Click here to download all references as Bib-File.
| 2021-09-15 ⋅ Microsoft ⋅ Analyzing attacks that exploit the CVE-2021-40444 MSHTML vulnerability Cobalt Strike |
| 2021-08-26 ⋅ Microsoft ⋅ Widespread credential phishing campaign abuses open redirector links |
| 2021-07-29 ⋅ Microsoft ⋅ BazaCall: Phony call centers lead to exfiltration and ransomware BazarBackdoor Cobalt Strike |
| 2021-07-29 ⋅ Microsoft ⋅ When coin miners evolve, Part 2: Hunting down LemonDuck and LemonCat attacks |
| 2021-07-22 ⋅ Microsoft ⋅ When coin miners evolve, Part 1: Exposing LemonDuck and LemonCat, modern mining malware infrastructure |
| 2021-07-08 ⋅ Avast Decoded ⋅ Decoding Cobalt Strike: Understanding Payloads Cobalt Strike Empire Downloader |
| 2021-06-01 ⋅ Microsoft ⋅ New sophisticated email-based attack from NOBELIUM Cobalt Strike |
| 2021-05-20 ⋅ Microsoft ⋅ Phorpiex morphs: How a longstanding botnet persists and thrives in the current threat environment Phorpiex |
| 2021-04-22 ⋅ xorl %eax, %eax ⋅ A gentle introduction to building a threat intelligence team |
| 2021-04-09 ⋅ Microsoft ⋅ Investigating a unique “form” of email delivery for IcedID malware IcedID |
| 2021-04-06 ⋅ Malwarebytes ⋅ A deep dive into Saint Bot, a new downloader Saint Bot |
| 2021-03-25 ⋅ Microsoft ⋅ Analyzing attacks taking advantage of the Exchange Server vulnerabilities CHINACHOPPER |
| 2021-03-24 ⋅ Malwarebytes ⋅ Software renewal scammers unmasked |
| 2021-03-04 ⋅ WMC Global ⋅ The Compact Campaign |
| 2021-03-04 ⋅ Microsoft ⋅ GoldMax, GoldFinder, and Sibot: Analyzing NOBELIUM’s layered persistence SUNBURST TEARDROP UNC2452 |
| 2021-03-02 ⋅ Microsoft ⋅ HAFNIUM targeting Exchange Servers with 0-day exploits CHINACHOPPER HAFNIUM |
| 2021-02-12 ⋅ Malwarebytes ⋅ Malvertising campaign on PornHub and other top adult brands exposes users to tech support scams |
| 2021-02-01 ⋅ Microsoft ⋅ What tracking an attacker email infrastructure tells us about persistent cybercriminal operations Dridex Emotet Makop Ransomware SmokeLoader TrickBot |
| 2021-01-29 ⋅ Malwarebytes ⋅ Cleaning up after Emotet: the law enforcement file Emotet |
| 2021-01-28 ⋅ Microsoft ⋅ ZINC attacks against security researchers ComeBacker Klackring |