvil |