/vx/APTs/2017/

115 directories 0 files
List Grid
Name
Size Modified
Up
2017.01.05 - Iranian Fileless Attack Infiltrates Israeli Organizations and Threat Agent Oilrig/
2017.01.09 - Second Wave of Shamoon 2 Attacks Identified/
2017.01.11 - APT28 - At the Center of the Storm/
2017.01.12 - The EyePyramid Attacks/
2017.01.15 - Bear Spotting Vol. 1 Russian Nation State Targeting of Government and Military Interests/
2017.01.18 - Operation Grand Mars/
2017.01.19 - Uri Attack and Kashmir Protest Themed Spear Phishing/
2017.01.25 - Detecting threat actors in recent German industrial attacks with Windows Defender ATP/
2017.01.30 - Downeks and Quasar RAT Used in Recent Targeted Attacks Against Governments/
2017.02.02 - ZerotT and PlugX/
2017.02.03 - Kingslayer - A Supply Chain Attack/
2017.02.03 - Several Polish Banks Hacked/
2017.02.10 - Cyber Attack Targeting Indian Navy/
2017.02.10 - Enhanced Analysis of GRIZZLY STEPPE Activity/
2017.02.12 - Lazarus & Watering-Hole Attacks/
2017.02.14 - Operation Kingphish - Uncovering a Campaign of Cyber Attacks against Civil Society in Qatar and Nepal/
2017.02.15 - Deep Dive On The DragonOK Rambo Backdoor/
2017.02.15 - Iranian PupyRAT Bites Middle Eastern Organizations/
2017.02.15 - Magic Hound Campaign Attacks Saudi Targets/
2017.02.15 - The Full Shamoon - How the Devastating Malware Was Inserted Into Networks/
2017.02.16 - Technical Analysis of Recent Attacks Against Polish Banks/
2017.02.17 - Chches Malware that Communicates with C&C Servers Using Cookie Headers/
2017.02.20 - Lazarus False Flag Malware/
2017.02.21 - Additional Insights on Shamoon2/
2017.02.22 - Spear Phishing Mongolian Government/
2017.02.23 - Dissecting the APT28 Mac OS X Payload/
2017.02.27 - The Gamaredon Group Toolset Evolution/
2017.02.28 - Atombombing - Brand New Code Injection for Windows/
2017.03.06 - Report - From Shamoon to StoneDrill/
2017.03.08 - Targeted Attack Campaigns With Multi-Variate Malware Observed in the Cloud/
2017.03.14 - Operation Electric Powder/
2017.03.15 - FHAPPI Campaign/
2017.04.05 - Targeted Attacks in the Middle East Using KASPERAGENT and MICROPSIA/
2017.04.06 - Opeartion Cloud Hopper/
2017.04.10 - Tools used by cyberespionage group linked to Vault 7/
2017.04.11 - Unraveling the Lamberts Toolkit/
2017.04.13 - Avast - TeamSpy - A deeper look into malware abusing TeamViewer/
2017.04.13 - Callisto Group/
2017.04.14 - D2T4 - Emmanuel Gadaix - A Surprise Encounter With a Telco Apt/
2017.04.27 - Iranian Fileless Cyberattack on Israel/
2017.05.03 - Kazuar - Multiplatform Espionage Backdoor with API Access/
2017.05.03 - KONNI - A Malware Under The Radar For Years/
2017.05.03 - Spy Tracker - The world's first UEFI motherboard BIOS Trojan analysis/
2017.05.14 - APT32 and the Threat to Global Corporations/
2017.05.24 - Operation Cobalt Kitty/
2017.05.30 - Lazarus Arisen/
2017.06.12 - CRASHOVERRIDE - Analysis of the Threat to Electric Grid Operations/
2017.06.12 - Industroyer - A new threat for industrial control systems/
2017.06.13 - HIDDEN COBRA – North Korea's DDoS Botnet Infrastructure/
2017.06.14 - New KASPERAGENT Malware Campaign/
2017.06.15 - North Korea Cyber Activity/
2017.06.18 - APT3 - The code evolution of Pirpi/
2017.06.19 - Shelltea & Poslurp Malware/
2017.06.22 - Following the Trail of BlackTech’s Cyber Espionage Campaigns/
2017.06.22 - The New and Improved macOS Backdoor from OceanLotus/
2017.06.26 - Threat Group 4127 Targets Google Accounts/
2017.06.30 - From Blackenergy to Expetr/
