Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2025-04-14 ⋅ Palo Alto Networks Unit 42 ⋅ Prashil Pattni
Slow Pisces Targets Developers With Coding Challenges and Introduces New Customized Python Malware
RN Stealer
2025-03-28 ⋅ Cisco Talos ⋅ Guilherme Venere
Gamaredon campaign abuses LNK files to distribute Remcos backdoor
Remcos
2025-03-26 ⋅ Cisco Talos ⋅ Cisco Talos
Year in Review
2025-03-25 ⋅ IBM X-Force ⋅ Golo Mühr
IBM X-Force discovers new Sheriff Backdoor used to target Ukraine
Deputy Sheriff
2025-03-20 ⋅ Cisco Talos ⋅ Asheer Malhotra, Brandon White, Jungsoo An, Vitor Ventura
UAT-5918 targets critical infrastructure entities in Taiwan
LaZagne JuicyPotato Meterpreter MimiKatz UAT-5918
2025-03-12 ⋅ Lookout ⋅ Lookout
Lookout Discovers New Spyware by North Korean APT37
KoSpy
2025-02-28 ⋅ Greynoise ⋅ Noah Stone
New DDoS Botnet Discovered: Over 30,000 Hacked Devices, Majority of Observed Activity Traced to Iran
Mirai
2025-02-20 ⋅ Cisco Talos ⋅ Cisco Talos
Weathering the storm: In the midst of a Typhoon
2025-02-13 ⋅ Recorded Future ⋅ Insikt Group
RedMike (Salt Typhoon) Exploits Vulnerable Cisco Devices of Global Telecommunications Providers
GhostEmperor
2025-02-06 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Code injection attacks using publicly disclosed ASP.NET machine keys
2025-01-14 ⋅ Infoblox ⋅ David Brunsdon
One Mikro Typo: How a simple DNS misconfiguration enables malware delivery by a Russian botnet
2025-01-07 ⋅ SANS ISC ⋅ Yee Ching Tok
PacketCrypt Classic Cryptocurrency Miner on PHP Servers
2025-01-03 ⋅ SANS ISC ⋅ Xavier Mertens
SwaetRAT Delivery Through Python
SwaetRAT
2024-12-11 ⋅ Lookout ⋅ Kyle Schmittle, Paul Shunk
Lookout Discovers Two Russian Android Spyware Families from Gamaredon APT
BoneSpy DroidWatcher PlainGnome
2024-12-11 ⋅ Lookout ⋅ Kristina Balaam
Lookout Discovers New Chinese Surveillance Tool Used by Public Security Bureaus
EagleMsgSpy
2024-11-07 ⋅ Cisco Talos ⋅ Aliza Johnson, Chetan Raghuprasad, Elio Biasiotto, Michael Szeliga
Unwrapping the emerging Interlock ransomware attack
Rhysida
2024-10-31 ⋅ Twitter (@nextronresearch) ⋅ Nextron Systems
Tweet about discovery of HellDown ransomware
HellDown
2024-10-30 ⋅ Palo Alto Networks Unit 42 ⋅ Unit 42
Jumpy Pisces Engages in Play Ransomware
Dtrack MimiKatz PLAY Sliver
2024-10-24 ⋅ Cisco Talos ⋅ Aaron Boyd
Writing a BugSleep C2 server and detecting its traffic with Snort
bugsleep
2024-10-24 ⋅ Hunt.io ⋅ Hunt.io
Rekoobe Backdoor Discovered in Open Directory, Possibly Targeting TradingView Users
Rekoobe