Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2025-05-27 ⋅ DCSO ⋅ Bennet Conrads, Denis Szadkowski, Johann Aydinbas, Moaath Oudeh
SafePay: The new kid on the block
SafePay
2024-11-04 ⋅ Medium (@DCSO_CyTec) ⋅ Denis Szadkowski, Johann Aydinbas, Maike Orlikowski, Paul van Ramesdonk
Unransomware: From Zero to Full Recovery in a Blink
Akira
2024-02-21 ⋅ DCSO ⋅ Jiro Minier, Johann Aydinbas, Kritika Roy, Olivia Hayward
To Russia With Love: Assessing a KONNI-Backdoored Suspected Russian Consular Software Installer
Konni
2023-09-19 ⋅ Medium (@DCSO_CyTec) ⋅ Johann Aydinbas
#ShortAndMalicious — DarkGate
DarkGate
2023-05-31 ⋅ Twitter (@jaydinbas) ⋅ Johann Aydinbas
Tweet about C++ payload delivered via ISO
Unidentified 104
2023-05-17 ⋅ Medium (@DCSO_CyTec) ⋅ Axel Wauer, Emilia Neuber, Jiro Minier, Johann Aydinbas, Kritika Roy
Andariel’s “Jupiter” malware and the case of the curious C2
Jupiter
2023-02-10 ⋅ DCSO ⋅ Axel Wauer, Johann Aydinbas
#ShortAndMalicious — PikaBot and the Matanbuchus connection
Pikabot
2022-12-24 ⋅ Medium (@DCSO_CyTec) ⋅ Denis Szadkowski, Hendrik Baecker, Jiro Minier, Johann Aydinbas
APT41 — The spy who failed to encrypt me
CHINACHOPPER
2022-12-19 ⋅ Twitter (@jaydinbas) ⋅ Johann Aydinbas
Twitter thread describing ISO drop for Kami
KamiKakaBot
2022-11-16 ⋅ Medium (@DCSO_CyTec) ⋅ Axel Wauer, Johann Aydinbas
HZ RAT goes China
HZ RAT
2022-11-08 ⋅ DCSO ⋅ Axel Wauer, Johann Aydinbas
#ShortAndMalicious: StrelaStealer aims for mail credentials
StrelaStealer
2022-10-11 ⋅ Medium (@DCSO_CyTec) ⋅ Axel Wauer, Denis Szadkowski, Johann Aydinbas
Tracking down Maggie
Maggie
2022-10-04 ⋅ Medium (@DCSO_CyTec) ⋅ Axel Wauer, Johann Aydinbas
MSSQL, meet Maggie
Maggie
2022-05-23 ⋅ DCSO ⋅ Colin Murphy, Johann Aydinbas
A deal with the devil: Analysis of a recent Matanbuchus sample
Matanbuchus
2022-03-01 ⋅ Github (usualsuspect) ⋅ Johann Aydinbas
Python script to decrypt embedded driver used in Daxin
Daxin
2021-06-25 ⋅ Gdata ⋅ Florian Roth, Johann Aydinbas, Karsten Hahn, Takahiro Haruyama
Microsoft signed a malicious Netfilter rootkit
NetfilterRootkit
2019-05-02 ⋅ Usual Suspect RE ⋅ Johann Aydinbas
FormBook - Hiding in plain sight
Formbook