Click here to download all references as Bib-File.
| 2022-03-04 ⋅ Telsy ⋅ Legitimate Sites Used As Cobalt Strike C2s Against Indian Government Cobalt Strike |
| 2022-02-16 ⋅ Telsy ⋅ BabaDeda and LorecCPL downloaders used to run Outsteel against Ukraine OutSteel |
| 2022-01-05 ⋅ Telsy ⋅ SIDECOPY APT: From Windows to *nix SideCopy |
| 2021-12-22 ⋅ Telsy ⋅ Phishing Campaign targeting citizens abroad using COVID-19 theme lures Cobalt Strike |
| 2021-12-07 ⋅ Telsy ⋅ NOBELIUM again or eCrime operation? Sliver |
| 2021-11-24 ⋅ Telsy ⋅ Possible attack to Telco company in Middle East GRUNT |
| 2021-11-03 ⋅ Telsy ⋅ Dissecting new AppleSeed backdoor of Kimsuky threat actor Appleseed |
| 2021-10-13 ⋅ Telsy ⋅ New malicious campaign spreading Windows and Linux backdoors |
| 2021-10-11 ⋅ Telsy ⋅ Lazarus Group continues AppleJeus Operation AppleJeus |
| 2021-09-29 ⋅ Telsy ⋅ Google Drive abused in document exfiltration operation against Afghanistan |
| 2021-09-15 ⋅ Telsy ⋅ REMCOS and Agent Tesla loaded into memory with Rezer0 loader Agent Tesla Remcos |
| 2020-12-03 ⋅ Telsy ⋅ When a false flagdoesn’t work: Exploring the digital-crimeunderground at campaign preparation stage Agent Tesla |
| 2020-11-19 ⋅ Telsy ⋅ QNodeService stepped up its features while operated in widespread credential-theft campaigns QNodeService |
| 2020-11-06 ⋅ Telsy ⋅ Malware Analysis Report: Trying not to walk in the dark woods. A way out of the Maze Maze |
| 2020-10-08 ⋅ Telsy ⋅ Operation “Space Race”: Reaching the Stars through Professional Social Networks |
| 2020-07-14 ⋅ Telsy ⋅ Turla / Venomous Bear updates its arsenal: “NewPass” appears on the APT threat scene NewPass Turla |
| 2020-03-02 ⋅ Telsy ⋅ APT34 (aka OilRig, aka Helix Kitten) attacks Lebanon government entities with MailDropper implants Karkoff |
| 2020-02-12 ⋅ Telsy ⋅ Meeting POWERBAND: The APT33 .NET POWERTON Variant POWERTON POWERBAND |
| 2019-05-19 ⋅ Telsy ⋅ Following the Turla’s Skipper over the ocean of cyber operations Skipper |