Click here to download all references as Bib-File.
| 2021-09-29 ⋅ Proofpoint ⋅ TA544 Targets Italian Organizations with Ursnif Malware ISFB |
| 2021-09-24 ⋅ Proofpoint ⋅ Daily Ruleset Update Summary 2021/09/24 MirrorBlast |
| 2021-09-08 ⋅ Proofpoint ⋅ Advance Fee Fraud: The Emergence of Elaborate Crypto Schemes |
| 2021-07-28 ⋅ Proofpoint ⋅ I Knew You Were Trouble: TA456 Targets Defense Contractor with Alluring Social Media Persona Liderc SysKit |
| 2021-07-19 ⋅ Proofpoint ⋅ New Threat Actor Uses Spanish Language Lures to Distribute Seldom Observed Bandook Malware Bandook |
| 2021-07-12 ⋅ Proofpoint ⋅ Operation SpoofedScholars: A Conversation with TA453 |
| 2021-07-01 ⋅ Proofpoint ⋅ Malware Masquerades as Privacy Tool |
| 2021-06-29 ⋅ Proofpoint ⋅ Cobalt Strike: Favorite Tool from APT to Crimeware Cobalt Strike |
| 2021-06-24 ⋅ Proofpoint ⋅ JSSLoader: Recoded and Reloaded JSSLoader |
| 2021-06-17 ⋅ Proofpoint ⋅ New TA402 Molerats Malware Targets Governments in the Middle East Molerat Loader |
| 2021-06-16 ⋅ Proofpoint ⋅ The First Step: Initial Access Leads to Ransomware BazarBackdoor Egregor IcedID Maze QakBot REvil Ryuk TrickBot WastedLocker |
| 2021-06-10 ⋅ Proofpoint ⋅ Ransom DDoS Extortion Actor “Fancy Lazarus” Returns |
| 2021-05-03 ⋅ Proofpoint ⋅ New Variant of Buer Loader Written in Rust Buer |
| 2021-04-27 ⋅ Proofpoint ⋅ FluBot Android Malware Spreading Rapidly Through Europe, May Hit U.S. Soon FluBot |
| 2021-04-15 ⋅ Proofpoint ⋅ Threat Actors Pair Tax-Themed Lures With COVID-19, Healthcare Themes Dridex TrickBot |
| 2021-03-30 ⋅ Proofpoint ⋅ BadBlood: TA453 Targets US and Israeli Medical Research Personnel in Credential Phishing Campaigns |
| 2021-03-24 ⋅ Proofpoint ⋅ OAuth Abuse: Think SolarWinds/Solorigate Campaign with Focus on Cloud Applications |
| 2021-03-18 ⋅ Proofpoint ⋅ Now You See It, Now You Don’t: CopperStealer Performs Widespread Theft CopperStealer SmokeLoader |
| 2021-03-10 ⋅ Proofpoint ⋅ NimzaLoader: TA800’s New Initial Access Malware BazarNimrod Cobalt Strike |
| 2021-02-25 ⋅ Proofpoint ⋅ TA413 Leverages New FriarFox Browser Extension to Target the Gmail Accounts of Global Tibetan Organizations scanbox Sepulcher |