Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-05-14 ⋅ ESET Research ⋅ ESET Research
FrostyNeighbor: Fresh mischief and digital shenanigans
Cobalt Strike PicassoLoader
2026-04-16 ⋅ zimperium ⋅ Fernando Ortega, Vishnu Pratapagiri
Android Bankers: 4 Campaigns In A Row
Mirax
2026-04-03 ⋅ Panther ⋅ Michael Baker
jsonspack: Multi-Tenant Node.js RAT — DPRK Supply Chain Campaign
OtterCookie
2026-03-31 ⋅ Google ⋅ Adrian Hernandez, Ashley Zaya, Austin Larsen, Christopher Gardner, Dima Lenz, Michael Rudden, Mon Liclican, Tyler McLellan
North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack
WAVESHAPER
2026-03-26 ⋅ Trend Micro ⋅ Ashish Verma, Deep Patel, Fernando Tucci, John Rainier Navato, Peter Girnus, Simon Dulude
Your AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise
TeamPCP
2026-02-24 ⋅ BlueVoyant ⋅ Joshua Green, Patrick Mchale
Mercenary Akula Hits Ukraine-Supporting Financial Institution
RMS
2026-02-17 ⋅ ANY.RUN ⋅ ANY.RUN
LATAM Businesses Hit by XWorm via Fake Financial Receipts: Full Campaign Analysis
XWorm
2026-02-17 ⋅ Google ⋅ Daniel Sislo, Fernando Tomlinson, John Scarbrough, Jr., Nick Harbour, PETER UKHANOV, Rich Reece
From BRICKSTORM to GRIMBOLT: UNC6201 Exploiting a Dell RecoverPoint for Virtual Machines Zero-Day
BRICKSTORM GRIMBOLT SLAYSTYLE UNC6201
2026-02-09 ⋅ Mandiant ⋅ Adrian Hernandez, Ross Inman
UNC1069 Targets Cryptocurrency Sector with New Tooling and AI-Enabled Social Engineering
SUGARLOADER WAVESHAPER
2026-02-03 ⋅ LevelBlue ⋅ Evgeny Ananin, Mark Tsipershtein
The Godfather of Ransomware? Inside DragonForce’s Cartel Ambitions
DragonForce
2026-01-30 ⋅ LevelBlue ⋅ Evgeny Ananin, Mark Tsipershtein, Nikita Kazymirskyi
19 Shades of LockBit5.0, Inside the Latest Cross-Platform Ransomware: Part 1
LockBit LockBit
2026-01-09 ⋅ The Hacker News ⋅ Ravie Lakshmanan
Russian APT28 Runs Credential-Stealing Campaign Targeting Energy and Policy Organizations
2025-12-01 ⋅ Kaspersky Labs ⋅ Kaspersky Lab ICS CERT
APT and financial attacks on industrial organizations in Q3 2025
ComicForm
2025-11-27 ⋅ Cleafy ⋅ Alessandro Strino, Federico Valentini, Gianluca Scotti, Simone Mattia
Albiriox Exposed: A New RAT Mobile Malware Targeting Global Finance and Crypto Wallets
Albiriox
2025-10-01 ⋅ Chainanalysis ⋅ Chainalysis Team
DPRK IT Workers: Inside North Korea’s Crypto Laundering Network
2025-09-24 ⋅ The Hacker News ⋅ Ravie Lakshmanan
Chinese Hackers RedNovember Target Global Governments Using Pantegana and Cobalt Strike
Cobalt Strike Leslieloader Pantegana SparkRAT Storm-2077
2025-09-22 ⋅ EclecticIQ ⋅ Arda Büyükkaya
ShinyHunters Calling: Financially Motivated Data Extortion Group Targeting Enterprise Cloud Applications
2025-09-04 ⋅ ESET Research ⋅ Fernando Tavella
GhostRedirector poisons Windows servers: Backdoors with a side of Potatoes
GoToHTTP GhostRedirector
2025-08-19 ⋅ securelist ⋅ Saurabh Sharma
GodRAT – New RAT targeting financial institutions
GodRAT
2025-08-06 ⋅ ANY.RUN ⋅ Mauro Eldritch
PyLangGhost RAT: Rising Stealer from Lazarus Group Striking Finance and Technology
PylangGhost GolangGhost