Click here to download all references as Bib-File.
| 2023-04-27 ⋅ Lookout ⋅ Lookout Discovers Android Spyware Tied to Iranian Police Targeting Minorities: BouldSpy DAAM |
| 2023-04-19 ⋅ Microsoft ⋅ Exploring STRONTIUM's Abuse of Cloud Services FusionDrive |
| 2022-12-13 ⋅ Margin Research ⋅ Analyzing Russian SDK Pushwoosh and Russian Code Contributions |
| 2022-11-18 ⋅ Atlantic Council ⋅ GRU 26165: The Russian cyber unit that hacks targets on-site EternalPetya |
| 2022-06-16 ⋅ Lookout ⋅ Lookout Uncovers Android Spyware Deployed in Kazakhstan |
| 2022-06-16 ⋅ Lookout Uncovers Android Spyware Deployed in Kazakhstan Hermit |
| 2022-05-25 ⋅ Trend Micro ⋅ New Linux-Based Ransomware Cheerscrypt Targets ESXi Devices |
| 2022-05-05 ⋅ Cisco Talos ⋅ Mustang Panda deploys a new wave of malware targeting Europe Cobalt Strike Meterpreter PlugX |
| 2022-03-29 ⋅ Cisco Talos ⋅ Transparent Tribe campaign uses new bespoke malware to target Indian government officials Crimson RAT |
| 2022-01-09 ⋅ Twitter (@sixdub) ⋅ Tweet on malicious document used by Gamaredon aka DEV-0157 |
| 2021-12-08 ⋅ Darktrace ⋅ The double extortion business: Conti Ransomware Gang finds new avenues of negotiation Conti |
| 2021-09-23 ⋅ Talos ⋅ Operation “Armor Piercer:” Targeted attacks in the Indian subcontinent using commercial RATs Ave Maria NetWire RC |
| 2021-07-15 ⋅ Kryptos Logic ⋅ Adjusting the Anchor Anchor |
| 2021-07-07 ⋅ Talos ⋅ InSideCopy: How this APT continues to evolve its arsenal AllaKore Lilith NjRAT |
| 2021-07-07 ⋅ Talos Intelligence ⋅ InSideCopy: How this APT continues to evolve its arsenal AllaKore NjRAT SideCopy |
| 2021-07-07 ⋅ Talos ⋅ InSideCopy: How this APT continues to evolve its arsenal (Network IOCs) AllaKore Lilith NjRAT |
| 2021-07-07 ⋅ Talos ⋅ InSideCopy: How this APT continues to evolve its arsenal (IOCs) AllaKore Lilith NjRAT |
| 2021-07-02 ⋅ Cisco ⋅ InSideCopy: How this APT continues to evolve its arsenal AllaKore CetaRAT Lilith NjRAT ReverseRAT |
| 2021-06-16 ⋅ FireEye ⋅ Smoking Out a DARKSIDE Affiliate’s Supply Chain Software Compromise Cobalt Strike SMOKEDHAM |
| 2021-06-16 ⋅ Mandiant ⋅ Smoking Out a DARKSIDE Affiliate’s Supply Chain Software Compromise Cobalt Strike SMOKEDHAM |