Click here to download all references as Bib-File.
| 2022-09-13 ⋅ Palo Alto Networks Unit 42 ⋅ OriginLogger: A Look at Agent Tesla’s Successor Agent Tesla OriginLogger |
| 2021-11-07 ⋅ Palo Alto Networks Unit 42 ⋅ Targeted Attack Campaign Against ManageEngine ADSelfService Plus Delivers Godzilla Webshells, NGLite Trojan and KdcSponge Stealer Godzilla Webshell NGLite |
| 2021-06-16 ⋅ Palo Alto Networks Unit 42 ⋅ Matanbuchus: Malware-as-a-Service with Demonic Intentions Matanbuchus BelialDemon |
| 2021-03-08 ⋅ Palo Alto Networks Unit 42 ⋅ Analyzing Attacks Against Microsoft Exchange Server With China Chopper Webshells CHINACHOPPER |
| 2018-02-27 ⋅ Palo Alto Networks Unit 42 ⋅ Dissecting Hancitor’s Latest 2018 Packer Hancitor |
| 2017-09-25 ⋅ Palo Alto Networks Unit 42 ⋅ Analyzing the Various Layers of AgentTesla’s Packing Agent Tesla |
| 2017-05-31 ⋅ ropgadget.com ⋅ Writing PCRE's for applied passive network defense [Emotet] Emotet |
| 2016-08-30 ⋅ Palo Alto Networks Unit 42 ⋅ Pythons and Unicorns and Hancitor…Oh My! Decoding Binaries Through Emulation |
| 2016-08-22 ⋅ Palo Alto Networks Unit 42 ⋅ VB Dropper and Shellcode for Hancitor Reveal New Techniques Behind Uptick Hancitor |
| 2016-02-25 ⋅ Palo Alto Networks Unit 42 ⋅ KeyBase Threat Grows Despite Public Takedown: A Picture is Worth a Thousand Words KeyBase |