|
Go up
|
— |
— |
|
|
2017-01-01 - Mac Malware of 2016/
|
— |
|
|
|
2017-01-03 - Technical details on the Fancy Bear Android malware (poprd30.apk)/
|
— |
|
|
|
2017-01-04 - Exposing an AV-Disabling Driver Just in Time for Lunch/
|
— |
|
|
|
2017-01-04 - FireCrypt Ransomware Comes With a DDoS Component/
|
— |
|
|
|
2017-01-04 - Technical analysis of CryptoMix-CryptFile2 ransomware/
|
— |
|
|
|
2017-01-05 - DragonOK Updates Toolset and Targets Multiple Geographic Regions/
|
— |
|
|
|
2017-01-05 - Iranian Fileless Attack Infiltrates Israeli Organizations and Threat Agent Oilrig/
|
— |
|
|
|
2017-01-05 - KillDisk now targeting Linux- Demands $250K ransom, but can’t decrypt/
|
— |
|
|
|
2017-01-05 - Taiwan ATM heist linked to European hacking spree- security firm/
|
— |
|
|
|
2017-01-06 - 2016 Updates to Shifu Banking Trojan/
|
— |
|
|
|
2017-01-09 - Second Wave of Shamoon 2 Attacks Identified/
|
— |
|
|
|
2017-01-10 - Client Maximus- New Remote Overlay Malware Highlights Rising Malcode Sophistication in Brazil/
|
— |
|
|
|
2017-01-10 - Ransomware Recap- Dec. 19 - Dec. 31, 2016/
|
— |
|
|
|
2017-01-11 - APT28 - At the Center of the Storm/
|
— |
|
|
|
2017-01-11 - Post-holiday spam campaign delivers Neutrino Bot/
|
— |
|
|
|
2017-01-12 - New Variant of Ploutus ATM Malware Observed in the Wild in Latin America/
|
— |
|
|
|
2017-01-12 - The EyePyramid Attacks/
|
— |
|
|
|
2017-01-12 - The “EyePyramid” attacks/
|
— |
|
|
|
2017-01-13 - Finfisher rootkit analysis/
|
— |
|
|
|
2017-01-15 - Bear Spotting Vol. 1 Russian Nation State Targeting of Government and Military Interests/
|
— |
|
|
|
2017-01-17 - Carbanak Group uses Google for malware command-and-control/
|
— |
|
|
|
2017-01-17 - EITEST RIG-V FROM 92.53.127.86 SENDS SPORA RANSOMWARE/
|
— |
|
|
|
2017-01-17 - New GhostAdmin Malware Used for Data Theft and Exfiltration/
|
— |
|
|
|
2017-01-18 - Finding the RAT’s Nest/
|
— |
|
|
|
2017-01-18 - Flashback Wednesday- Pakistani Brain/
|
— |
|
|
|
2017-01-18 - New Mac backdoor using antiquated code/
|
— |
|
|
|
2017-01-18 - Newly discovered Mac malware found in the wild also works well on Linux/
|
— |
|
|
|
2017-01-18 - Operation Grand Mars/
|
— |
|
|
|
2017-01-18 - Spora - the Shortcut Worm that is also a Ransomware/
|
— |
|
|
|
2017-01-18 - Ukraine's power outage was a cyber attack- Ukrenergo/
|
— |
|
|
|
2017-01-19 - New Satan Ransomware available through a Ransomware as a Service/
|
— |
|
|
|
2017-01-19 - Uri Attack and Kashmir Protest Themed Spear Phishing/
|
— |
|
|
|
2017-01-20 - Doctor Web anticipates increase in number of banking Trojan attacks on Android users/
|
— |
|
|
|
2017-01-21 - Sage 2.0 Ransomware/
|
— |
|
|
|
2017-01-22 - OurMine/
|
— |
|
|
|
2017-01-22 - Russian Hacker behind 'NeverQuest' Malware, Wanted by FBI, Is Arrested in Spain/
|
— |
|
|
|
2017-01-23 - Greenbug cyberespionage group targeting Middle East, possible links to Shamoon/
|
— |
|
|
|
2017-01-24 - Charger Malware Calls and Raises the Risk on Google Play/
|
— |
|
|
|
2017-01-25 - Detecting threat actors in recent German industrial attacks with Windows Defender ATP/
|
— |
|
|
|
2017-01-26 - Around the World With Zeus Sphinx- From Canada to Australia and Back/
|
— |
|
|
|
2017-01-26 - Deep Analysis of Android Rootnik Malware Using Advanced Anti-Debug and Anti-Hook, Part I- Debugging in The Scope of Native Layer/
|
— |
|
|
|
2017-01-26 - Deep Analysis of Android Rootnik Malware Using Advanced Anti-Debug and Anti-Hook, Part II- Analysis of The Scope of Java/
|
— |
|
|
|
2017-01-26 - Malware ChChes interacts with C & C server using Cookie header/
|
— |
|
|
|
2017-01-26 - Zbot with legitimate applications on board/
|
— |
|
|
|
2017-01-30 - Downeks and Quasar RAT Used in Recent Targeted Attacks Against Governments/
|
— |
|
|
|
2017-01-30 - EyePyramid- An Archaeological Journey/
|
— |
|
|
|
2017-01-30 - Nymaim revisited/
|
— |
|
|
|
2017-01-30 - Sage 2.0 comes with IP Generation Algorithm (IPGA)/
|
— |
|
|
|
2017-01-31 - Locky Bart ransomware and backend server analysis/
|
— |
|
|
|
2017-01-31 - Malicious Office files using fileless UAC bypass to drop KEYBASE malware/
|
— |
|
|
|
2017-02-02 - KopiLuwak- A New JavaScript Payload from Turla/
|
— |
|
|
|
2017-02-02 - Oops, they did it again- APT Targets Russia and Belarus with ZeroT and PlugX/
|
— |
|
|
|
2017-02-02 - Ransomware Recap- January 14 - 29, 2017/
|
— |
|
|
|
2017-02-02 - ZerotT and PlugX/
|
— |
|
|
|
2017-02-03 - Kingslayer - A Supply Chain Attack/
|
— |
|
|
|
2017-02-03 - Several Polish Banks Hacked/
|
— |
|
|
|
2017-02-03 - Zeus Panda Webinjects- a case study/
|
— |
|
|
|
2017-02-04 - Russen faalden bij hackpogingen ambtenaren op Nederlandse ministeries/
|
— |
|
|
|
2017-02-05 - Detailed threat analysis of Shamoon 2.0 Malware/
|
— |
|
|
|
2017-02-06 - iKittens- Iranian Actor Resurfaces with Malware for Mac (MacDownloader)/
|
— |
|
|
|
2017-02-06 - Polish Banks Infected with Malware Hosted on Their Own Government's Site/
|
— |
|
|
|
2017-02-06 - Threat Spotlight- Satan/
|
— |
|
|
|
2017-02-07 - Erebus Ransomware Utilizes a UAC Bypass and Request a 90 Ransom Payment/
|
— |
|
|
|
2017-02-09 - Shell Crew Variants Continue to Fly Under Big AV’s Radar/
|
— |
|
|
|
2017-02-10 - Cyber Attack Targeting Indian Navy/
|
— |
|
|
|
2017-02-10 - Enhanced Analysis of GRIZZLY STEPPE Activity/
|
— |
|
|
|
2017-02-10 - PowerSploit/
|
— |
|
|
|
2017-02-12 - Attackers target dozens of global banks with new malware/
|
— |
|
|
|
2017-02-12 - Attackers target dozens of global banks with new/
|
— |
|
|
|
2017-02-12 - Lazarus & Watering-hole attacks/
|
— |
|
|
|
2017-02-14 - New Android trojan mimics user clicks to download dangerous malware/
|
— |
|
|
|
2017-02-14 - Operation Kingphish - Uncovering a Campaign of Cyber Attacks against Civil Society in Qatar and Nepal/
|
— |
|
|
|
2017-02-14 - REMCOS- A New RAT In The Wild/
|
— |
|
|
|
2017-02-14 - Sage 2.0 analysis/
|
— |
|
|
|
2017-02-14 - XAgentOSX- Sofacy’s XAgent macOS Tool/
|
— |
|
|
|
2017-02-15 - Banking Trojans- Ursnif Global Distribution Networks Identified/
|
— |
|
|
|
2017-02-15 - Deep Dive On The DragonOK Rambo Backdoor/
|
— |
|
|
|
2017-02-15 - Inside OilRig -- Tracking Iran's Busiest Hacker Crew On Its Global Rampage/
|
— |
|
|
|
2017-02-15 - Iranian PupyRAT Bites Middle Eastern Organizations/
|
— |
|
|
|
2017-02-15 - Magic Hound Campaign Attacks Saudi Targets/
|
— |
|
|
|
2017-02-15 - The Full Shamoon - How the Devastating Malware Was Inserted Into Networks/
|
— |
|
|
|
2017-02-15 - The Rambo Backdoor/
|
— |
|
|
|
2017-02-16 - Breaking The Weakest Link Of The Strongest Chain/
|
— |
|
|
|
2017-02-16 - Demystifying targeted malware used against Polish banks/
|
— |
|
|
|
2017-02-16 - Iranian hackers behind the Magic Hound campaign linked to Shamoon/
|
— |
|
|
|
2017-02-16 - menuPass Returns with New Malware and New Attacks Against Japanese Academics and Organizations/
|
— |
|
|
|
2017-02-16 - Nefarious Macro Malware drops “Loki Bot” to steal sensitive information across GCC countries!/
|
— |
|
|
|
2017-02-16 - reGeorg/
|
— |
|
|
|
2017-02-16 - Technical Analysis of Recent Attacks Against Polish Banks/
|
— |
|
|
|
2017-02-17 - Chches Malware that Communicates with C&C Servers Using Cookie Headers/
|
— |
|
|
|
2017-02-18 - Hackers Selling Undetectable Proton Malware for macOS in 40 BTC/
|
— |
|
|
|
2017-02-20 - Lazarus False Flag Malware/
|
— |
|
|
|
2017-02-20 - Lazarus’ False Flag Malware/
|
— |
|
|
|
2017-02-20 - Part I. Russian APT - APT28 collection of samples including OSX XAgent/
|
— |
|
|
|
2017-02-21 - Additional Insights on Shamoon2/
|
— |
|
|
|
2017-02-21 - New(ish) Mirai Spreader Poses New Risks/
|
— |
|
|
|
2017-02-22 - Bella- A pure python, post-exploitation, data mining tool and remote administration tool for macOS/
|
— |
|
|
|
2017-02-22 - Dissecting the Qadars Banking Trojan/
|
— |
|
|
|
2017-02-22 - New crypto‑ransomware hits macOS/
|
— |
|
|
|
2017-02-22 - Spear Phishing Mongolian Government/
|
— |
|
|
|
2017-02-23 - Dissecting the APT28 Mac OS X Payload/
|
— |
|
|
|
2017-02-23 - Korean MalDoc Drops Evil New Years Presents/
|
— |
|
|
|
2017-02-23 - Released Android malware source code used to run a banking botnet/
|
— |
|
|
|
2017-02-24 - Hunting Retefe with Splunk - some interesting points/
|
— |
|
|
|
2017-02-24 - Necurs Proxy Module With DDOS Features/
|
— |
|
|
|
2017-02-25 - Silent RIFLE Response Against Advanced Threat/
|
— |
|
|
|
2017-02-26 - TreasureHunter - A POS Malware Case Study/
|
— |
|
|
|
2017-02-27 - New Neutrino Bot comes in a protective loader/
|
— |
|
|
|
2017-02-27 - Shamoon- Multi-staged destructive attacks limited to specific targets/
|
— |
|
|
|
2017-02-27 - Spambot safari #2 - Online Mail System/
|
— |
|
|
|
2017-02-27 - Spambot safari 2 - Online Mail System/
|
— |
|
|
|
2017-02-27 - The Deception Project- A New Japanese-Centric Threat/
|
— |
|
|
|
2017-02-27 - The Gamaredon Group Toolset Evolution/
|
— |
|
|
|
2017-02-28 - Atombombing - Brand New Code Injection for Windows/
|
— |
|
|
|
2017-02-28 - Dridex’s Cold War- Enter AtomBombing/
|
— |
|
|
|
2017-03-01 - GootKit Developers Dress It Up With Web Traffic Proxy/
|
— |
|
|
|
2017-03-01 - How Does the Trickbot Malware Work-/
|
— |
|
|
|
2017-03-01 - Poorly coded Lamdelin Lockscreen Ransomware lets you in using Alt+F4/
|
— |
|
|
|
2017-03-01 - Poorly coded Lamdelin Lockscreen Ransomware lets you in using AltF4/
|
— |
|
|
|
2017-03-01 - Ransomware for Dummies- Anyone Can Do It/
|
— |
|
|
|
2017-03-01 - Threat Spotlight- Flokibot PoS Malware/
|
— |
|
|
|
2017-03-02 - Covert Channels and Poor Decisions- The Tale of DNSMessenger/
|
— |
|
|
|
2017-03-02 - Update on the Fancy Bear Android malware (poprd30.apk)/
|
— |
|
|
|
2017-03-06 - 0-Day- Dahua backdoor Generation 2 and 3/
|
— |
|
|
|
2017-03-06 - Report - From Shamoon to StoneDrill/
|
— |
|
|
|
2017-03-07 - Vault 7- CIA Hacking Tools Revealed/
|
— |
|
|
|
2017-03-08 - RawPOS Malware Rides Again/
|
— |
|
|
|
2017-03-08 - Targeted Attack Campaigns With Multi-Variate Malware Observed in the Cloud/
|
— |
|
|
|
2017-03-09 - Spora Ransomware- Understanding the HTA Infection Vector/
|
— |
|
|
|
2017-03-10 - Explained- Spora ransomware/
|
— |
|
|
|
2017-03-10 - Preinstalled Malware Targeting Mobile Users/
|
— |
|
|
|
2017-03-11 - Wikileaks Vault7 JQJSNICKER code leak/
|
— |
|
|
|
2017-03-13 - Detecting and eliminating Chamois, a fraud botnet on Android/
|
— |
|
|
|
2017-03-13 - Moving Target Defense Blog/
|
— |
|
|
|
2017-03-13 - Zeus Panda Webinjects- Don’t trust your eyes/
|
— |
|
|
|
2017-03-14 - Analyzing and Deobfuscating FlokiBot Banking Trojan/
|
— |
|
|
|
2017-03-14 - Operation Electric Powder/
|
— |
|
|
|
2017-03-14 - PetrWrap- the new Petya-based ransomware used in targeted attacks/
|
— |
|
|
|
2017-03-15 - FHAPPI Campaign/
|
— |
|
|
|
2017-03-15 - MajikPOS Combines PoS Malware and RATs to Pull Off its Malicious Tricks/
|
— |
|
|
|
2017-03-15 - NexusLogger- A New Cloud-based Keylogger Enters the Market/
|
— |
|
|
|
2017-03-15 - Revenge Ransomware a CryptoMix Variant Being Distributed by RIG Exploit Kit/
|
— |
|
|
|
2017-03-15 - Teardown of a Recent Variant of Android-Ztorg (Part 1)/
|
— |
|
|
|
2017-03-15 - Teardown of Android-Ztorg (Part 2)/
|
— |
|
|
|
2017-03-15 - Vaccinating against Spora ransomware- a proof-of-concept tool by Minerva/
|
— |
|
|
|
2017-03-16 - Fileless Malware Campaigns Tied to Same Attacker/
|
— |
|
|
|
2017-03-17 - Diamond Fox – part 1- introduction and unpacking/
|
— |
|
|
|
2017-03-17 - Grabbot is Back to Nab Your Data/
|
— |
|
|
|
2017-03-20 - Necurs Diversifies Its Portfolio/
|
— |
|
|
|
2017-03-21 - Hunt Case Study- Hunting Campaign Indicators on Privacy Protected Attack Infrastructure/
|
— |
|
|
|
2017-03-21 - Inside the Hunt for Russia’s Most Notorious Hacker/
|
— |
|
|
|
2017-03-22 - El Machete's Malware Attacks Cut Through LATAM/
