Click here to download all references as Bib-File.
| 2022-08-16 ⋅ Huntress Labs ⋅ Cleartext Shenanigans: Gifting User Passwords to Adversaries With NPPSPY |
| 2022-03-01 ⋅ Huntress Labs ⋅ Targeted APT Activity: BABYSHARK Is Out for Blood BabyShark |
| 2022-02-18 ⋅ Huntress Labs ⋅ Hackers No Hashing: Randomizing API Hashes to Evade Cobalt Strike Shellcode Detection Cobalt Strike |
| 2022-01-15 ⋅ Huntress Labs ⋅ Threat Advisory: VMware Horizon Servers Actively Being Hit With Cobalt Strike (by DEV-0401) Cobalt Strike |
| 2021-10-22 ⋅ Huntress Labs ⋅ Threat Advisory: Hackers Are Exploiting a Vulnerability in Popular Billing Software to Deploy Ransomware |
| 2021-08-19 ⋅ Huntress Labs ⋅ Microsoft Exchange Servers Still Vulnerable to ProxyShell Exploit |
| 2021-08-17 ⋅ Huntress Labs ⋅ Snakes on a Domain: An Analysis of a Python Malware Loader |
| 2021-07-20 ⋅ Huntress Labs ⋅ Security Researchers’ Hunt to Discover Origins of the Kaseya VSA Mass Ransomware Incident REvil |
| 2021-07-02 ⋅ Huntress Labs ⋅ Crticial Ransomware Incident in Progress REvil |
| 2021-05-25 ⋅ Huntress Labs ⋅ Cobalt Strikes Again: An Analysis of Obfuscated Malware Cobalt Strike |
| 2021-04-05 ⋅ Huntress Labs ⋅ From PowerShell to Payload: An Analysis of Weaponized Malware |
| 2021-03-05 ⋅ Huntress Labs ⋅ Operation Exchange Marauder CHINACHOPPER |
| 2021-03-04 ⋅ Huntress Labs ⋅ Operation Exchange Marauder CHINACHOPPER |
| 2021-03-03 ⋅ Huntress Labs ⋅ Rapid Response: Mass Exploitation of On-Prem Exchange Servers CHINACHOPPER HAFNIUM |
| 2021-03-03 ⋅ Huntress Labs ⋅ Mass exploitation of on-prem Exchange servers :( CHINACHOPPER HAFNIUM |
| 2021-01-28 ⋅ Huntress Labs ⋅ Analyzing Ryuk Another Link in the Cyber Attack Chain BazarBackdoor Ryuk |
| 2020-06-18 ⋅ Medium Huntress Labs ⋅ Hiding In Plain Sight |