Click here to download all references as Bib-File.
| 2022-09-29 ⋅ Mandiant ⋅ Bad VIB(E)s Part One: Investigating Novel Malware Persistence Within ESXi Hypervisors |
| 2022-09-29 ⋅ Mandiant ⋅ Bad VIB(E)s Part Two: Detection and Hardening within ESXi Hypervisors |
| 2022-09-23 ⋅ Mandiant ⋅ GRU: Rise of the (Telegram) MinIOns ArguePatch CaddyWiper |
| 2022-09-14 ⋅ Mandiant ⋅ It's Time to PuTTY! DPRK Job Opportunity Phishing via WhatsApp BLINDINGCAN |
| 2022-09-08 ⋅ Mandiant ⋅ What to Expect When You’re Electing: Preparing for Cyber Threats to the 2022 U.S. Midterm Elections |
| 2022-09-07 ⋅ Mandiant ⋅ APT42: Crooked Charms, Cons, and Compromises |
| 2022-09-07 ⋅ Mandiant ⋅ APT42: Crooked Charms, Cons and Compromises |
| 2022-08-18 ⋅ Mandiant ⋅ You Can’t Audit Me: APT29 Continues Targeting Microsoft 365 |
| 2022-08-17 ⋅ Mandiant ⋅ Suspected Iranian Actor Targeting Israeli Shipping, Healthcare, Government and Energy Sectors NorthStar SUGARDUMP SUGARRUSH |
| 2022-08-04 ⋅ Mandiant ⋅ Pro-PRC “HaiEnergy” Information Operations Campaign Leverages Infrastructure from Public Relations Firm to Disseminate Content on Inauthentic News Sites |
| 2022-08-04 ⋅ Mandiant ⋅ Likely Iranian Threat Actor Conducts Politically Motivated Disruptive Activity Against Albanian Government Organizations |
| 2022-08-04 ⋅ Mandiant ⋅ Advanced Persistent Threats (APTs) APT1 APT10 APT12 APT14 APT15 APT16 APT17 APT18 APT19 APT2 APT20 APT21 APT22 APT23 APT24 APT27 APT3 APT30 APT31 APT4 APT40 APT5 APT9 |
| 2022-07-26 ⋅ Mandiant ⋅ Mandiant Red Team Emulates FIN11 Tactics To Control Operational Technology Servers MimiKatz |
| 2022-07-20 ⋅ Mandiant ⋅ Evacuation and Humanitarian Documents used to Spear Phish Ukrainian Entities Cobalt Strike GraphSteel GrimPlant MicroBackdoor |
| 2022-06-29 ⋅ Mandiant ⋅ Burrowing your way into VPNs, Proxies, and Tunnels DarkSide SMOKEDHAM |
| 2022-06-28 ⋅ Mandiant ⋅ Pro-PRC DRAGONBRIDGE Influence Campaign Targets Rare Earths Mining Companies in Attempt to Thwart Rivalry to PRC Market Dominance |
| 2022-06-02 ⋅ Mandiant ⋅ To HADES and Back: UNC2165 Shifts to LOCKBIT to Evade Sanctions FAKEUPDATES Blister Cobalt Strike DoppelPaymer Dridex FriedEx Hades LockBit Macaw MimiKatz Phoenix Locker WastedLocker |
| 2022-06-02 ⋅ Mandiant ⋅ TRENDING EVIL Q2 2022 CloudEyE Cobalt Strike CryptBot Emotet IsaacWiper QakBot |
| 2022-05-19 ⋅ Mandiant ⋅ The IO Offensive: Information Operations Surrounding the Russian Invasion of Ukraine HermeticWiper PartyTicket |
| 2022-05-05 ⋅ BrightTALK (Mandiant) ⋅ The Sample: Beating the Malware Piñata Jaku |