Click here to download all references as Bib-File.
| 2020-06-18 ⋅ Microsoft ⋅ Inside Microsoft Threat Protection: Mapping attack chains from cloud to endpoint (APT33/HOLMIUM) POWERTON |
| 2020-06-17 ⋅ Twitter (@MsftSecIntel) ⋅ A tweet thread on TA505 using CAPTCHA to avoid detection and infecting victims with FlawedGrace FlawedGrace |
| 2020-06-16 ⋅ Microsoft ⋅ Exploiting a crisis: How cybercriminals behaved during the outbreak |
| 2020-06-10 ⋅ Microsoft ⋅ Misconfigured Kubeflow workloads are a security risk |
| 2020-06-09 ⋅ Microsoft ⋅ Web shell threat hunting with Azure Sentinel and Microsoft Threat Protection |
| 2020-05-28 ⋅ Bleeping Computer ⋅ Microsoft IIS servers hacked by Blue Mockingbird to mine Monero |
| 2020-04-28 ⋅ Microsoft ⋅ Ransomware groups continue to target healthcare, critical services; here’s how to reduce risk LockBit Mailto Maze MedusaLocker Paradise Ransomware RagnarLocker REvil RobinHood |
| 2020-04-03 ⋅ Bleeping Computer ⋅ Microsoft: Emotet Took Down a Network by Overheating All Computers Emotet |
| 2020-03-23 ⋅ Microsoft ⋅ Latest Astaroth living-off-the-land attacks are even more invisible but not less observable Astaroth |
| 2020-03-10 ⋅ Microsoft ⋅ New action to disrupt world’s largest online criminal network Necurs |
| 2020-03-05 ⋅ Microsoft ⋅ Human-operated ransomware attacks: A preventable disaster Dharma DoppelPaymer Dridex EternalPetya Gandcrab Hermes LockerGoga MegaCortex MimiKatz REvil RobinHood Ryuk SamSam TrickBot WannaCryptor |
| 2020-01-21 ⋅ Microsoft ⋅ sLoad launches version 2.0, Starslord sLoad |
| 2019-12-18 ⋅ MICROSOFT CORPORATION, Plaintiff, v. JOHN DOES 1-2, CONTROLLING A COMPUTER NETWORK THEREBY INJURING PLAINTIFF AND ITS CUSTOMERS BabyShark Kimsuky |
| 2019-12-12 ⋅ Microsoft ⋅ GALLIUM: Targeting global telecom Ghost RAT HTran GALLIUM |
| 2019-11-26 ⋅ Microsoft ⋅ Insights from one year of tracking a polymorphic threat Dexphot |
| 2019-10-21 ⋅ ESET Research ⋅ Winnti Group’s skip‑2.0: A Microsoft SQL Server backdoor LOWKEY skip-2.0 |
| 2019-09-26 ⋅ Microsoft ⋅ Bring your own LOLBin: Multi-stage, fileless Nodersok campaign delivers rare Node.js-based malware Divergent |
| 2019-09-26 ⋅ Proofpoint ⋅ New WhiteShadow downloader uses Microsoft SQL to retrieve malware WhiteShadow Agent Tesla Azorult Crimson RAT Formbook Nanocore RAT NetWire RC NjRAT Remcos |
| 2019-07-08 ⋅ Microsoft ⋅ Dismantling a fileless campaign: Microsoft Defender ATP’s Antivirus exposes Astaroth attack Astaroth |
| 2019-06-05 ⋅ FireEye ⋅ Government Sector in Central Asia Targeted With New HAWKBALL Backdoor Delivered via Microsoft Office Vulnerabilities HAWKBALL |