|
— |
|
|
|
2017-03-22 - Winnti Abuses GitHub for C&C Communications/
|
— |
|
|
|
2017-03-23 - Tales from the Trenches- Loki Bot Malware/
|
— |
|
|
|
2017-03-24 - Terror EK via Malvertising delivers Tofsee Spambot/
|
— |
|
|
|
2017-03-26 - Shamoon 2- Delivering Disttrack/
|
— |
|
|
|
2017-03-27 - Detecting and mitigating elevation-of-privilege exploit for CVE-2017-0005/
|
— |
|
|
|
2017-03-28 - Cerber Starts Evading Machine Learning/
|
— |
|
|
|
2017-03-28 - Dimnie- Hiding in Plain Sight/
|
— |
|
|
|
2017-03-28 - Russian Citizen Pleads Guilty for Involvement in Global Botnet Conspiracy/
|
— |
|
|
|
2017-03-28 - The NukeBot Trojan, a Bruised Ego and a Surprising Source Code Leak/
|
— |
|
|
|
2017-03-28 - Threat Spotlight- GhostAdmin Malware/
|
— |
|
|
|
2017-03-29 - Explained- Sage ransomware/
|
— |
|
|
|
2017-03-29 - New Mirai Variant Launches 54 Hour DDoS Attack against US College/
|
— |
|
|
|
2017-03-29 - Trojanized Adobe installer used to install DragonOK’s new custom backdoor/
|
— |
|
|
|
2017-03-30 - Carbon Paper- Peering into Turla’s second stage backdoor/
|
— |
|
|
|
2017-03-30 - EquationDrug rootkit analysis (mstcp32.sys)/
|
— |
|
|
|
2017-03-30 - Hi-Tech Crime Trends 2016/
|
— |
|
|
|
2017-03-30 - Trochilus and New MoonWind RATs Used In Attack Against Thai Organizations/
|
— |
|
|
|
2017-03-31 - Threat Round-up for Mar 24 - Mar 31/
|
— |
|
|
|
2017-04-03 - DHL Invoice Malspam-Photo Malspam/
|
— |
|
|
|
2017-04-03 - Dissecting One of APT29’s Fileless WMI and PowerShell Backdoors (POSHSPY)/
|
— |
|
|
|
2017-04-03 - IAAF Says It Has Been Hacked, Athlete Medical Info Accessed/
|
— |
|
|
|
2017-04-03 - Introducing ROKRAT/
|
— |
|
|
|
2017-04-03 - Lazarus APT Spinoff Linked to Banking Hacks/
|
— |
|
|
|
2017-04-03 - Lazarus under the Hood/
|
— |
|
|
|
2017-04-03 - Moonlight Maze- Lessons from history/
|
— |
|
|
|
2017-04-03 - RedLeaves - Malware Based on Open Source RAT/
|
— |
|
|
|
2017-04-03 - Shadow Server Domains Leading to RIG Exploit Kit Dropping Smoke Loader. Downloaded Neutrino Bot (AKA Kasidet)/
|
— |
|
|
|
2017-04-03 - Shadow Server Domains Leading to RIG Exploit Kit Dropping Smoke Loader/
|
— |
|
|
|
2017-04-03 - オープンソースのRATを改良したマルウエアRedLeaves/
|
— |
|
|
|
2017-04-04 - ATMitch- remote administration of ATMs/
|
— |
|
|
|
2017-04-04 - Chasing Lazarus- A Hunt for the Infamous Hackers to Prevent Large Bank Robberies/
|
— |
|
|
|
2017-04-04 - POSHSPY backdoor code/
|
— |
|
|
|
2017-04-05 - In-Depth Look at New Variant of MONSOON APT Backdoor, Part 1/
|
— |
|
|
|
2017-04-05 - In-Depth Look at New Variant of MONSOON APT Backdoor, Part 2/
|
— |
|
|
|
2017-04-05 - Targeted Attacks in the Middle East Using KASPERAGENT and MICROPSIA/
|
— |
|
|
|
2017-04-05 - ”BrickerBot” Results In PDoS Attack/
|
— |
|
|
|
2017-04-06 - APT10 (MenuPass Group)- New Tools, Global Campaign Latest Manifestation of Longstanding Threat/
|
— |
|
|
|
2017-04-06 - Chinese Nation-State Hackers Target U.S in Operation TradeSecret/
|
— |
|
|
|
2017-04-06 - Diamond Fox – part 2- let’s dive in the code/
|
— |
|
|
|
2017-04-06 - New IoT-Linux Malware Targets DVRs, Forms Botnet/
|
— |
|
|
|
2017-04-06 - Opeartion Cloud Hopper/
|
— |
|
|
|
2017-04-06 - Sathurbot- Distributed WordPress password attack/
|
— |
|
|
|
2017-04-06 - Self-Proclaimed ‘Nuclear Bot’ Author Weighs U.S. Job Offer/
|
— |
|
|
|
2017-04-07 - The Blockbuster Sequel/
|
— |
|
|
|
2017-04-10 - DOJ moves to topple Kelihos, one of the world's largest botnets/
|
— |
|
|
|
2017-04-10 - Justice Department Announces Actions to Dismantle Kelihos Botnet/
|
— |
|
|
|
2017-04-10 - Longhorn Cyber-Espionage Group Is Actually the CIA/
|
— |
|
|
|
2017-04-10 - Longhorn- Tools used by cyberespionage group linked to Vault 7/
|
— |
|
|
|
2017-04-10 - ShadowBrokers Dump More Equation Group Hacks, Auction File Password/
|
— |
|
|
|
2017-04-10 - Tools used by cyberespionage group linked to Vault 7/
|
— |
|
|
|
2017-04-11 - Unraveling the Lamberts Toolkit/
|
— |
|
|
|
2017-04-12 - ICS Alert (ICS-ALERT-17-102-01A)/
|
— |
|
|
|
2017-04-13 - A deeper look into malware abusing TeamViewer/
|
— |
|
|
|
2017-04-13 - Avast - TeamSpy - A deeper look into malware abusing TeamViewer/
|
— |
|
|
|
2017-04-13 - Callisto Group/
|
— |
|
|
|
2017-04-13 - Decrypting Bankbot communications/
|
— |
|
|
|
2017-04-13 - Inside the Takedown of ZOMBIE SPIDER and the Kelihos Botnet/
|
— |
|
|
|
2017-04-13 - Stuxnet drivers- detailed analysis/
|
— |
|
|
|
2017-04-14 - D2T4 - Emmanuel Gadaix - A Surprise Encounter With a Telco Apt/
|
— |
|
|
|
2017-04-15 - Hajime - A Decentralized Modular Worm - Followup/
|
— |
|
|
|
2017-04-16 - Morphisec Discovers New Fileless Attack Framework/
|
— |
|
|
|
2017-04-17 - Azazel/
|
— |
|
|
|
2017-04-17 - New NSA leak may expose its bank spying, Windows exploits/
|
— |
|
|
|
2017-04-17 - Python script for decoding DOUBLEPULSAR/
|
— |
|
|
|
2017-04-17 - Remove Search.searchetan.com Chrome New Tab Page/
|
— |
|
|
|
2017-04-18 - Coming Soon…/
|
— |
|
|
|
2017-04-18 - Github repository for trochilus RAT/
|
— |
|
|
|
2017-04-18 - Hajime worm battles Mirai for control of the Internet of Things/
|
— |
|
|
|
2017-04-18 - Shadow Brokers leaks show U.S. spies successfully hacked Russian, Iranian targets/
|
— |
|
|
|
2017-04-19 - Of Pigs and Malware- Examining a Possible Member of the Winnti Group/
|
— |
|
|
|
2017-04-19 - RawPOS- New Behavior Risks Identity Theft/
|
— |
|
|
|
2017-04-20 - Binary Options malvertising campaign drops ISFB banking Trojan/
|
— |
|
|
|
2017-04-20 - Cardinal RAT Active for Over Two Years/
|
— |
|
|
|
2017-04-21 - BrickerBot Author Claims He Bricked Two Million Devices/
|
— |
|
|
|
2017-04-21 - China Hacked South Korea Over Missile Defense, U.S. Firm Says/
|
— |
|
|
|
2017-04-21 - Elusive Moker Trojan is back/
|
— |
|
|
|
2017-04-21 - Researchers claim China trying to hack South Korea missile defense efforts/
|
