Click here to download all references as Bib-File.
| 2021-02-19 ⋅ Palo Alto Networks Unit 42 ⋅ IronNetInjector: Turla’s New Malware Loading Tool Agent.BTZ TurlaRPC |
| 2021-02-17 ⋅ Palo Alto Networks Unit 42 ⋅ WatchDog: Exposing a Cryptojacking Campaign That’s Operated for Two Years |
| 2021-02-05 ⋅ Palo Alto Networks Unit 42 ⋅ Exploits in the Wild for WordPress File Manager RCE Vulnerability (CVE-2020-25213) Kinsing |
| 2021-02-03 ⋅ Palo Alto Networks Unit 42 ⋅ Hildegard: New TeamTNT Malware Targeting Kubernetes TeamTNT |
| 2021-01-28 ⋅ Palo Alto Networks Unit 42 ⋅ Pro-Ocean: Rocke Group’s New Cryptojacking Malware Pro-Ocean |
| 2021-01-19 ⋅ Palo Alto Networks Unit 42 ⋅ Wireshark Tutorial: Examining Emotet Infection Traffic Emotet GootKit IcedID QakBot TrickBot |
| 2021-01-11 ⋅ Palo Alto Networks Unit 42 ⋅ xHunt Campaign: New BumbleBee Webshell and SSH Tunnels Used for Lateral Movement |
| 2021-01-07 ⋅ Palo Alto Networks Unit 42 ⋅ TA551: Email Attack Campaign Switches from Valak to IcedID IcedID |
| 2020-12-23 ⋅ Palo Alto Networks Unit 42 ⋅ A Timeline Perspective of the SolarStorm Supply-Chain Attack SUNBURST TEARDROP |
| 2020-12-17 ⋅ Palo Alto Networks Unit 42 ⋅ SUPERNOVA: SolarStorm’s Novel .NET Webshell SUPERNOVA |
| 2020-12-14 ⋅ Palo Alto Networks Unit 42 ⋅ Threat Brief: SolarStorm and SUNBURST Customer Coverage Cobalt Strike SUNBURST |
| 2020-12-14 ⋅ Palo Alto Networks Unit 42 ⋅ PyMICROPSIA: New Information-Stealing Trojan from AridViper |
| 2020-12-10 ⋅ Palo Alto Networks Unit 42 ⋅ PGMiner: New Cryptocurrency Mining Botnet Delivered via PostgreSQL |
| 2020-12-10 ⋅ Palo Alto Networks Unit 42 ⋅ Threat Brief: FireEye Red Team Tool Breach Cobalt Strike |
| 2020-12-09 ⋅ Palo Alto Networks Unit 42 ⋅ njRAT Spreading Through Active Pastebin Command and Control Tunnel NjRAT |
| 2020-12-08 ⋅ Palo Alto Networks Unit 42 ⋅ Threat Assessment: Egregor Ransomware Egregor |
| 2020-11-09 ⋅ Palo Alto Networks Unit 42 ⋅ xHunt Campaign: Newly Discovered Backdoors Using Deleted Email Drafts and DNS Tunneling for Command and Control Snugy |
| 2020-11-09 ⋅ Palo Alto Networks Unit 42 ⋅ A Closer Look at the Web Skimmer |
| 2020-11-06 ⋅ Palo Alto Networks Unit 42 ⋅ Indicators of Compromise related to Cobaltstrike, PyXie Lite, Vatet and Defray777 Cobalt Strike PyXie RansomEXX |
| 2020-11-06 ⋅ Palo Alto Networks Unit 42 ⋅ Last, but Not Least: Defray777 PyXie RansomEXX |