Click here to download all references as Bib-File.
| 2022-12-06 ⋅ Lacework Labs ⋅ AndroxGh0st – the python malware exploiting your AWS keys AndroxGh0st |
| 2022-06-07 ⋅ Lacework Labs ⋅ Kinsing & Dark.IoT botnet among threats targeting CVE-2022-26134 Dark Kinsing |
| 2022-05-12 ⋅ Lacework Labs ⋅ Malware targeting latest F5 vulnerability Mirai |
| 2021-12-02 ⋅ lacework ⋅ ABC Botnet Attacks on the Rise Abcbot |
| 2021-10-25 ⋅ lacework ⋅ TeamTNT Continues to Target Exposed Docker API |
| 2021-10-13 ⋅ lacework ⋅ “Spytech Necro” – Keksec’s Latest Python Malware N3Cr0m0rPh |
| 2021-09-30 ⋅ lacework ⋅ Mirai goes Stealth – TLS & IoT Malware Mirai VPNFilter |
| 2021-09-23 ⋅ lacework ⋅ HCRootkit / Sutersu Linux Rootkit Analysis |
| 2021-09-09 ⋅ Lacework Labs ⋅ PYSA Ransomware Gang adds Linux Support Mespinoza |
| 2021-09-08 ⋅ lacework ⋅ Muhstik Takes Aim at Confluence CVE 2021-26084 Tsunami |
| 2021-06-21 ⋅ lacework ⋅ Threat Hunting SSH Keys – Bash Script Feature Pivoting |
| 2021-06-10 ⋅ lacework ⋅ Keksec & Tsunami-Ryuk N3Cr0m0rPh |
| 2021-05-25 ⋅ lacework ⋅ Taking TeamTNT’s Docker Images Offline |
| 2021-05-20 ⋅ lacework ⋅ 8220 Gangs Recent use of Custom Miner and Botnet |
| 2021-05-04 ⋅ Lacework Labs ⋅ Cpuminer & Friends |
| 2021-04-22 ⋅ Sysrv-Hello Expands Infrastructure Sysrv-hello |
| 2021-04-22 ⋅ lacework ⋅ Sysrv-Hello Expands Infrastructure Sysrv-hello |
| 2021-04-13 ⋅ lacework ⋅ Carbine Loader Cryptojacking Campaign |
| 2021-03-18 ⋅ lacework ⋅ The “Kek Security” Network Kaiten N3Cr0m0rPh |
| 2021-03-18 ⋅ Github (lacework) ⋅ DGA and decoder scripts for n3cr0morph IRC malware N3Cr0m0rPh |