Click here to download all references as Bib-File.•
| 2024-09-06
⋅
SpyCloud
⋅
The Curious Case of an Open Source Stealer: Phemedrone Phemedrone Stealer |
| 2024-08-28
⋅
Talos Intelligence
⋅
BlackByte blends tried-and-true tradecraft with newly disclosed vulnerabilities to support ongoing attacks BlackByte |
| 2024-06-03
⋅
SpyCloud
⋅
Reversing Atomic macOS Stealer: Binaries, Backdoors & Browser Theft AMOS |
| 2024-03-29
⋅
Github (thesamsam)
⋅
Gist with XZ Backdoor analysis xzbot |
| 2023-11-21
⋅
Reliaquest
⋅
Scattered Spider Attack Analysis |
| 2023-10-13
⋅
Twitter (@JAMESWT_MHT)
⋅
Tweets on Wikiloader delivering ISFB ISFB WikiLoader |
| 2023-07-21
⋅
Mandiant
⋅
Exploitation of Citrix Zero-Day by Possible Espionage Actors (CVE-2023-3519) |
| 2023-03-20
⋅
Mandiant
⋅
Move, Patch, Get Out the Way: 2022 Zero-Day Exploitation Continues at an Elevated Pace |
| 2022-12-22
⋅
Fortinet
⋅
Ransomware Roundup – Play Ransomware PLAY |
| 2022-11-10
⋅
Fortinet
⋅
Ransomware Roundup: New Inlock and Xorist Variants Inlock Xorist |
| 2022-10-13
⋅
Fortinet
⋅
Ransomware Roundup: Royal Ransomware Royal Ransom |
| 2022-09-14
⋅
Mandiant
⋅
It's Time to PuTTY! DPRK Job Opportunity Phishing via WhatsApp BLINDINGCAN miniBlindingCan sRDI |
| 2022-08-29
⋅
Securonix
⋅
Securonix Threat Labs Security Advisory: New Golang Attack Campaign GO#WEBBFUSCATOR Leverages Office Macros and James Webb Images to Infect Systems |
| 2022-08-18
⋅
Fortinet
⋅
Ransomware Roundup: Gwisin, Kriptor, Cuba, and More Cuba |
| 2022-08-08
⋅
Fortinet
⋅
Life After Death - SmokeLoader Continues to Haunt Using Old Vulnerabilities SmokeLoader zgRAT |
| 2022-08-04
⋅
Fortinet
⋅
Ransomware Roundup: Redeemer, Beamed, and More |
| 2022-07-28
⋅
SentinelOne
⋅
Living Off Windows Defender | LockBit Ransomware Sideloads Cobalt Strike Through Microsoft Security Tool Cobalt Strike LockBit |
| 2022-07-12
⋅
Fortinet
⋅
Spoofed Saudi Purchase Order Drops GuLoader – Part 2 CloudEyE |
| 2022-06-30
⋅
Trend Micro
⋅
Black Basta Ransomware Operators Expand Their Attack Arsenal With QakBot Trojan and PrintNightmare Exploit Black Basta Cobalt Strike QakBot |
| 2022-06-02
⋅
FortiGuard Labs
⋅
Threat Actors Prey on Eager Travelers AsyncRAT NetWire RC Quasar RAT |