Click here to download all references as Bib-File.
| 2022-06-21 ⋅ BleepingComputer ⋅ Microsoft Exchange servers hacked by new ToddyCat APT gang ToddyCat |
| 2022-06-16 ⋅ ESET Research ⋅ How Emotet is changing tactics in response to Microsoft’s tightening of Office macro security Emotet |
| 2022-06-13 ⋅ Microsoft ⋅ The many lives of BlackCat ransomware BlackCat |
| 2022-06-02 ⋅ Microsoft ⋅ Complaint filed by Microsoft Digital Crimes Unit against BOHRIUM, a Iranian threat actor |
| 2022-06-02 ⋅ Microsoft ⋅ Exposing POLONIUM activity and infrastructure targeting Israeli organizations |
| 2022-06-01 ⋅ Fortinet ⋅ CVE-2022-30190: Microsoft Support Diagnostic Tool (MSDT) RCE Vulnerability “Follina” turian |
| 2022-05-24 ⋅ Deep instinct ⋅ Blame the Messenger: 4 Types of Dropper Malware in Microsoft Office & How to Detect Them Dridex Emotet |
| 2022-05-22 ⋅ Bleeping Computer ⋅ PDF smuggles Microsoft Word doc to drop Snake Keylogger malware 404 Keylogger |
| 2022-05-19 ⋅ Microsoft ⋅ Rise in XorDdos: A deeper look at the stealthy DDoS malware targeting Linux devices XOR DDoS |
| 2022-05-17 ⋅ Microsoft Security ⋅ In hot pursuit of ‘cryware’: Defending hot wallets from attacks Mars Stealer RedLine Stealer |
| 2022-05-09 ⋅ Microsoft ⋅ Ransomware-as-a-service: Understanding the cybercrime gig economy and how to protect yourself AnchorDNS BlackCat BlackMatter Conti DarkSide HelloKitty Hive LockBit REvil FAKEUPDATES Griffon ATOMSILO BazarBackdoor BlackCat BlackMatter Blister Cobalt Strike Conti DarkSide Emotet FiveHands Gozi HelloKitty Hive IcedID ISFB JSSLoader LockBit LockFile Maze NightSky Pandora Phobos Phoenix Locker PhotoLoader QakBot REvil Rook Ryuk SystemBC TrickBot WastedLocker |
| 2022-05-09 ⋅ Microsoft Security ⋅ Ransomware-as-a-service: Understanding the cybercrime gig economy and how to protect yourself Griffon BazarBackdoor BlackCat BlackMatter Blister Gozi LockBit Pandora Rook SystemBC TrickBot |
| 2022-05-06 ⋅ Twitter (@MsftSecIntel) ⋅ Twitter Thread on initial infeciton of SocGholish/ FAKEUPDATES campaigns lead to BLISTER Loader, CobaltStrike, Lockbit and followed by Hands On Keyboard activity FAKEUPDATES Blister Cobalt Strike LockBit |
| 2022-04-27 ⋅ Microsoft ⋅ Special Report: Ukraine An overview of Russia’s cyberattack activity in Ukraine CaddyWiper DoubleZero HermeticWiper INDUSTROYER2 IsaacWiper PartyTicket WhisperGate |
| 2022-04-20 ⋅ Bleeping Computer ⋅ Microsoft Exchange servers hacked to deploy Hive ransomware Babuk BlackByte Conti Hive LockFile |
| 2022-04-13 ⋅ Microsoft ⋅ Notorious cybercrime gang’s botnet disrupted Ryuk Zloader |
| 2022-04-13 ⋅ Microsoft ⋅ Dismantling ZLoader: How malicious ads led to disabled security tools and ransomware BlackMatter Cobalt Strike DarkSide Ryuk Zloader |
| 2022-04-12 ⋅ Microsoft Security ⋅ Tarrask malware uses scheduled tasks for defense evasion Godzilla Webshell |
| 2022-04-08 ⋅ The Hacker News ⋅ Microsoft Obtains Court Order to Take Down Domains Used to Target Ukraine HilalRAT |
| 2022-04-07 ⋅ Perception Point ⋅ Revenge RAT Malware is back: From Microsoft Excel macros to Remote Access Trojan Revenge RAT |