— |
|
|
|
2017-04-23 - Let's Talk About FlexiSpy/
|
— |
|
|
|
2017-04-24 - FIN7 Evolution and the Phishing LNK/
|
— |
|
|
|
2017-04-24 - XPan, I am your father/
|
— |
|
|
|
2017-04-25 - 2017-04-25 - -GOOD MAN- CAMPAIGN RIG EK SENDS LATENTBOT/
|
— |
|
|
|
2017-04-25 - Linux Shishiga malware using LUA scripts/
|
— |
|
|
|
2017-04-25 - Philadelphia Ransomware Brings Customization to Commodity Malware/
|
— |
|
|
|
2017-04-25 - ShadowWali- New variant of the xxmm family of backdoors/
|
— |
|
|
|
2017-04-26 - BankBot, the Prequel/
|
— |
|
|
|
2017-04-26 - Hajime – Friend or Foe-/
|
— |
|
|
|
2017-04-26 - Who is behind this Chinese espionage group stealing our intellectual property-/
|
— |
|
|
|
2017-04-27 - Alert (TA17-117A)- Intrusions Affecting Multiple Victims Across Multiple Sectors/
|
— |
|
|
|
2017-04-27 - APT Targets Financial Analysts with CVE-2017-0199/
|
— |
|
|
|
2017-04-27 - Iranian Fileless Attack Infiltrates Israeli Organizations/
|
— |
|
|
|
2017-04-27 - Iranian Fileless Cyberattack on Israel/
|
— |
|
|
|
2017-04-27 - OilRig Actors Provide a Glimpse into Development and Testing Efforts/
|
— |
|
|
|
2017-04-28 - KeyPlexer/
|
— |
|
|
|
2017-04-28 - Use of DNS Tunneling for C&C Communications/
|
— |
|
|
|
2017-05-01 - Another OSX.Dok dropper found installing new backdoor/
|
— |
|
|
|
2017-05-01 - Crouching Yeti (Energetic Bear) Malware/
|
— |
|
|
|
2017-05-02 - Covert Channels and Poor Decisions- The Tale of DNSMessenger/
|
— |
|
|
|
2017-05-02 - HackSpy-Trojan-Exploit/
|
— |
|
|
|
2017-05-02 - Philadelphia Ransomware/
|
— |
|
|
|
2017-05-02 - Shamoon Collaborator Greenbug Adopts New Communication Tool/
|
— |
|
|
|
2017-05-02 - Targeted attack against the Ukrainian military/
|
— |
|
|
|
2017-05-02 - Who is Mr Wu-/
|
— |
|
|
|
2017-05-03 - Deep Analysis of New Emotet Variant - Part 1/
|
— |
|
|
|
2017-05-03 - Hunting pack use case- RedLeaves malware/
|
— |
|
|
|
2017-05-03 - Kazuar - Multiplatform Espionage Backdoor with API Access/
|
— |
|
|
|
2017-05-03 - Kazuar- Multiplatform Espionage Backdoor with API Access/
|
— |
|
|
|
2017-05-03 - KONNI - A Malware Under The Radar For Years/
|
— |
|
|
|
2017-05-03 - KONNI- A Malware Under The Radar For Years/
|
— |
|
|
|
2017-05-03 - Snake- Coming soon in Mac OS X flavour/
|
— |
|
|
|
2017-05-03 - Spy Tracker - The world's first UEFI motherboard BIOS Trojan analysis/
|
— |
|
|
|
2017-05-03 - To SDB, Or Not To SDB- FIN7 Leveraging Shim Databases for Persistence/
|
— |
|
|
|
2017-05-04 - Behind The Mystery Of Russia's 'Dyre' Hackers Who Stole Millions From American Business/
|
— |
|
|
|
2017-05-04 - Blackmoon Rising- Banking Trojan Back with New Framework/
|
— |
|
|
|
2017-05-04 - OSX Malware is Catching Up, and it wants to Read Your HTTPS Traffic/
|
— |
|
|
|
2017-05-05 - Inside Netrepser – a JavaScript-based Targeted Attack/
|
— |
|
|
|
2017-05-05 - loki-parse/
|
— |
|
|
|
2017-05-05 - Snake malware ported from Windows to Mac/
|
— |
|
|
|
2017-05-05 - Who is Mr Dong-/
|
— |
|
|
|
2017-05-07 - Loki-Bot- Come out, come out, wherever you are!/
|
— |
|
|
|
2017-05-08 - HandBrake for Mac Compromised with Proton Spyware/
|
— |
|
|
|
2017-05-09 - APT3 is Boyusec, a Chinese Intelligence Contractor/
|
— |
|
|
|
2017-05-09 - Deep Analysis of New Emotet Variant – Part 2/
|
— |
|
|
|
2017-05-09 - Persirai- New Internet of Things (IoT) Botnet Targets IP Cameras/
|
— |
|
|
|
2017-05-09 - RIG EK SENDS BUNITU TROJAN/
|
— |
|
|
|
2017-05-09 - Sednit adds two zero‑day exploits using ‘Trump’s attack on Syria’ as a decoy/
|
— |
|
|
|
2017-05-09 - Tracking Android BankBot/
|
— |
|
|
|
2017-05-10 - DiamondFox modular malware – a one-stop shop/
|
— |
|
|
|
2017-05-10 - Introducing Loda Malware/
|
— |
|
|
|
2017-05-10 - OSX-Proton.B/
|
— |
|
|
|
2017-05-10 - Proton.B- What this Mac malware actually does/
|
— |
|
|
|
2017-05-11 - Cyber Attack Impersonating Identity of Indian Think Tank to Target Central Bureau of Investigation CBI and Possibly Indian Army Officials/
|
— |
|
|
|
2017-05-11 - Jaff - New Ransomware From the Actors Behind the Distribution of Dridex, Locky, and Bart/
|
— |
|
|
|
2017-05-11 - Mac.BackDoor.Systemd.1/
|
— |
|
|
|
2017-05-12 - Global WannaCry ransomware outbreak uses known NSA exploits/
|
— |
|
|
|
2017-05-12 - U.K. Hospitals Hit in Widespread Ransomware Attack/
|
— |
|
|
|
2017-05-12 - WannaCry ransomware that infected Telefonica and NHS hospitals is spreading aggressively, with over 50,000 attacks so far today/
|
— |
|
|
|
2017-05-12 - WannaCry ransomware used in widespread attacks all over the world/
|
— |
|
|
|
2017-05-12 - WannaCrypt ransomware worm targets out-of-date systems/
|
— |
|
|
|
2017-05-12 - Warning- Massive -WannaCry- Ransomware campaign launched/
|
— |
|
|
|
2017-05-12 - ‘WCry’ Virus Reportedly Infects Russian Interior Ministry's Computer Network/
|
— |
|
|
|
2017-05-13 - How to Accidentally Stop a Global Cyber Attacks/
|
— |
|
|
|
2017-05-14 - APT32 and the Threat to Global Corporations/
|
— |
|
|
|
2017-05-14 - Cyber Espionage is Alive and Well- APT32 and the Threat to Global Corporations/
|
— |
|
|
|
2017-05-15 - Adylkuzz Cryptocurrency Mining Malware Spreading for Weeks Via EternalBlue-DoublePulsar/
|
— |
|
|
|
2017-05-15 - Evolution of the GOLD EVERGREEN Threat Group/
|
— |
|
|
|
2017-05-16 - 2017-05-16 - MORE EXAMPLES OF MALSPAM PUSHING JAFF RANSOMWARE/
|
— |
|
|
|
2017-05-16 - DocuSign Phishing Campaign Includes Hancitor Downloader/
|
— |
|
|
|
2017-05-16 - WannaCry - WannaDecrypt0r NSA-Cyberweapon-Powered Ransomware Worm/
|
— |
|
|
|
2017-05-16 - Wannacryptor Ransomworm/
|
— |
|
|
|
2017-05-17 - New Loki Variant Being Spread via PDF File/
|
— |
|
|
|
2017-05-18 - UIWIX – Evasive Ransomware Exploiting ETERNALBLUE/
|
— |
|
|
|
2017-05-19 - How did the WannaCry ransomworm spread-/
|
— |
|
|
|
2017-05-22 - WannaCry- Ransomware attacks show strong links to Lazarus group/
|
— |
|
|
|
