Click here to download all references as Bib-File.•
| 2022-05-07
⋅
DoublePulsar
⋅
BPFDoor — an active Chinese global surveillance tool BPFDoor |
| 2021-09-16
⋅
Twitter (@GossiTheDog)
⋅
Tweet on some unknown threat actor dropping Mgbot, custom IIS modular backdoor and cobalstrike using exploiting ProxyShell Cobalt Strike MgBot |
| 2021-07-03
⋅
Medium Doublepulsar
⋅
Kaseya supply chain attack delivers mass ransomware event to US companies REvil |
| 2021-06-27
⋅
Twitter (@GossiTheDog)
⋅
Tweet on babuk ransomware builder Babuk |
| 2020-12-19
⋅
Twitter (@GossiTheDog)
⋅
A twitter thread on Azure sentinel hunting queries for detecting UNC2452 activity |
| 2020-10-16
⋅
Medium Doublepulsar
⋅
Second Zerologon attacker seen exploiting internet honeypot RemCom |
| 2019-03-21
⋅
DoublePulsar
⋅
How Lockergoga took down Hydro — ransomware used in targeted attacks aimed at big business LockerGoga |