Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-08-26 ⋅ Lumen ⋅ Black Lotus Labs
The infrastructure quartermaster: inside a China-nexus state enablement model
2026-08-26 ⋅ Github (blacklotuslabs) ⋅ Black Lotus Labs
The infrastructure quartermaster: inside a China-nexus state enablement model (IOCs)
2026-06-29 ⋅ BlackPoint ⋅ Nevan Beal, Sam Decker
A Djinn in the Machine: TaskWeaver’s Node.js Intrusion Chain
2026-06-10 ⋅ Lumen ⋅ Black Lotus Labs
Expanded JDY IoT and SOHO botnet enables rapid vulnerability exploitation
KV
2026-06-10 ⋅ Github (blacklotuslabs) ⋅ Black Lotus Labs
Expanded JDY IoT and SOHO botnet enables rapid vulnerability exploitation (IOCs)
KV
2026-04-13 ⋅ Dataminr ⋅ Tim Miller
Cyber Intel Brief: Pro-Iranian Actor Ababil of Minab Claims Cyberattack on LA Metro (LACMTA)
Ababil of Minab
2026-04-08 ⋅ Black Lotus Labs ⋅ Danny Adamitis, Ryan English
FrostArmada: All thriller, no (malware) filler
2026-04-07 ⋅ Black Lotus Labs ⋅ Black Lotus Labs
FrostArmada: All thriller, no (malware) filler
2026-03-10 ⋅ Lumen ⋅ Black Lotus Labs
Silence of the hops: The KadNap botnet
KadNap
2026-03-03 ⋅ Microsoft ⋅ Microsoft
Signed malware impersonating workplace apps deploys RMM backdoors
TrustConnect RAT
2026-02-04 ⋅ safebreach ⋅ Tomer Bar
Prince of Persia, Part II: Covering Tracks, Striking Back & a Revealing Link to the Iranian Regime Amid the Country’s Internet Blackout
Infy StormKittyRAT
2026-01-28 ⋅ Google ⋅ Google Threat Intelligence Group
No Place Like Home Network: Disrupting the World's Largest Residential Proxy Network
2026-01-23 ⋅ BlackPoint ⋅ Jack Patrick, Sam Decker
Novel Fake CAPTCHA Chain Delivering Amatera Stealer
ACR Stealer Amatera
2026-01-15 ⋅ ANALYST1 ⋅ Anastasia Sentsova
Infrastructure in the Shadows: How Two Leaks Unmasked the Criminal Network of Yalishanda aka Media Land, and BlackBasta
Black Basta Black Basta
2025-12-30 ⋅ US Department of Justice ⋅ Office of Public Affairs
Two Americans Plead Guilty to Targeting Multiple U.S. Victims Using ALPHV BlackCat Ransomware
BlackCat BlackCat
2025-12-18 ⋅ BlackPoint ⋅ Nevan Beal, Sam Decker
New MintsLoader Variant Using Hashtable Obfuscation
MintsLoader
2025-12-09 ⋅ BlackPoint ⋅ Sam Decker
Snakes in the Castle: Inside the Walls of Python-Driven CastleLoader Delivery
CASTLELOADER
2025-11-10 ⋅ Mandiant ⋅ Bill Glynn, Kevin O'Flynn, Praveeth DSouza, Stallone D'Souza, Yash Gupta
No Place Like Localhost: Unauthenticated Remote Access via Triofox Vulnerability CVE-2025-12480
UNC6485
2025-11-03 ⋅ Breached Company ⋅ Breached Company
When the Defenders Become the Attackers: Cybersecurity Experts Indicted for BlackCat Ransomware Operations
BlackCat BlackCat
2025-10-19 ⋅ Github (cocomelonc) ⋅ cocomelonc
Malware development trick 52: steal data via legit Slack API. Simple C example