Click here to download all references as Bib-File.
| 2021-11-16 ⋅ InfoSec Handlers Diary Blog ⋅ Emotet Returns Emotet |
| 2021-09-01 ⋅ InfoSec Handlers Diary Blog ⋅ STRRAT: a Java-based RAT that doesn't care if you have Java STRRAT |
| 2021-07-24 ⋅ InfoSec Handlers Diary Blog ⋅ Agent.Tesla Dropped via a .daa Image and Talking to Telegram Agent Tesla |
| 2021-07-09 ⋅ InfoSec Handlers Diary Blog ⋅ Hancitor tries XLL as initial malware file Cobalt Strike Hancitor |
| 2021-04-19 ⋅ InfoSec Handlers Diary Blog ⋅ Hunting phishing websites with favicon hashes |
| 2021-04-14 ⋅ InfoSec Handlers Diary Blog ⋅ April 2021 Forensic Quiz: Answers and Analysis Anchor BazarBackdoor Cobalt Strike |
| 2021-04-06 ⋅ InfoSec Handlers Diary Blog ⋅ Malspam with Lokibot vs. Outlook and RFCs Loki Password Stealer (PWS) |
| 2021-03-31 ⋅ InfoSec Handlers Diary Blog ⋅ Quick Analysis of a Modular InfoStealer Amadey |
| 2021-03-29 ⋅ InfoSec Handlers Diary Blog ⋅ Jumping into Shellcode |
| 2021-03-27 ⋅ InfoSec Handlers Diary Blog ⋅ Malware Analysis with elastic-agent and Microsoft Sandbox |
| 2021-03-07 ⋅ InfoSec Handlers Diary Blog ⋅ PCAPs and Beacons Cobalt Strike |
| 2021-02-12 ⋅ InfoSec Handlers Diary Blog ⋅ AgentTesla Dropped Through Automatic Click in Microsoft Help File Agent Tesla |
| 2021-02-11 ⋅ InfoSec Handlers Diary Blog ⋅ Agent Tesla hidden in a historical anti-malware tool Agent Tesla |
| 2021-02-04 ⋅ InfoSec Handlers Diary Blog ⋅ Abusing Google Chrome extension syncing for data exfiltration and C&C |
| 2021-02-03 ⋅ InfoSec Handlers Diary Blog ⋅ Excel spreadsheets push SystemBC malware Cobalt Strike SystemBC |
| 2021-01-28 ⋅ InfoSec Handlers Diary Blog ⋅ Emotet vs. Windows Attack Surface Reduction Emotet |
| 2021-01-22 ⋅ InfoSec Handlers Diary Blog ⋅ Another File Extension to Block in your MTA: .jnlp |
| 2021-01-21 ⋅ InfoSec Handlers Diary Blog ⋅ Powershell Dropping a REvil Ransomware REvil |
| 2021-01-13 ⋅ InfoSec Handlers Diary Blog ⋅ Hancitor activity resumes after a hoilday break Hancitor |
| 2020-12-24 ⋅ InfoSec Handlers Diary Blog ⋅ Malicious Word Document Delivering an Octopus Backdoor Octopus |