Click here to download all references as Bib-File.
| 2023-05-15 ⋅ Symantec ⋅ Lancefly: Group Uses Custom Backdoor to Target Orgs in Government, Aviation, Other Sectors PlugX ShadowPad ZXShell |
| 2023-04-21 ⋅ Symantec ⋅ X_Trader Supply Chain Attack Affects Critical Infrastructure Organizations in U.S. and Europe VEILEDSIGNAL |
| 2023-04-20 ⋅ Symantec ⋅ Daggerfly: APT Actor Targets Telecoms Company in Africa MgBot |
| 2023-04-19 ⋅ Symantec ⋅ Play Ransomware Group Using New Custom Data-Gathering Tools PLAY |
| 2023-04-04 ⋅ Symantec ⋅ Mantis: New Tooling Used in Attacks Against Palestinian Targets Arid Gopher Micropsia |
| 2023-03-30 ⋅ Symantec ⋅ 3CX: Supply Chain Attack Affects Thousands of Users Worldwide 3CX Backdoor IconicStealer |
| 2022-11-15 ⋅ Symantec ⋅ Billbug: State-sponsored Actor Targets Cert Authority, Government Agencies in Multiple Asian Countries Sagerunex |
| 2022-10-21 ⋅ Symantec ⋅ Exbyte: BlackByte Ransomware Attackers Deploy New Exfiltration Tool ExByte |
| 2022-09-29 ⋅ Symantec ⋅ Witchetty: Group Uses Updated Toolset in Attacks on Governments in Middle East CHINACHOPPER Lookback MimiKatz PlugX Unidentified 096 (Keylogger) x4 |
| 2022-09-22 ⋅ Broadcom ⋅ Noberus Ransomware: Darkside and BlackMatter Successor Continues to Evolve its Tactics BlackCat BlackMatter DarkSide |
| 2022-09-15 ⋅ Symantec ⋅ Webworm: Espionage Attackers Testing and Using Older Modified RATs 9002 RAT Ghost RAT Trochilus RAT |
| 2022-09-13 ⋅ Symantec ⋅ New Wave of Espionage Activity Targets Asian Governments MimiKatz PlugX Quasar RAT ShadowPad Trochilus RAT |
| 2022-08-15 ⋅ Symantec ⋅ Shuckworm: Russia-Linked Group Maintains Ukraine Focus |
| 2022-07-20 ⋅ Symantec ⋅ LockBit: Ransomware Puts Servers in the Crosshairs LockBit |
| 2022-06-28 ⋅ Symantec ⋅ Bumblebee: New Loader Rapidly Assuming Central Position in Cyber-crime Ecosystem BumbleBee |
| 2022-06-08 ⋅ Symantec ⋅ Attackers Exploit MSDT Follina Bug to Drop RAT, Infostealer AsyncRAT |
| 2022-06-02 ⋅ Symantec ⋅ Clipminer Botnet Makes Operators at Least $1.7 Million |
| 2022-04-28 ⋅ Symantec ⋅ Ransomware: How Attackers are Breaching Corporate Networks AvosLocker Conti Emotet Hive IcedID PhotoLoader QakBot TrickBot |
| 2022-04-27 ⋅ Symantec ⋅ Stonefly: North Korea-linked Spying Operation Continues to Hit High-value Targets |
| 2022-04-20 ⋅ Symantec ⋅ Shuckworm: Espionage Group Continues Intense Campaign Against Ukraine Pteranodon |