Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2024-12-04 ⋅ Rapid7 ⋅ Tyler McGraw
Black Basta Ransomware Campaign Drops Zbot, DarkGate, and Custom Malware
Black Basta Cobalt Strike DarkGate SystemBC Zloader
2024-11-27 ⋅ Rapid7 ⋅ Natalie Zargarov
New “CleverSoar” Installer Targets Chinese and Vietnamese Users
ValleyRAT
2024-08-12 ⋅ Rapid7 ⋅ Tyler McGraw
Ongoing Social Engineering Campaign Refreshes Payloads
Black Basta Cobalt Strike GhostSocks Lumma Stealer SystemBC
2024-07-24 ⋅ Rapid7 ⋅ Rapid7
Malware Campaign Lures Users With Fake W2 Form
Latrodectus
2024-06-17 ⋅ Rapid7 ⋅ Rapid7
Malvertising Campaign Leads to Execution of Oyster Backdoor
Broomstick ChrGetPdsi Stealer
2024-05-10 ⋅ Rapid7 Labs ⋅ Evan McCann, Thomas Elkins, Tyler McGraw
Ongoing Social Engineering Campaign Linked to Black Basta Ransomware Operators
Black Basta Black Basta Cobalt Strike NetSupportManager RAT
2024-01-17 ⋅ Rapid7 ⋅ Natalie Zargarov
Whispers of Atlantida: Safeguarding Your Digital Treasure
Atlantida
2023-08-31 ⋅ Rapid7 Labs ⋅ Evan McCann, Natalie Zargarov, Thomas Elkins, Tyler McGraw
Fake Update Utilizes New IDAT Loader To Execute StealC and Lumma Infostealers
FAKEUPDATES Amadey HijackLoader Lumma Stealer SectopRAT
2023-07-13 ⋅ Rapid7 Labs ⋅ Natalie Zargarov
Old Blackmoon Trojan, NEW Monetization Approach
KrBanker
2023-07-07 ⋅ Rapid7 Labs ⋅ Caitlin Condon
Exploitation of Mitel MiVoice Connect SA CVE-2022-29499
2023-04-18 ⋅ Rapid7 Labs ⋅ Matt Green
Automating Qakbot Detection at Scale With Velociraptor
QakBot
2023-03-30 ⋅ Rapid7 Labs ⋅ Rapid7
Backdoored 3CXDesktopApp Installer Used in Active Threat Campaign
3CX Backdoor
2023-01-11 ⋅ Rapid7 Labs ⋅ Eoin Miller
Increasing The Sting of HIVE Ransomware
Hive
2021-03-11 ⋅ Rapid7 Labs ⋅ Caitlin Condon, Spencer McIntyre, William Vu
2020 Vulnerability Intelligence Report
2021-03-02 ⋅ Rapid7 Labs ⋅ Andrew Christian
Rapid7’s InsightIDR Enables Detection And Response to Microsoft Exchange Zero-Day
CHINACHOPPER HAFNIUM
2020-11-04 ⋅ FireEye ⋅ Jacob Thompson, Jeffrey Martin, Rapid7
In Wild Critical Buffer Overflow Vulnerability in Solaris Can Allow Remote Takeover — CVE-2020-14871
2020-05-28 ⋅ Rapid7 Labs ⋅ Matthew Berninger
The Masked SYNger: Investigating a Traffic Phenomenon
2019-02-06 ⋅ Recorded Future ⋅ Insikt Group, Rapid7
APT10 Targeted NorwegianMSP and US Companies in Sustained Campaign
RedLeaves
2019-02-06 ⋅ Recorded Future ⋅ Insikt Group, Rapid7
APT10 Targeted Norwegian MSP and US Companies in Sustained Campaign
Trochilus RAT APT31 HURRICANE PANDA
2013-06-07 ⋅ Rapid7 Labs ⋅ Claudio Guarnieri, Mark Schloesser
KeyBoy, Targeted Attacks against Vietnam and India
KeyBoy APT23