Click here to download all references as Bib-File.•
| 2026-06-29
⋅
The DFIR Report
⋅
From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira Akira AdaptixC2 Akira BumbleBee |
| 2025-09-29
⋅
The DFIR Report
⋅
From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion Brute Ratel C4 Cobalt Strike Latrodectus |
| 2025-08-05
⋅
The DFIR Report
⋅
From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira AdaptixC2 Akira BumbleBee |
| 2025-05-19
⋅
The DFIR Report
⋅
Another Confluence Bites the Dust: Falling to ELPACO-team Ransomware Mimic Ransomware MimiKatz |
| 2025-01-27
⋅
The DFIR Report
⋅
Cobalt Strike and a Pair of SOCKS Lead to LockBit Ransomware GhostSocks LockBit SystemBC |
| 2024-12-02
⋅
The DFIR Report
⋅
The Curious Case of an Egg-Cellent Resume More_eggs Pyramid Cobalt Strike |
| 2024-09-30
⋅
The DFIR Report
⋅
Nitrogen Campaign Drops Sliver and Ends With BlackCat Ransomware BlackCat Nitrogen Loader Sliver |
| 2024-08-26
⋅
The DFIR Report
⋅
BlackSuit Ransomware BlackSuit Cobalt Strike SystemBC |
| 2024-04-29
⋅
The DFIR Report
⋅
From IcedID to Dagon Locker Ransomware in 29 Days IcedID Mount Locker |
| 2024-04-01
⋅
The DFIR Report
⋅
From OneNote to RansomNote: An Ice Cold Intrusion Cobalt Strike IcedID Nokoyawa Ransomware PhotoLoader |
| 2024-02-26
⋅
The DFIR Report
⋅
SEO Poisoning to Domain Control: The Gootloader Saga Continues GootLoader |
| 2023-12-04
⋅
The DFIR Report
⋅
SQL Brute Force leads to Bluesky Ransomware BlueSky Cobalt Strike |
| 2023-08-28
⋅
The DFIR Report
⋅
HTML Smuggling Leads to Domain Wide Ransomware Cobalt Strike IcedID Nokoyawa Ransomware |
| 2023-06-12
⋅
The DFIR Report
⋅
A Truly Graceful Wipe Out FlawedGrace Silence |
| 2023-06-10
⋅
The DFIR Report
⋅
IcedID Brings ScreenConnect and CSharp Streamer to ALPHV Ransomware Deployment BlackCat Cobalt Strike IcedID |
| 2023-05-22
⋅
The DFIR Report
⋅
IcedID Macro Ends in Nokoyawa Ransomware IcedID Nokoyawa Ransomware PhotoLoader |
| 2023-04-03
⋅
The DFIR Report
⋅
Malicious ISO File Leads to Domain Wide Ransomware Cobalt Strike IcedID Mount Locker |
| 2023-01-09
⋅
The DFIR Report
⋅
Unwrapping Ursnifs Gifts ISFB |
| 2022-11-28
⋅
The DFIR Report
⋅
Emotet Strikes Again – LNK File Leads to Domain Wide Ransomware Emotet Mount Locker |
| 2022-09-26
⋅
The DFIR Report
⋅
BumbleBee: Round Two BumbleBee Cobalt Strike Meterpreter |