2017-05-23 - Modified Zyklon and plugins from India/
|
— |
|
|
|
2017-05-23 - Ocean Lotus Group-APT 32 identified as Vietnamese APT group/
|
— |
|
|
|
2017-05-23 - Quakbot/
|
— |
|
|
|
2017-05-23 - XData ransomware making rounds amid global WannaCryptor scare/
|
— |
|
|
|
2017-05-24 - Analysis of Emotet v4/
|
— |
|
|
|
2017-05-24 - APT32- New Cyber Espionage Group/
|
— |
|
|
|
2017-05-24 - Operation Cobalt Kitty- A large-scale APT in Asia carried out by the OceanLotus Group/
|
— |
|
|
|
2017-05-24 - Operation Cobalt Kitty/
|
— |
|
|
|
2017-05-25 - Dridex- A History of Evolution/
|
— |
|
|
|
2017-05-25 - EternalRocks (a.k.a. MicroBotMassiveNet)/
|
— |
|
|
|
2017-05-25 - Lazarus- History of mysterious group behind infamous cyber attacks/
|
— |
|
|
|
2017-05-25 - Linguistic Analysis of WannaCry Ransomware Messages Suggests Chinese-Speaking Authors/
|
— |
|
|
|
2017-05-26 - TrickBot’s bag of tricks/
|
— |
|
|
|
2017-05-27 - From PDNS- Another fix length of 7, a-z. tlds- [ru, com]/
|
— |
|
|
|
2017-05-29 - Gozi Tree/
|
— |
|
|
|
2017-05-30 - Bankbot on Google Play/
|
— |
|
|
|
2017-05-30 - Lazarus Arisen/
|
— |
|
|
|
2017-05-30 - Mole ransomware- analysis and decryptor/
|
— |
|
|
|
2017-05-31 - APT16/
|
— |
|
|
|
2017-05-31 - APT17/
|
— |
|
|
|
2017-05-31 - APT18/
|
— |
|
|
|
2017-05-31 - APT29/
|
— |
|
|
|
2017-05-31 - Necurs Recurs/
|
— |
|
|
|
2017-05-31 - Operation Bachosens- A detailed look into a long-running cyber crime campaign/
|
— |
|
|
|
2017-05-31 - Writing PCRE's for applied passive network defense [Emotet]/
|
— |
|
|
|
2017-06-01 - FIREBALL – The Chinese Malware of 250 Million Computers Infected/
|
— |
|
|
|
2017-06-01 - Microsoft Word Intruder Integrates CVE-2017-0199, Utilized by Cobalt Group to Target Financial Institutions/
|
— |
|
|
|
2017-06-02 - QakBot Banking Trojan Causes Massive Active Directory Lockouts/
|
— |
|
|
|
2017-06-05 - A JavaScript and VBScript Based Empire Launcher - by Cn33liz 2017/
|
— |
|
|
|
2017-06-05 - HandBrake Hacked! - osx-proton (re)appears/
|
— |
|
|
|
2017-06-05 - Set up your own malware analysis lab with VirtualBox, INetSim and Burp/
|
— |
|
|
|
2017-06-06 - Privileges and Credentials- Phished at the Request of Counsel/
|
— |
|
|
|
2017-06-06 - Turla’s watering hole campaign- An updated Firefox extension abusing Instagram/
|
— |
|
|
|
2017-06-07 - PLATINUM continues to evolve, find ways to maintain invisibility/
|
— |
|
|
|
2017-06-07 - Rig EK via Fake EVE Online website drops Bunitu/
|
— |
|
|
|
2017-06-07 - Russian malware link hid in a comment on Britney Spears' Instagram/
|
— |
|
|
|
2017-06-08 - Dvmap- the first Android malware with code injection/
|
— |
|
|
|
2017-06-08 - LatentBot piece by piece/
|
— |
|
|
|
2017-06-08 - THE SEVEN YEAR ITCH/
|
— |
|
|
|
2017-06-09 - Another Banker Enters the Matrix/
|
— |
|
|
|
2017-06-09 - FIN7 Takes Another Bite at the Restaurant Industry/
|
— |
|
|
|
2017-06-09 - MacRansom- Offered as Ransomware as a Service/
|
— |
|
|
|
2017-06-09 - MacSpy- OS X Mac RAT as a Service/
|
— |
|
|
|
2017-06-12 - 2017-06-12 - LOKI BOT MALSPAM - SUBJECT- RE- PURCHASE ORDER 457211/
|
— |
|
|
|
2017-06-12 - Alert (TA17-163A)/
|
— |
|
|
|
2017-06-12 - Bahamut, Pursuing a Cyber Espionage Actor in the Middle East/
|
— |
|
|
|
2017-06-12 - Behind the CARBANAK Backdoor/
|
— |
|
|
|
2017-06-12 - CRASHOVERRIDE - Analysis of the Threat to Electric Grid Operations/
|
— |
|
|
|
2017-06-12 - Industroyer - A new threat for industrial control systems/
|
— |
|
|
|
2017-06-12 - Industroyer- Biggest threat to industrial control systems since Stuxnet/
|
— |
|
|
|
2017-06-12 - Open Source Malware - Sharing is caring-/
|
— |
|
|
|
2017-06-12 - OSX-MacRansom/
|
— |
|
|
|
2017-06-13 - HIDDEN COBRA – North Korea's DDoS Botnet Infrastructure/
|
— |
|
|
|
2017-06-13 - HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure/
|
— |
|
|
|
2017-06-13 - Threat Spotlight- Breaking Down FF-Rat Malware/
|
— |
|
|
|
2017-06-14 - New KASPERAGENT Malware Campaign/
|
— |
|
|
|
2017-06-14 - Phantom of the Opaera- New KASPERAGENT Malware Campaign/
|
— |
|
|
|
2017-06-15 - DUBrute/
|
— |
|
|
|
2017-06-15 - North Korea Cyber Activity/
|
— |
|
|
|
2017-06-15 - Trickbot Expands Global Targets Beyond Banks and Payment Processors to CRMs/
|
— |
|
|
|
2017-06-15 - Zeus Sphinx Pushes Empty Configuration Files — What Has the Sphinx Got Cooking-/
|
— |
|
|
|
2017-06-18 - APT3 - The code evolution of Pirpi/
|
— |
|
|
|
2017-06-19 - Delphi Used To Score Against Palestine/
|
— |
|
|
|
2017-06-19 - Erebus Resurfaces as Linux Ransomware/
|
— |
|
|
|
2017-06-19 - Shelltea & Poslurp Malware/
|
— |
|
|
|
2017-06-20 - AdGholas Malvertising Campaign Using Astrum EK to Deliver Mole Ransomware/
|
— |
|
|
|
2017-06-20 - Ztorg- from rooting to SMS/
|
— |
|
|
|
2017-06-21 - Player 1 Limps Back Into the Ring - Hello again, Locky!/
|
— |
|
|
|
2017-06-22 - Following the Trail of BlackTech’s Cyber Espionage Campaigns/
|
— |
|
|
|
2017-06-22 - Locky Ransomware Returns, but Targets Only Windows XP & Vista/
|
— |
|
|
|
2017-06-22 - Loki-Bot- InformationStealer, Keylogger, &More!/
|
— |
|
|
|
2017-06-22 - The New and Improved macOS Backdoor from OceanLotus/
|
— |
|
|
|
2017-06-22 - The Trail of BlackTech’s Cyber Espionage Campaigns/
|
— |
|
|
|
2017-06-26 - How Spora ransomware tries to fool antivirus/
|
— |
|
|
|
2017-06-26 - Threat Group 4127 Targets Google Accounts/
|
— |
|
|
|
2017-06-27 - BRONZE UNION Cyberespionage Persists Despite Disclosures/
|
— |
|
|
|
2017-06-27 - Checking out the new Petya variant/
|
— |
|
|
|
2017-06-27 - Neutrino modification for POS-terminals/
|
— |
|
|
|
2017-06-27 - New Ransomware Variant -Nyetya- Compromises Systems Worldwide/
|
— |
|
|
|
2017-06-27 - New ransomware, old techniques- Petya adds worm capabilities/
|
— |
|
|
|
2017-06-27 - New WannaCryptor‑like ransomware attack hits globally- All you need to know/
|
— |
|
|
|
2017-06-27 - Paranoid PlugX/
|
— |
|
