Click here to download all references as Bib-File.
| 2022-01-12 ⋅ Cisco ⋅ Nanocore, Netwire and AsyncRAT spreading campaign uses public cloud infrastructure AsyncRAT Nanocore RAT NetWire RC |
| 2021-11-16 ⋅ Cisco ⋅ Attackers use domain fronting technique to target Myanmar with Cobalt Strike Cobalt Strike |
| 2021-11-03 ⋅ Cisco Talos ⋅ Microsoft Exchange vulnerabilities exploited once again for ransomware, this time with Babuk Babuk CHINACHOPPER |
| 2021-09-23 ⋅ Talos ⋅ Operation “Armor Piercer:” Targeted attacks in the Indian subcontinent using commercial RATs Ave Maria NetWire RC |
| 2021-08-19 ⋅ Talos ⋅ Malicious Campaign Targets Latin America: The seller, The operator and a curious link AsyncRAT NjRAT |
| 2021-08-12 ⋅ Cisco Talos ⋅ Signed MSI files, Raccoon and Amadey are used for installing ServHelper RAT Amadey Raccoon ServHelper |
| 2021-06-03 ⋅ Talos ⋅ Necro Python bot adds new exploits and Tezos mining to its bag of tricks N3Cr0m0rPh |
| 2021-04-21 ⋅ Talos ⋅ A year of Fajan evolution and Bloomberg themed campaigns MASS Logger Nanocore RAT NetWire RC Revenge RAT XpertRAT |
| 2021-02-17 ⋅ Cisco Talos ⋅ Masslogger campaigns exfiltrates user credentials MASS Logger |
| 2020-12-01 ⋅ Talos ⋅ Xanthe - Docker aware miner Xanthe |
| 2020-07-22 ⋅ Talos Intelligence ⋅ Prometei botnet and its quest for Monero Prometei |
| 2020-04-02 ⋅ Cisco Talos ⋅ AZORult brings friends to the party Azorult Remcos |
| 2020-02-18 ⋅ Cisco Talos ⋅ Building a bypass with MSBuild Cobalt Strike GRUNT MimiKatz |
| 2019-08-27 ⋅ Cisco Talos ⋅ China Chopper still active 9 years later CHINACHOPPER |
| 2019-05-30 ⋅ Talos Intelligence ⋅ 10 years of virtual dynamite: A high-level retrospective of ATM malware FastCash Project Alice Cutlet Ploutus ATM Skimer Tyupkin |
| 2018-07-31 ⋅ Cisco Talos ⋅ Multiple Cobalt Personality Disorder More_eggs |
| 2017-06-19 ⋅ Cisco Talos ⋅ Delphi Used To Score Against Palestine Micropsia AridViper |
| 2017-06-19 ⋅ Cisco Talos ⋅ Delphi Used To Score Against Palestine The Big Bang |
| 2017-05-23 ⋅ Cisco ⋅ Modified Zyklon and plugins from India Zyklon |
| 2016-03-02 ⋅ RSA Conference ⋅ Dissecting Derusbi Derusbi |