Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-09-18 ⋅ K7 Security ⋅ Ashwath M Ram
From Registry-Stored PowerShell to In-Memory Cryptocurrency Mining: A Multi-Stage Infection Chain
xmrig
2026-09-07 ⋅ Invoke RE ⋅ Josh Reynolds
Breaking Efimer’s Pyarmor Infection Chain with Frida
2026-07-23 ⋅ Proofpoint ⋅ Greg Lesnewich, Konstantin Klinger, Mark Kelly, Nick Attfield, Saher Naumaan
Operation RoundPress Rolls on with More Half-Click Webmail Zero-Days from TA458
SpyPress
2026-06-18 ⋅ Gen Digital ⋅ Vojtěch Krejsa
Inside Vidar’s ABE Bypass: From Memory Scanning to APC Injections
Vidar
2026-06-08 ⋅ StepSecurity ⋅ Rohan Prabhu
The Hades Campaign: Graph ML PyPI Packages Deploy Cross-Platform Memory Scrapers, AI Analyst Misdirection, and a Wiper Deterrent
Shai-Hulud
2026-05-22 ⋅ Fox-IT ⋅ Mick Koomen, Yun Zheng Hu
RemotePE: The Lazarus RAT that lives in memory
DPAPILoader RemotePE
2026-02-05 ⋅ flare ⋅ Assaf Morag
Threat Alert: TeamPCP, An Emerging Force in the Cloud Native and Ransomware Landscape
TeamPCP
2026-02-04 ⋅ Silent Push ⋅ João Batista, Silent Push
Silent Push Identifies More Than 10,000 Infected IPs as Part of SystemBC Botnet Malware Family
SystemBC SystemBC
2026-01-12 ⋅ Securonix ⋅ Aaron Beardslee, Akshay Gaikwad, Shikha Sangwan
SHADOW#REACTOR – Text-Only Staging, .NET Reactor, and In-Memory Remcos RAT Deployment
Remcos
2026-01-05 ⋅ HudsonRock ⋅ InfoStealers
Dozens of Global Companies Hacked via Cloud Credentials from Infostealer Infections & More at Risk
2025-12-05 ⋅ Sophos ⋅ Morgan Demboski
Sharpening the knife: GOLD BLADE’s strategic evolution
Earth Kapre
2025-11-19 ⋅ John Basmayor, Nathaniel Morales, Nikita Kazymirskyi
SpiderLabs IDs New Banking Trojan Distributed Through WhatsApp
Eternidade Stealer
2025-11-02 ⋅ Symantec ⋅ Broadcom, Symantec
Multi-Stage In-Memory Agent Tesla Campaign Targets LATAM
Agent Tesla
2025-10-27 ⋅ Kaspersky ⋅ Boris Larin
Mem3nt0 mori – The Hacking Team is back!
Dante
2025-10-21 ⋅ Anomali ⋅ Anomali Cyber Watch
Anomali Cyber Watch: F5 Breach, Mysterious Elephant APT, Malicious MCP Servers, and More
MonsterV2 Mysterious Elephant
2025-10-13 ⋅ SpyCloud ⋅ SpyCloud Labs Research Team
More Than Meets the YY: Analyzing the YYlaiyu PhaaS Panel
2025-09-17 ⋅ Morado ⋅ Jayden Palacios
GLOBAL Ransomware - New Tactics Revealed
Global
2025-08-08 ⋅ abuse.ch ⋅ abuse.ch
MalwareBazaar | SHA256 6e1b152e34c76fab5414c4210a28bb5ca47b2155e6205e58e7df78ee9de6cb64 (MorpheusLoader)
Morpheus Loader
2025-07-19 ⋅ The Register ⋅ Jessica Lyons
Ex-IDF cyber chief on Iran, Scattered Spider, and why social engineering worries him more than 0-days
2025-07-01 ⋅ SpyCloud ⋅ SpyCloud Labs Research Team
State Secrets for Sale: More Leaks from the Chinese Hack-for-Hire Industry