|
|
2017-06-27 - Schroedinger’s Pet(ya)/
|
— |
|
|
|
2017-06-28 - CrowdStrike Protects Against NotPetya Attack/
|
— |
|
|
|
2017-06-28 - ExPetr-Petya-NotPetya is a Wiper, Not Ransomware/
|
— |
|
|
|
2017-06-28 - In-Depth Analysis of A New Variant of .NET Malware AgentTesla/
|
— |
|
|
|
2017-06-28 - Why NotPetya Kept Me Awake (& You Should Worry Too)/
|
— |
|
|
|
2017-06-28 - 日本企業を狙う高度なサイバー攻撃の全貌 – BRONZE BUTLER/
|
— |
|
|
|
2017-06-29 - EternalPetya and the lost Salsa20 key/
|
— |
|
|
|
2017-06-29 - Information Stealer Found Hitting Israeli Hospitals/
|
— |
|
|
|
2017-06-29 - NonPetya- no evidence it was a -smokescreen-/
|
— |
|
|
|
2017-06-29 - Ransomware Attacks Continue in Ukraine with Mysterious WannaCry Clone/
|
— |
|
|
|
2017-06-29 - Windows 10 platform resilience against the Petya ransomware attack/
|
— |
|
|
|
2017-06-30 - EternalPetya – yet another stolen piece in the package-/
|
— |
|
|
|
2017-06-30 - From BlackEnergy to ExPetr/
|
— |
|
|
|
2017-06-30 - TeleBots are back - Supply-chain attacks against Ukraine/
|
— |
|
|
|
2017-06-30 - TeleBots are back- Supply‑chain attacks against Ukraine/
|
— |
|
|
|
2017-07-01 - TrickBot Banking Trojan - DOC00039217.doc/
|
— |
|
|
|
2017-07-02 - ISFB- Still Live and Kicking/
|
— |
|
|
|
2017-07-03 - 'NotPetya' malware attacks could warrant retaliation, says Nato affiliated-researcher/
|
— |
|
|
|
2017-07-03 - NotPetya Technical Analysis Part II- Further Findings and Potential for MBR Recovery/
|
— |
|
|
|
2017-07-03 - Who is behind Petna-/
|
— |
|
|
|
2017-07-04 - Analysis of TeleBots’ cunning backdoor/
|
— |
|
|
|
2017-07-04 - Important information about Night Dragon/
|
— |
|
|
|
2017-07-04 - In ExPetr-Petya’s shadow, FakeCry ransomware wave hits Ukraine/
|
— |
|
|
|
2017-07-04 - Industroyer/
|
— |
|
|
|
2017-07-04 - MALSPAM WITH JAVA-BASED RAT/
|
— |
|
|
|
2017-07-05 - Insider Information - An intrusion campaign targeting Chinese/
|
— |
|
|
|
2017-07-05 - New Azer CryptoMix Ransomware Variant Released/
|
— |
|
|
|
2017-07-05 - Security 101- The Impact of Cryptocurrency-Mining Malware/
|
— |
|
|
|
2017-07-05 - SLocker Mobile Ransomware Starts Mimicking WannaCry/
|
— |
|
|
|
2017-07-05 - The MeDoc Connection/
|
— |
|
|
|
2017-07-05 - Trump Zombies- New IoT Zombies Attacking 'In Trump's Name'/
|
— |
|
|
|
2017-07-06 - New KONNI Campaign References North Korean Missile Capabilities/
|
— |
|
|
|
2017-07-06 - Operation Desert Eagle/
|
— |
|
|
|
2017-07-07 - 94 .ch & .li domain names hijacked and used for drive-by/
|
— |
|
|
|
2017-07-08 - A VBScript with Obfuscated Base64 Data/
|
— |
|
|
|
2017-07-08 - Analysis of A New Variant of Konni RAT/
|
— |
|
|
|
2017-07-10 - OSX Malware Linked to Operation Emmental Hijacks User Network Traffic/
|
— |
|
|
|
2017-07-10 - Upatre - Trojan Downloader/
|
— |
|
|
|
2017-07-11 - Ordinypt hat es auf Benutzer aus Deutschland abgesehen/
|
— |
|
|
|
2017-07-11 - Spam Campaign Delivers Cross-platform Remote Access Trojan Adwind/
|
— |
|
|
|
2017-07-11 - Winnti Evolution Going Open Source/
|
— |
|
|
|
2017-07-12 - A .NET malware abusing legitimate ffmpeg/
|
— |
|
|
|
2017-07-12 - Iranian Hackers Have Been Infiltrating Critical Infrastructure Companies/
|
— |
|
|
|
2017-07-12 - LockPoS Joins the Flock/
|
— |
|
|
|
2017-07-12 - Operation Escalation- How click-fraud malware transforms into an advanced threat/
|
— |
|
|
|
2017-07-12 - The Magala Trojan Clicker- A Hidden Advertising Threat/
|
— |
|
|
|
2017-07-13 - Meet Ovidiy Stealer- Bringing credential theft to the masses/
|
— |
|
|
|
2017-07-13 - OSX-Dok Refuses to Go Away and It’s After Your Money/
|
— |
|
|
|
2017-07-14 - Keeping up with the Petyas- Demystifying the malware family/
|
— |
|
|
|
2017-07-15 - Mirai BotNet Source Code/
|
— |
|
|
|
2017-07-17 - Android Backdoor GhostCtrl can Silently Record Your Audio, Video, and More/
|
— |
|
|
|
2017-07-17 - It’s baaaack- Public cyber enemy Emotet has returned/
|
— |
|
|
|
2017-07-17 - WMIGhost - Wimmie - WMI malware/
|
— |
|
|
|
2017-07-18 - Inexsmar - An Unusual DarkHotel Campaign/
|
— |
|
|
|
2017-07-18 - Linux Users Urged to Update as a New Threat Exploits SambaCry/
|
— |
|
|
|
2017-07-18 - Recent Winnti Infrastructure and Samples/
|
— |
|
|
|
2017-07-18 - Ten process injection techniques- A technical survey of common and trending process injection techniques/
|
— |
|
|
|
2017-07-19 - 'DarkHotel' APT Uses New Methods to Target Politicians/
|
— |
|
|
|
2017-07-19 - The NukeBot banking Trojan- from rough drafts to real threats/
|
— |
|
|
|
2017-07-20 - Rurktar - Spyware under Construction/
|
— |
|
|
|
2017-07-20 - Stantinko- A massive adware campaign operating covertly since 2012/
|
— |
|
|
|
2017-07-24 - Bye, bye Petya! Decryptor for old versions released/
|
— |
|
|
|
2017-07-24 - Let's Learn- Reversing Credential and Payment Card Information Stealer 'AZORult V2'/
|
— |
|
|
|
2017-07-24 - Real News, Fake Flash- Mac OS X Users Targeted/
|
— |
|
|
|
2017-07-24 - Spring Dragon – Updated Activity/
|
— |
|
|
|
2017-07-24 - The Seamless Campaign Drops Ramnit. Follow-up Malware- AZORult Stealer, Smoke Loader, etc/
|
— |
|
|
|
2017-07-24 - Tick Group Continues Attacks/
|
— |
|
|
|
2017-07-25 - Dridex Loot/
|
— |
|
|
|
2017-07-25 - HawkEye Credential Theft Malware Distributed in Recent Phishing Campaign/
|
— |
|
|
|
2017-07-25 - “Perverse” malware infecting hundreds of Macs remained undetected for years/
|
— |
|
|
|
2017-07-25 - “Tick” Group Continues Attacks/
|
— |
|
|
|
2017-07-27 - After Big Takedown Efforts, 20 More BankBot Mobile Malware Apps Make It Into Google Play/
|
— |
|
|
|
2017-07-27 - Chessmaster Cyber Espionage Campaign/
|
— |
|
|
|
2017-07-27 - ChessMaster Makes its Move- A Look into the Campaign’s Cyberespionage Arsenal/
|
— |
|
|
|
2017-07-27 - New Version of “Trickbot” Adds Worm Propagation Module/
|
— |
|
|
|
2017-07-27 - OilRig Uses ISMDoor Variant Possibly Linked to Greenbug Threat Group/
