Click here to download all references as Bib-File.
| 2023-03-30 ⋅ hasherezade's 1001 nights ⋅ Magniber ransomware analysis: Tiny Tracer in action Magniber |
| 2021-07-23 ⋅ Malwarebytes ⋅ AvosLocker enters the ransomware scene, asks for partners AvosLocker |
| 2020-11-30 ⋅ Malwarebytes ⋅ German users targeted with Gootkit banker or REvil ransomware GootKit REvil |
| 2020-10-28 ⋅ Malwarebytes ⋅ Fake COVID-19 survey hides ransomware in Canadian university attack Vaggen |
| 2020-05-31 ⋅ Malwarebytes ⋅ Revisiting the NSIS-based crypter Formbook |
| 2020-05-21 ⋅ Malwarebytes ⋅ The “Silent Night” Zloader/Zbot Zloader |
| 2019-08-15 ⋅ Malwarebytes ⋅ The Hidden Bee infection chain, part 1: the stegano pack Hidden Bee |
| 2019-07-24 ⋅ Malwarebytes ⋅ A deep dive into Phobos ransomware Phobos |
| 2019-05-31 ⋅ Malwarebytes ⋅ Hidden Bee: Let’s go down the rabbit hole Hidden Bee |
| 2019-04-06 ⋅ Youtube (hasherezade) ⋅ Unpacking ISFB (including the custom 'PX' format) ISFB |
| 2019-03-21 ⋅ Youtube (hasherezade) ⋅ Unpacking Baldr stealer Baldr |
| 2018-11-12 ⋅ Malwarebytes ⋅ What’s new in TrickBot? Deobfuscating elements TrickBot |
| 2018-08-30 ⋅ Malwarebytes ⋅ Reversing malware in a custom format: Hidden Bee elements Hidden Bee |
| 2018-07-26 ⋅ Malwarebytes ⋅ ‘Hidden Bee’ miner delivered via improved drive-by download toolkit Hidden Bee |
| 2018-03-31 ⋅ Youtube (hasherezade) ⋅ Deobfuscating TrickBot's strings with libPeConv TrickBot |
| 2018-03-19 ⋅ Unpacking Ursnif ISFB |
| 2018-03-01 ⋅ Malwarebytes ⋅ Blast from the past: stowaway Virut delivered with Chinese DDoS bot Virut |
| 2018-02-23 ⋅ Malwarebytes ⋅ Avzhan DDoS bot dropped by Chinese drive-by attack Avzhan |
| 2018-01-17 ⋅ Malwarebytes ⋅ A coin miner with a “Heaven’s Gate” Coinminer |
| 2018-01 ⋅ Malwarebytes ⋅ A coin miner with a “Heaven’s Gate” Coinminer |