2017.06.30 - TeleBots are back - Supply-chain attacks against Ukraine/
2017.07.05 - Insider Information - An intrusion campaign targeting Chinese/
2017.07.06 - Operation Desert Eagle/
2017.07.10 - OSX Malware Linked to Operation Emmental Hijacks User Network Traffic/
2017.07.11 - Winnti Evolution Going Open Source/
2017.07.18 - Inexsmar - An Unusual DarkHotel Campaign/
2017.07.18 - Recent Winnti Infrastructure and Samples/
2017.07.24 - Tick Group Continues Attacks/
2017.07.27 - Chessmaster Cyber Espionage Campaign/
2017.07.27 - OilRig Uses ISMDoor Variant Possibly Linked to Greenbug Threat Group/
2017.07.27 - Operation Wilted Tulip/
2017.08.01 - Cobalt Group Strikes Back - an evolving multinational threat to finance/
2017.08.08 - APT Trends report Q2 2017/
2017.08.11 - APT28 Targets Hospitality Sector/
2017.08.15 - The Curious Case of Notepad and Chthonic - Exposing a Malicious Infrastructure/
2017.08.17 - Turla APT actor refreshes KopiLuwak JavaScript backdoor for use in G20-themed attack/
2017.08.18 - Russian Bank Offices Hit with Broad Phishing Wave/
2017.08.25 - Operation Rat Cook/
2017.08.30 - Gazing at Gazer - Turla’s new second stage backdoor/
2017.08.30 - WhiteBear/
2017.09.06 - Dragonfly - Western energy sector targeted by sophisticated attack group/
2017.09.06 - Dragonfly 2/
2017.09.12 - CVE-2017-8759/
2017.09.18 - CCleanup - A Vast Number of Machines at Risk/
2017.09.18 - Cloud Atlas - An undocumented Word feature abused by attackers/
2017.09.20 - CCleaner Command and Control Causes Concern/
2017.09.20 - Evidence Aurora Operation Still Active - Supply Chain Attack Through CCleaner/
2017.09.28 - Threat Actors Target Government of Belarus Using CMSTAR Trojan/
2017.10.10 - Post Soviet Bank Heists/
2017.10.12 - BRONZE BUTLER Targets Japanese Enterprises/
2017.10.16 - Blackoasis new targeted attacks leveraging zero-day exploit/
2017.10.16 - Leviathan - Espionage actor spearphishes maritime and defense targets/
2017.10.16 - Taiwan Heist - Lazarus Tools and Ransomware/
2017.10.19 - Operation PZCHAO/
2017.10.20 - BadPatch/
2017.10.24 - Iranian Threat Agent Greenbug Impersonates Israeli High-Tech and Cyber Security Companies/
2017.10.27 - Bahamaut Revisited/
2017.10.30 - Gaza Cybergang Using CVE 2017-0199/
2017.10.31 - Night of the Devil/
2017.11.02 - LeetMX - a Yearlong Cyber-Attack Campaign Against Targets in/
2017.11.02 - New Insights Into Energetic Bear'S Attacks on Turkish Critical Infrastructure/
2017.11.02 - Recent InPage Exploits Lead to Multiple Malware Families/
2017.11.02 - The KeyBoys are back in town/
2017.11.06 - New Strategy - Evolving Tools and Tactics/
2017.11.06 - OceanLotus Blossoms/
2017.11.07 - Sowbug - Cyber espionage group targets South American and Southeast Asian governments/
2017.11.07 - Threat Group APT28 Slips Office Malware into Doc Citing NYC Terror Attack/
2017.11.10 - New Malware With Ties to Sunorcal Discovered/
2017.11.14 - Muddying the Water Targeted Attacks/
2017.11.22 - A dive into MuddyWater APT targeting Middle-East/
2017.12.04 - The Shadows of Ghosts - Inside the Response of a Unique Carbanak Intrusion/
2017.12.05 - Charming Kitten/
2017.12.07 - Using CVE-2017-11882 - New Targeted Attack in the Middle East by APT34/
2017.12.11 - Money Taker/
2017.12.11 - Untangling the Patchwork Cyberespionage Group/
2017.12.14 - Attackers Deploy New ICS Attack Framework Triton/
2017.12.17 - Operation Dragonfly Analysis/
2017.12.19 - North Korea Bitten by Bitcoin Bug/