|
— |
|
|
|
2017-07-27 - OilRig Uses ISMDoor Variant; Possibly Linked to Greenbug Threat Group/
|
— |
|
|
|
2017-07-27 - Operation Wilted Tulip/
|
— |
|
|
|
2017-07-27 - The Curious Case of Mia Ash- Fake Persona Lures Middle Eastern Targets/
|
— |
|
|
|
2017-07-27 - With Fake News And Femmes Fatales, Iran's Spies Learn To Love Facebook/
|
— |
|
|
|
2017-07-31 - A new era in mobile banking Trojans/
|
— |
|
|
|
2017-07-31 - FIN7-Carbanak threat actor unleashes Bateleur JScript backdoor/
|
— |
|
|
|
2017-07-31 - TwoFace Webshell- Persistent Access Point for Lateral Movement/
|
— |
|
|
|
2017-08-01 - Cobalt Group Strikes Back - an evolving multinational threat to finance/
|
— |
|
|
|
2017-08-01 - Prince of Persia – Ride the Lightning- Infy returns as “Foudre”/
|
— |
|
|
|
2017-08-01 - TrickBot comes up with new tricks- attacking Outlook and browsing data/
|
— |
|
|
|
2017-08-02 - A Look at JS_POWMET, a Completely Fileless Malware/
|
— |
|
|
|
2017-08-02 - Malspam delivers Xtreme RAT 8-1-2017/
|
— |
|
|
|
2017-08-03 - Taking the FIRST look at Crypt0l0cker/
|
— |
|
|
|
2017-08-04 - Smoke Loader Adds Additional Obfuscation Methods to Mitigate Analysis/
|
— |
|
|
|
2017-08-05 - Analysis of New GlobeImposter Ransomware Variant/
|
— |
|
|
|
2017-08-07 - Backdoor-carrying Emails Set Sights on Russian-speaking Businesses/
|
— |
|
|
|
2017-08-07 - New Variants of Agent.BTZ-ComRAT Found- The Threat That Hit The Pentagon In 2008 Still Evolving; Part 1-2/
|
— |
|
|
|
2017-08-08 - APT Trends report Q2 2017/
|
— |
|
|
|
2017-08-08 - HBO breach accomplished with hard work by hacker, poor security practices by victim/
|
— |
|
|
|
2017-08-08 - WTF is Mughthesec!-/
|
— |
|
|
|
2017-08-09 - The return of Mamba ransomware/
|
— |
|
|
|
2017-08-10 - Globe Imposter Ransomware Makes a New Run/
|
— |
|
|
|
2017-08-10 - Weltweite Spamwelle verbreitet teuflische Variante des Locky/
|
— |
|
|
|
2017-08-11 - APT28 Targets Hospitality Sector/
|
— |
|
|
|
2017-08-11 - Ukrainian Man Arrested, Charged in NotPetya Distribution/
|
— |
|
|
|
2017-08-13 - Analysis of APT28 hospitality malware (Part 2)/
|
— |
|
|
|
2017-08-14 - The Blockbuster Saga Continues/
|
— |
|
|
|
2017-08-14 - Threat actor goes on a Chrome extension hijacking spree/
|
— |
|
|
|
2017-08-15 - A Quick Look at a New KONNI RAT Variant/
|
— |
|
|
|
2017-08-15 - Secrets of Cobalt/
|
— |
|
|
|
2017-08-15 - ShadowPad in corporate networks/
|
— |
|
|
|
2017-08-15 - The Curious Case of Notepad and Chthonic - Exposing a Malicious Infrastructure/
|
— |
|
|
|
2017-08-16 - Locky Ransomware switches to the Lukitus extension for Encrypted Files/
|
— |
|
|
|
2017-08-16 - Quick look at another Alina fork- XBOT-POS/
|
— |
|
|
|
2017-08-16 - SyncCrypt Ransomware Hides Inside JPG Files Appends KK Extension/
|
— |
|
|
|
2017-08-17 - HBO Twitter and Facebook Accounts Hacked by OurMine/
|
— |
|
|
|
2017-08-17 - Turla APT actor refreshes KopiLuwak JavaScript backdoor for use in G20-themed attack/
|
— |
|
|
|
2017-08-18 - Inside the Kronos malware – part 1/
|
— |
|
|
|
2017-08-18 - KOVTER- An Evolving Malware Gone Fileless/
|
— |
|
|
|
2017-08-18 - Russian Bank Offices Hit with Broad Phishing Wave/
|
— |
|
|
|
2017-08-20 - return of fake UPS cannot deliver malspam with an updated nemucod ransomware and Kovter payload/
|
— |
|
|
|
2017-08-21 - Cyberespionage Group Turla Deploys Backdoor Ahead of G20 Task Force Summit/
|
— |
|
|
|
2017-08-21 - I'm Sorry For Hidden Tear and EDA2/
|
— |
|
|
|
2017-08-21 - InfinityLock Ransomware/
|
— |
|
|
|
2017-08-22 - Gamescom 2017- It’s all fun and games until black hats step in/
|
— |
|
|
|
2017-08-22 - Phishing attack at Raiffeisen Bank by MazarBot/
|
— |
|
|
|
2017-08-23 - CSGO Hacks for Mac That You Shouldnt Trust/
|
— |
|
|
|
2017-08-23 - Deep Analysis of New Poison Ivy Variant/
|
— |
|
|
|
2017-08-23 - The Seamless Campaign Isn’t Losing Any Steam/
|
— |
|
|
|
2017-08-24 - Bad Rabbit- Not‑Petya is back with improved ransomware/
|
— |
|
|
|
2017-08-24 - Crystal Finance Millennium used to spread malware/
|
— |
|
|
|
2017-08-24 - Defray - New Ransomware Targeting Education and Healthcare Verticals/
|
— |
|
|
|
2017-08-24 - Malicious Chrome Extensions Stealing Roblox In-Game Currency, Sending Cookies via Discord/
|
— |
|
|
|
2017-08-24 - Naikon Targeted Attacks/
|
— |
|
|
|
2017-08-24 - New Defray Ransomware Targets Education and Healthcare Verticals/
|
— |
|
|
|
2017-08-25 - New Arena Crysis Ransomware Variant Released/
|
— |
|
|
|
2017-08-25 - Operation RAT Cook- Chinese APT actors use fake Game of Thrones leaks as lures/
|
— |
|
|
|
2017-08-25 - Operation Rat Cook/
|
— |
|
|
|
2017-08-25 - Schtasks-Backdoor/
|
— |
|
|
|
2017-08-25 - The WireX Botnet- How Industry Collaboration Disrupted a DDoS Attack/
|
— |
|
|
|
2017-08-26 - US Arrests Chinese Man Involved With Sakula Malware Used in OPM and Anthem Hacks/
|
— |
|
|
|
2017-08-28 - New Nuclear BTCWare Ransomware Released Updated/
|
— |
|
|
|
2017-08-28 - Tech Firms Team Up to Take Down ‘WireX’ Android DDoS Botnet/
|
— |
|
|
|
2017-08-29 - From Onliner Spambot to millions of email's lists and credentials/
|
— |
|
|
|
2017-08-29 - Inside the Kronos malware – part 2/
|
— |
|
|
|
2017-08-29 - Jimmy Nukebot- from Neutrino with love/
|
— |
|
|
|
2017-08-29 - Second Google Chrome Extension Banker Malware in Two Weeks/
|
— |
|
|
|
2017-08-30 - Gazing at Gazer - Turla’s new second stage backdoor/
|
— |
|
|
|
2017-08-30 - Introducing WhiteBear/
|
— |
|
|
|
2017-08-30 - New ESET research uncovers Gazer, the stealthy backdoor that spies on embassies/
|
— |
|
|
|
2017-08-30 - WhiteBear/
|
— |
|
|
|
2017-08-31 - Cobian RAT - A backdoored RAT/
|
— |
|
|
|
2017-08-31 - Lookout discovers sophisticated xRAT malware tied to 2014 “Xsser - mRAT” surveillance campaign against Hong Kong protesters/
|
— |
|
|
|
2017-08-31 - Updated KHRAT Malware Used in Cambodia Attacks/
|
— |
|
|
|
