Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-09-29 ⋅ Google ⋅ Google Threat Intelligence Group, Mandiant
Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances
2026-09-10 ⋅ Fortinet ⋅ Rachael Liao
Casbaneiro: A Banking Trojan with Distributed Data-Receiving Servers
Metamorfo
2026-08-20 ⋅ trendai ⋅ Aliakbar Zahravi
Prompting the Payload: How an npm Supply Chain Attack Delivers the RedC2 AI-Powered Linux Implant
redshell
2026-07-01 ⋅ Fortinet ⋅ Rachael Liao
Analysis of Ongoing Ousaban Attacks Targeting the Iberian Peninsula
Ousaban
2026-06-25 ⋅ ESET Research ⋅ Zoltán Rusnák
Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances
Pteranodon
2026-06-17 ⋅ juliangrtz.me ⋅ Julian Goeritz
I Installed a Fake Resident Evil Mod and Got Pwnd
2026-05-11 ⋅ pcrisk
Tweet about Lalia Ransomware
Lalia Ransomware
2026-05-06 ⋅ Elastic ⋅ Daniel Stepanic, Jia Yu Chan, Seth Goodwin, Terrance DeJesus
TCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and Outlook
TCLBANKER
2026-05-04 ⋅ Trend Micro ⋅ Ahmed Mohamed Ibrahim, Aliakbar Zahravi
Quasar Linux (QLNX) – A Silent Foothold in the Supply Chain: Inside a Full-Featured Linux RAT With Rootkit, PAM Backdoor, Credential Harvesting Capabilities
QLNX
2026-04-15 ⋅ Orange Cyberdefense ⋅ Alexis Bonnefoi, Marine PICHON, Thomas Brossard
Smoking Out an Affiliate: SmokedHam, Qilin, a few Google Ads and some Bossware
Qilin AgendaCrypt SMOKEDHAM
2026-04-15 ⋅ Orange Cyberdefense ⋅ Alexis Bonnefoi, Marine PICHON, Thomas Brossard
Smoking Out an Affiliate: SmokedHam, Qilin, a few Google ads and some bossware
AgendaCrypt SMOKEDHAM
2026-04-07 ⋅ CISA ⋅ CISA
AA26-097A: Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure
Cyber Av3ngers
2026-04-07 ⋅ IC3 ⋅ CISA, CNMF, Department of Energy (DOE), EPA, FBI, NSA
AA26-097A: Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure
2026-03-10 ⋅ ZenoX ⋅ , ZenoX
VENON: The First Brazilian Banker RAT in Rust
VENON
2026-03-03 ⋅ Radware ⋅ Radware
Retaliatory Hacktivist DDoS Activity Following Operation Epic Fury/Roaring Lion
Conquerors Electronic Army
2026-02-25 ⋅ Google ⋅ 0verfl0w_, Anton Chuvakin, Bob Mechler, Crystal Lister, Eduardo Mattos, Google, Jason Bisson, Joachim Metz, John Stone, Jorge Blanco, Keith Lunden, Lia Wertheimer, Matthew Siuda, Michael Robinson, Muhammad Muneer, Noah McDonald, Ollie Green, Seth Rosenblatt
Cloud Threat Horizons Report: H1 2026
UNC6426
2026-02-05 ⋅ Bleeping Computer ⋅ Bill Toulas
Italian university La Sapienza goes offline after cyberattack
Rorschach Ransomware Femwar02
2026-01-21 ⋅ Team Cymru ⋅ william thomas
Scattered Spider Attacks | Infrastructure and TTP Analysis
2026-01-15 ⋅ Acronis ⋅ Ilia Dafchev, Subhajeet Singha
LOTUSLITE: Targeted espionage leveraging geopolitical themes
LOTUSLITE
2026-01-13 ⋅ Security Alliance ⋅ Security Alliance
VS Code Tasks Abuse by Contagious Interview (DPRK)
BeaverTail InvisibleFerret