Click here to download all references as Bib-File.•
2025-09-16
⋅
Proofpoint
⋅
Going Underground: China-aligned TA415 Conducts U.S.-China Economic Relations Targeting Using VS Code Remote Tunnels |
2025-09-15
⋅
Zscalar
⋅
SmokeLoader Rises From the Ashes SmokeLoader |
2025-08-26
⋅
Sophos
⋅
Velociraptor incident response tool abused for remote access |
2025-08-08
⋅
AhnLab
⋅
Distribution of SmartLoader Malware via Github Repository Disguised as a Legitimate Project Rhadamanthys SmartLoader |
2025-08-01
⋅
Belarus-Linked DSLRoot Proxy Network Deploys Hardware in U.S. Residences, Including Military Homes |
2025-07-24
⋅
SYGNIA
⋅
Fire Ant: A Deep-Dive into Hypervisor-Level Espionage |
2025-07-24
⋅
Red Canary
⋅
Intelligence Insights: July 2025 Broomstick |
2025-07-23
⋅
Natto Thoughts
⋅
HAFNIUM-Linked Hacker Xu Zewei: Riding the Tides of China’s Cyber Ecosystem |
2025-07-18
⋅
Arctic Wolf
⋅
Greedy Sponge Targets Mexico with AllaKore RAT and SystemBC AllaKore SystemBC |
2025-07-16
⋅
Proofpoint
⋅
Phish and Chips: China-Aligned Espionage Actors Ramp Up Taiwan Semiconductor Industry Targeting Cobalt Strike Voldemort |
2025-07-14
⋅
Arda Büyükkaya
⋅
GLOBAL GROUP: Emerging Ransomware-as-a-Service, Supporting AI Driven Negotiation and Mobile Control Panel for Their Affiliates Global |
2025-07-11
⋅
Authentic8
⋅
Cyber Intel Brief: NightEagle APT, AI deepfakes, SPNEGO flaw NightEagle |
2025-07-01
⋅
SpyCloud
⋅
State Secrets for Sale: More Leaks from the Chinese Hack-for-Hire Industry |
2025-06-26
⋅
Arctic Wolf
⋅
GIFTEDCROOK’s Strategic Pivot: From Browser Stealer to Data Exfiltration Platform During Critical Ukraine Negotiations GIFTEDCROOK |
2025-06-23
⋅
PolySwarm Tech Team
⋅
Famous Chollima’s PylangGhost GolangGhost PylangGhost GolangGhost |
2025-06-16
⋅
Proofpoint
⋅
Amatera Stealer: Rebranded ACR Stealer With Improved Evasion, Sophistication ACR Stealer Amatera |
2025-06-16
⋅
SecurityScorecard
⋅
Checking all the Boxes: LapDogs, The New ORB in Town ShortLeash ShortLeash |
2025-06-15
⋅
Positive Technologies
⋅
Team46 and TaxOff: two sides of the same coin Cobalt Strike |
2025-06-12
⋅
Symantec
⋅
Fog Ransomware: Unusual Toolset Used in Recent Attack Fog |
2025-06-09
⋅
Zscaler
⋅
DanaBleed: DanaBot C2 Server Memory Leak Bug DanaBot |