Click here to download all references as Bib-File.
| 2022-05-06 ⋅ Twitter (@MsftSecIntel) ⋅ Twitter Thread on initial infeciton of SocGholish/ FAKEUPDATES campaigns lead to BLISTER Loader, CobaltStrike, Lockbit and followed by Hands On Keyboard activity FAKEUPDATES Blister Cobalt Strike LockBit |
| 2022-01-15 ⋅ Microsoft ⋅ Destructive malware targeting Ukrainian organizations (DEV-0586) WhisperGate DEV-0586 |
| 2021-10-21 ⋅ Twitter (@MsftSecIntel) ⋅ Tweet on new variant of mac malware UpdateAgent/WizardUpdate Vigram |
| 2021-09-25 ⋅ Twitter (@MsftSecIntel) ⋅ Thread on Malicious Android apps posing as bank loan services are being widely distributed to targets in Asia Unidentified APK 006 |
| 2021-07-24 ⋅ Twitter (@MsftSecIntel) ⋅ Tweet on attackers increasingly using HTML smuggling in phishing and other email campaigns to deliver Casbaneiro Metamorfo |
| 2021-06-11 ⋅ Twitter (@MsftSecIntel) ⋅ Tweet on solarmarker/Jupyter malware solarmarker |
| 2021-05-20 ⋅ Twitter (@MsftSecIntel) ⋅ Tweet on Java-based STRRAT malware campaign distributed via email STRRAT |
| 2021-05-11 ⋅ Twitter (@MsftSecIntel) ⋅ Tweet on Snip3 crypter delivering AsyncRAT or AgentTesla Agent Tesla AsyncRAT |
| 2021-03-02 ⋅ Twitter (@MsftSecIntel) ⋅ Tweet on Gootkit malware campaign GootKit |
| 2020-12-13 ⋅ Microsoft ⋅ Trojan:MSIL/Solorigate.B!dha SUNBURST |
| 2020-10-06 ⋅ Twitter (@MsftSecIntel) ⋅ Tweet on TA505 threat actor exploiting Zerologon (CVE-2020-1472) Vulnerability |
| 2020-08-27 ⋅ Twitter (@MsftSecIntel) ⋅ Tweet on Anubis Stealer Anubis |
| 2020-06-17 ⋅ Twitter (@MsftSecIntel) ⋅ A tweet thread on TA505 using CAPTCHA to avoid detection and infecting victims with FlawedGrace FlawedGrace |
| 2019-03-13 ⋅ Twitter (@WDSecurity) ⋅ Tweet on Tefosteal TefoSteal |
| 2019-01-21 ⋅ Microsoft Security Intelligence ⋅ HackTool:Win32/RemoteAdmin RemoteAdmin |
| 2017-09-15 ⋅ Microsoft Security Intelligence ⋅ TrojanDownloader:Win32/Banload Banload |
| 2017-09-15 ⋅ Microsoft Security Intelligence ⋅ Trojan:Win32/Enviserv.A Enviserv |
| 2015-11-20 ⋅ Microsoft ⋅ Microsoft Security Intelligence Report Volume 19 XTunnel |
| 2011-05-19 ⋅ Microsoft ⋅ Win32/Expiro Expiro |
| 2011-03-08 ⋅ Microsoft Security Intelligence ⋅ Worm:Win32/Yimfoca.A Buzus |