Click here to download all references as Bib-File.
| 2023-05-17 ⋅ Team Cymru ⋅ Visualizing QakBot Infrastructure QakBot |
| 2023-04-19 ⋅ Team Cymru ⋅ AllaKore(d) the SideCopy Train AllaKore |
| 2023-04-04 ⋅ Team Cymru ⋅ A Blog with NoName Dosia |
| 2023-03-16 ⋅ Team Cymru ⋅ MoqHao Part 3: Recent Global Targeting Trends MoqHao |
| 2023-02-24 ⋅ Team Cymru ⋅ Desde Chile con Malware (From Chile with Malware) IcedID PhotoLoader |
| 2023-01-19 ⋅ Team Cymru ⋅ Darth Vidar: The Dark Side of Evolving Threat Infrastructure Vidar |
| 2022-12-21 ⋅ Team Cymru ⋅ Inside the IcedID BackConnect Protocol IcedID |
| 2022-10-07 ⋅ Team Cymru ⋅ A Visualizza into Recent IcedID Campaigns: Reconstructing Threat Actor Metrics with Pure Signal™ Recon IcedID PhotoLoader |
| 2022-09-29 ⋅ Team Cymru ⋅ Seychelles, Seychelles, on the C(2) Shore: An overview of a bulletproof hosting provider named ELITETEAM. Amadey Raccoon RedLine Stealer SmokeLoader STOP |
| 2022-09-05 ⋅ Team Cymru ⋅ Mythic Case Study: Assessing Common Offensive Security Tools |
| 2022-07-12 ⋅ Team Cymru ⋅ An Analysis of Infrastructure linked to the Hagga Threat Actor Agent Tesla |
| 2022-05-25 ⋅ Team Cymru ⋅ Bablosoft; Lowering the Barrier of Entry for Malicious Actors BlackGuard BumbleBee RedLine Stealer |
| 2022-04-29 ⋅ Team Cymru ⋅ Sliver Case Study: Assessing Common Offensive Security Tools The Use of the Sliver C2 Framework for Malicious Purposes Sliver |
| 2022-04-07 ⋅ Team Cymru ⋅ MoqHao Part 2: Continued European Expansion MoqHao |
| 2022-03-23 ⋅ Team Cymru ⋅ Raccoon Stealer – An Insight into Victim “Gates” Raccoon |
| 2022-03-10 ⋅ Twitter (@teamcymru_S2) ⋅ Tweet on Crimson RAT infrastructure used by APT36 Crimson RAT |
| 2022-03-08 ⋅ Team Cymru ⋅ Record breaking DDoS Potential Discovered: CVE-2022-26143 |
| 2022-01-26 ⋅ Team Cymru ⋅ Analysis of a Management IP Address linked to Molerats APT |
| 2021-11-03 ⋅ Team Cymru ⋅ Webinject Panel Administration: A Vantage Point into Multiple Threat Actor Campaigns - A Case Study on the Value of Threat Reconnaisance DoppelDridex IcedID QakBot Zloader |
| 2021-08-11 ⋅ Team Cymru ⋅ MoqHao Part 1.5: High-Level Trends of Recent Campaigns Targeting Japan MoqHao |