Click here to download all references as Bib-File.
| 2022-06-21 ⋅ Malwarebytes Labs ⋅ Russia’s APT28 uses fear of nuclear war to spread Follina docs in Ukraine |
| 2022-06-13 ⋅ Microsoft ⋅ The many lives of BlackCat ransomware BlackCat |
| 2022-06-08 ⋅ Malwarebytes Labs ⋅ MakeMoney malvertising campaign adds fake update template FAKEUPDATES |
| 2022-05-16 ⋅ Malwarebytes Labs ⋅ Custom PowerShell RAT targets Germans seeking information about the Ukraine crisis Unidentified PS 003 (RAT) |
| 2022-05-10 ⋅ Malwarebytes Labs ⋅ APT34 targets Jordan Government using new Saitama backdoor Saitama Backdoor |
| 2022-05-09 ⋅ Microsoft ⋅ Ransomware-as-a-service: Understanding the cybercrime gig economy and how to protect yourself AnchorDNS BlackCat BlackMatter Conti DarkSide HelloKitty Hive LockBit REvil FAKEUPDATES Griffon ATOMSILO BazarBackdoor BlackCat BlackMatter Blister Cobalt Strike Conti DarkSide Emotet FiveHands Gozi HelloKitty Hive IcedID ISFB JSSLoader LockBit LockFile Maze NightSky Pandora Phobos Phoenix Locker PhotoLoader QakBot REvil Rook Ryuk SystemBC TrickBot WastedLocker |
| 2022-05-09 ⋅ Microsoft Security ⋅ Ransomware-as-a-service: Understanding the cybercrime gig economy and how to protect yourself Griffon BazarBackdoor BlackCat BlackMatter Blister Gozi LockBit Pandora Rook SystemBC TrickBot |
| 2022-05-05 ⋅ Malwarebytes Labs ⋅ Nigerian Tesla: 419 scammer gone malware distributor unmasked Agent Tesla |
| 2022-04-13 ⋅ Microsoft ⋅ Dismantling ZLoader: How malicious ads led to disabled security tools and ransomware BlackMatter Cobalt Strike DarkSide Ryuk Zloader |
| 2022-03-28 ⋅ Avast ⋅ Avast Finds Compromised Philippine Navy Certificate Used in Remote Access Tool Unidentified 091 |
| 2022-03-22 ⋅ Microsoft ⋅ DEV-0537 (LAPSUS$/UNC3661) criminal actor targeting organizations for data exfiltration and destruction RedLine Stealer LAPSUS |
| 2022-03-18 ⋅ Malwarebytes ⋅ Double header: IsaacWiper and CaddyWiper CaddyWiper IsaacWiper |
| 2022-02-02 ⋅ Microsoft ⋅ The evolution of a Mac trojan: UpdateAgent’s progression UpdateAgent |
| 2022-01-18 ⋅ Microsoft ⋅ Evolved phishing: Device registration trick adds to phishers’ toolbox for victims without MFA WhisperGate |
| 2022-01-15 ⋅ Microsoft ⋅ Destructive malware targeting Ukrainian organizations (DEV-0586) WhisperGate |
| 2022-01-07 ⋅ Malwarebytes ⋅ Patchwork APT caught in its own web BadNews |
| 2021-12-09 ⋅ Microsoft ⋅ A closer look at Qakbot’s latest building blocks (and how to knock them down) QakBot |
| 2021-12-02 ⋅ Malwarebytes ⋅ SideCopy APT: Connecting lures to victims, payloads to infrastructure SideCopy |
| 2021-11-16 ⋅ Malwarebytes ⋅ TrickBot helps Emotet come back from the dead Emotet TrickBot |
| 2021-11-11 ⋅ Microsoft ⋅ HTML smuggling surges: Highly evasive loader technique increasingly used in banking malware, targeted attacks AsyncRAT Mekotio NjRAT |