Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-10-26 ⋅ The Hacker News ⋅ Ravie Lakshmanan
Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More
Jingle Thief
2026-10-23 ⋅ The Hacker News ⋅ Ravie Lakshmanan
Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
AdaptixC2 MimiKatz k0t
2026-10-19 ⋅ The Hacker News ⋅ Ravie Lakshmanan
Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic
AMOS REF8801
2026-10-19 ⋅ The Hacker News ⋅ Ravie Lakshmanan
GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories
GhostAction
2026-10-07 ⋅ CrowdStrike ⋅ Ashley Campion
Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance
2026-09-11 ⋅ The Hacker News ⋅ Ravie Lakshmanan
Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection
GTG-20006
2026-08-14 ⋅ ⋅ Ministere de l'Economie et des Finances ⋅ Elvire MACE
Illegitimate access to the information system of the Directorate General of Public Finances
ZeroBytes
2026-07-16 ⋅ Cisco Talos ⋅ Alex Karkins, Chetan Raghuprasad
UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign
CASTLESTEALER Remcos UAT-11795
2026-06-11 ⋅ ZeroBEC ⋅ Vedant Bhalgama
Introducing LX RAT: ITR Phishing Targets Finance and Tech
AsyncRAT LxBase RAT
2026-05-19 ⋅ Trend Micro ⋅ Aldrin Ceriola, Gabriel Nicoleta, Jovit Samaniego, Mohamed Fahmy
Inside SHADOW-WATER-063’s Banana RAT: From Build Server to Banking Fraud
Banana RAT SHADOW-WATER-063
2026-05-14 ⋅ ESET Research ⋅ ESET Research
FrostyNeighbor: Fresh mischief and digital shenanigans
Cobalt Strike PicassoLoader
2026-04-16 ⋅ zimperium ⋅ Fernando Ortega, Vishnu Pratapagiri
Android Bankers: 4 Campaigns In A Row
Mirax
2026-04-03 ⋅ Panther ⋅ Michael Baker
jsonspack: Multi-Tenant Node.js RAT — DPRK Supply Chain Campaign
OtterCookie
2026-03-31 ⋅ Google ⋅ Adrian Hernandez, Ashley Zaya, Austin Larsen, Christopher Gardner, Dima Lenz, Michael Rudden, Mon Liclican, Tyler McLellan
North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack
WAVESHAPER
2026-03-26 ⋅ Trend Micro ⋅ Ashish Verma, Deep Patel, Fernando Tucci, John Rainier Navato, Peter Girnus, Simon Dulude
Your AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise
TeamPCP
2026-02-24 ⋅ BlueVoyant ⋅ Joshua Green, Patrick Mchale
Mercenary Akula Hits Ukraine-Supporting Financial Institution
RMS
2026-02-17 ⋅ ANY.RUN ⋅ ANY.RUN
LATAM Businesses Hit by XWorm via Fake Financial Receipts: Full Campaign Analysis
XWorm
2026-02-17 ⋅ Google ⋅ Daniel Sislo, Fernando Tomlinson, John Scarbrough, Jr., Nick Harbour, PETER UKHANOV, Rich Reece
From BRICKSTORM to GRIMBOLT: UNC6201 Exploiting a Dell RecoverPoint for Virtual Machines Zero-Day
BRICKSTORM GRIMBOLT SLAYSTYLE UNC6201
2026-02-09 ⋅ Mandiant ⋅ Adrian Hernandez, Ross Inman
UNC1069 Targets Cryptocurrency Sector with New Tooling and AI-Enabled Social Engineering
SUGARLOADER WAVESHAPER
2026-02-03 ⋅ LevelBlue ⋅ Evgeny Ananin, Mark Tsipershtein
The Godfather of Ransomware? Inside DragonForce’s Cartel Ambitions
DragonForce