Click here to download all references as Bib-File.
| 2021-03-30 ⋅ Proofpoint ⋅ BadBlood: TA453 Targets US and Israeli Medical Research Personnel in Credential Phishing Campaigns |
| 2021-03-24 ⋅ Proofpoint ⋅ OAuth Abuse: Think SolarWinds/Solorigate Campaign with Focus on Cloud Applications |
| 2021-03-18 ⋅ Proofpoint ⋅ Now You See It, Now You Don’t: CopperStealer Performs Widespread Theft CopperStealer SmokeLoader |
| 2021-03-10 ⋅ Proofpoint ⋅ NimzaLoader: TA800’s New Initial Access Malware BazarNimrod Cobalt Strike |
| 2021-02-25 ⋅ Proofpoint ⋅ TA413 Leverages New FriarFox Browser Extension to Target the Gmail Accounts of Global Tibetan Organizations scanbox Sepulcher |
| 2021-02-11 ⋅ Proofpoint ⋅ A Baza Valentine’s Day BazarBackdoor |
| 2021-01-26 ⋅ Proofpoint ⋅ New Year, New Version of DanaBot DanaBot |
| 2020-12-08 ⋅ Proofpoint ⋅ Understanding BEC Scams: Supplier Invoicing Fraud |
| 2020-12-07 ⋅ Proofpoint ⋅ Commodity .NET Packers use Embedded Images to Hide Payloads Agent Tesla Loki Password Stealer (PWS) Remcos |
| 2020-11-23 ⋅ Proofpoint ⋅ TA416 Goes to Ground and Returns with a Golang PlugX Malware Loader PlugX |
| 2020-11-04 ⋅ Proofpoint ⋅ Persistent Actor Targets Ledger Cryptocurrency Wallets |
| 2020-10-21 ⋅ Proofpoint ⋅ Media Coverage Doesn’t Deter Actor From Threatening Democratic Voters |
| 2020-10-16 ⋅ Proofpoint ⋅ Geofenced Amazon Japan Credential Phishing Volumes Rival Emotet Emotet |
| 2020-10-01 ⋅ Proofpoint ⋅ Emotet Makes Timely Adoption of Political and Elections Lures Emotet |
| 2020-09-29 ⋅ Proofpoint ⋅ TA2552 Uses OAuth Access Token Phishing to Exploit Read-Only Risks |
| 2020-09-02 ⋅ Proofpoint ⋅ Chinese APT TA413 Resumes Targeting of Tibet Following COVID-19 Themed Economic Espionage Campaign Delivering Sepulcher Malware Targeting Europe Sepulcher TA413 |
| 2020-08-28 ⋅ Proofpoint ⋅ A Comprehensive Look at Emotet’s Summer 2020 Return Emotet MUMMY SPIDER |
| 2020-08-26 ⋅ Proofpoint ⋅ Threat Actor Profile: TA2719 Uses Colorful Lures to Deliver RATs in Local Languages AsyncRAT Nanocore RAT |
| 2020-07-17 ⋅ Proofpoint ⋅ TA547 Pivots from Ursnif Banking Trojan to Ransomware in Australian Campaign Adhubllka |
| 2020-06-22 ⋅ Proofpoint ⋅ Hakbit Ransomware Campaign Against Germany, Austria, Switzerland CloudEyE Hakbit |