Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-10-27 ⋅ teiss ⋅ teiss Team
WhiteArmor ransomware group claims Hisense data theft, demands $5 million
2026-10-26 ⋅ The Hacker News ⋅ Ravie Lakshmanan
Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More
Jingle Thief
2026-10-15 ⋅ Google ⋅ Google Threat Intelligence Group, Mandiant
ARMORY CASTLE Exploits BeyondTrust
2026-09-18 ⋅ K7 Security ⋅ Ashwath M Ram
From Registry-Stored PowerShell to In-Memory Cryptocurrency Mining: A Multi-Stage Infection Chain
xmrig
2026-09-07 ⋅ Invoke RE ⋅ Josh Reynolds
Breaking Efimer’s Pyarmor Infection Chain with Frida
2026-07-23 ⋅ Proofpoint ⋅ Greg Lesnewich, Konstantin Klinger, Mark Kelly, Nick Attfield, Saher Naumaan
Operation RoundPress Rolls on with More Half-Click Webmail Zero-Days from TA458
SpyPress
2026-06-18 ⋅ Gen Digital ⋅ Vojtěch Krejsa
Inside Vidar’s ABE Bypass: From Memory Scanning to APC Injections
Vidar
2026-06-08 ⋅ StepSecurity ⋅ Rohan Prabhu
The Hades Campaign: Graph ML PyPI Packages Deploy Cross-Platform Memory Scrapers, AI Analyst Misdirection, and a Wiper Deterrent
Shai-Hulud
2026-05-22 ⋅ Fox-IT ⋅ Mick Koomen, Yun Zheng Hu
RemotePE: The Lazarus RAT that lives in memory
DPAPILoader RemotePE
2026-02-05 ⋅ flare ⋅ Assaf Morag
Threat Alert: TeamPCP, An Emerging Force in the Cloud Native and Ransomware Landscape
TeamPCP
2026-02-04 ⋅ Silent Push ⋅ João Batista, Silent Push
Silent Push Identifies More Than 10,000 Infected IPs as Part of SystemBC Botnet Malware Family
SystemBC SystemBC
2026-01-12 ⋅ Securonix ⋅ Aaron Beardslee, Akshay Gaikwad, Shikha Sangwan
SHADOW#REACTOR – Text-Only Staging, .NET Reactor, and In-Memory Remcos RAT Deployment
Remcos
2026-01-05 ⋅ HudsonRock ⋅ InfoStealers
Dozens of Global Companies Hacked via Cloud Credentials from Infostealer Infections & More at Risk
2025-12-05 ⋅ Sophos ⋅ Morgan Demboski
Sharpening the knife: GOLD BLADE’s strategic evolution
Earth Kapre
2025-11-19 ⋅ K7 Security ⋅ Praveen Babu
Masked in Memory: A Hidden .PYC fragment utilises cvtres.exe to communicate with C&C
2025-11-19 ⋅ John Basmayor, Nathaniel Morales, Nikita Kazymirskyi
SpiderLabs IDs New Banking Trojan Distributed Through WhatsApp
Eternidade Stealer
2025-11-02 ⋅ Symantec ⋅ Broadcom, Symantec
Multi-Stage In-Memory Agent Tesla Campaign Targets LATAM
Agent Tesla
2025-10-27 ⋅ Kaspersky ⋅ Boris Larin
Mem3nt0 mori – The Hacking Team is back!
Dante
2025-10-21 ⋅ Anomali ⋅ Anomali Cyber Watch
Anomali Cyber Watch: F5 Breach, Mysterious Elephant APT, Malicious MCP Servers, and More
MonsterV2 Mysterious Elephant
2025-10-13 ⋅ SpyCloud ⋅ SpyCloud Labs Research Team
More Than Meets the YY: Analyzing the YYlaiyu PhaaS Panel