2017-09-01 - EHDevel – The story of a continuously improving advanced threat creation toolkit/
|
— |
|
|
|
2017-09-01 - EITest- HoeflerText Popups Targeting Google Chrome Users Now Push RAT Malware/
|
— |
|
|
|
2017-09-01 - New Android Trojan - Red Alert 2.0 - Targeting Banks and Social Apps/
|
— |
|
|
|
2017-09-01 - Vxer is offering Cobian RAT in the underground, but it is backdoored/
|
— |
|
|
|
2017-09-04 - Despite appearances, WikiLeaks wasn’t hacked/
|
— |
|
|
|
2017-09-05 - Graftor - But I Never Asked for This…/
|
— |
|
|
|
2017-09-05 - Kingdom targeted by new malware/
|
— |
|
|
|
2017-09-05 - Rehashed RAT Used in APT Campaign Against Vietnamese Organizations/
|
— |
|
|
|
2017-09-05 - The Mirai Botnet- A Look Back and Ahead At What's Next/
|
— |
|
|
|
2017-09-06 - Analysing a 10-Year-Old SNOWBALL/
|
— |
|
|
|
2017-09-06 - Dragonfly - Western energy sector targeted by sophisticated attack group/
|
— |
|
|
|
2017-09-06 - Dragonfly 2/
|
— |
|
|
|
2017-09-06 - ShadowBrokers are back demanding nearly $4m and offering 2 dumps per month/
|
— |
|
|
|
2017-09-07 - EMOTET Returns, Starts Spreading via Spam Botnet/
|
— |
|
|
|
2017-09-07 - New NSA Data Dump- ShadowBrokers Release UNITEDRAKE Malware/
|
— |
|
|
|
2017-09-09 - Vault 8- Hive/
|
— |
|
|
|
2017-09-11 - “Re- Details” Malspam Downloads CoreBot Banking Trojan/
|
— |
|
|
|
2017-09-12 - CVE-2017-8759/
|
— |
|
|
|
2017-09-12 - FireEye Uncovers CVE-2017-8759- Zero-Day Used in the Wild to Distribute FINSPY,FireEye Uncovers CVE-2017-8759- Zero-Day Used in the Wild to Distribute FINSPY/
|
— |
|
|
|
2017-09-12 - ThunderShell/
|
— |
|
|
|
2017-09-13 - New Variants of Agent.BTZ-ComRAT Found- The Threat That Hit The Pentagon In 2008 Still Evolving; Part 2-2/
|
— |
|
|
|
2017-09-15 - Deep Analysis of New Poison Ivy-PlugX Variant - Part II/
|
— |
|
|
|
2017-09-15 - Trojan-Win32-Enviserv.A/
|
— |
|
|
|
2017-09-15 - Trojan-Win32-Spyeye/
|
— |
|
|
|
2017-09-15 - TrojanSpy-Win32-Usteal/
|
— |
|
|
|
2017-09-15 - Welp, Vevo Just Got Hacked/
|
— |
|
|
|
2017-09-18 - An (un)documented Word feature abused by attackers/
|
— |
|
|
|
2017-09-18 - Casting a Light on BlackEnergy/
|
— |
|
|
|
2017-09-18 - CCleanup - A Vast Number of Machines at Risk/
|
— |
|
|
|
2017-09-18 - CCleanup- A Vast Number of Machines at Risk/
|
— |
|
|
|
2017-09-18 - Cloud Atlas - An undocumented Word feature abused by attackers/
|
— |
|
|
|
2017-09-18 - Morphisec Discovers CCleaner Backdoor Saving Millions of Avast Users/
|
— |
|
|
|
2017-09-19 - A Look Into The New Strain Of BankBot/
|
— |
|
|
|
2017-09-19 - A Modern Hypervisor as a Basis for a Sandbox/
|
— |
|
|
|
2017-09-19 - Security Utility Abuses Supply Chain for a Malware Attack/
|
— |
|
|
|
2017-09-20 - CCleaner Command and Control Causes Concern/
|
— |
|
|
|
2017-09-20 - Evidence Aurora Operation Still Active - Supply Chain Attack Through CCleaner/
|
— |
|
|
|
2017-09-20 - Evidence Aurora Operation Still Active- Supply Chain Attack Through CCleaner/
|
— |
|
|
|
2017-09-20 - Insights into Iranian Cyber Espionage- APT33 Targets Aerospace and Energy Sectors and has Ties to Destructive Malware/
|
— |
|
|
|
2017-09-20 - Is Hajime botnet dead-/
|
— |
|
|
|
2017-09-20 - Progress on CCleaner Investigation/
|
— |
|
|
|
2017-09-20 - Red Alert 2.0 Android Trojan Spreads Via Third Party App Stores/
|
— |
|
|
|
2017-09-20 - The CCleaner Malware Fiasco Targeted at Least 18 Specific Tech Firms/
|
— |
|
|
|
2017-09-20 - The Formidable FormBook Form Grabber/
|
— |
|
|
|
2017-09-21 - APT33- New Insights into Iranian Cyber Espionage Group/
|
— |
|
|
|
2017-09-21 - Avast Threat Labs analysis of CCleaner incident/
|
— |
|
|
|
2017-09-21 - Fake IRS notice delivers customized spying tool/
|
— |
|
|
|
2017-09-21 - New FinFisher surveillance campaigns- Internet providers involved-/
|
— |
|
|
|
2017-09-21 - Rig EK via Rulan drops an Infostealer/
|
— |
|
|
|
2017-09-21 - This Ransomware Demands Nudes Instead of Bitcoin/
|
— |
|
|
|
2017-09-22 - EternalBlue Exploit Used in Retefe Banking Trojan Campaign/
|
— |
|
|
|
2017-09-22 - NRansom- Ransomware that demands your nudes/
|
— |
|
|
|
2017-09-25 - A simple example of a complex cyberattack/
|
— |
|
|
|
2017-09-25 - Additional information regarding the recent CCleaner APT security incident/
|
— |
|
|
|
2017-09-25 - Analyzing the Various Layers of AgentTesla’s Packing/
|
— |
|
|
|
2017-09-26 - Defray Ransomware Hits Healthcare and Education/
|
— |
|
|
|
2017-09-26 - Elaborate scripting-fu used in espionage attack against Saudi Arabia Government entity/
|
— |
|
|
|
2017-09-26 - Striking Oil- A Closer Look at Adversary Infrastructure/
|
— |
|
|
|
2017-09-26 - XPCTRA Malware Steals Banking and Digital Wallet User's Credentials/
|
— |
|
|
|
2017-09-27 - Threat Actor Profile- TA505, From Dridex to GlobeImposter/
|
— |
|
|
|
2017-09-28 - Money‑making machine- Monero‑mining malware/
|
— |
|
|
|
2017-09-28 - Threat Actors Target Government of Belarus Using CMSTAR Trojan/
|
— |
|
|
|
2017-09-29 - Ramnit – in-depth analysis/
|
— |
|
|
|
2017-10-02 - Evidence Aurora Operation Still Active Part 2- More Ties Uncovered Between CCleaner Hack & Chinese Hackers/
|
— |
|
|
|
2017-10-03 - The Flusihoc Dynasty, A Long Standing DDoS Botnet/
|
— |
|
|
|
2017-10-04 - Continued Activity targeting the Middle East/
|
— |
|
|
|
2017-10-04 - Protecting the Software Supply Chain- Deep Insights into the CCleaner Backdoor/
|
— |
|
|
|
2017-10-05 - Analysis of a malicious DOC used by Turla APT group; hunting persistence via PowerShell/
|
— |
|
|
|
2017-10-05 - FreeMilk- A Highly Targeted Spear Phishing Campaign/
|
— |
|
|
|
2017-10-05 - Industroyer- Biggest threat to industrial control systems since Stuxnet/
|
— |
|
|
|
2017-10-05 - Linking Xpaj and Nymaim/
|
— |
|
|
|
2017-10-05 - Significant FormBook Distribution Campaigns Impacting the U.S. and South Korea/
|
— |
|
|
|
2017-10-05 - SYSCON Backdoor Uses FTP as a C&C Channel/
|
— |
|
|
|
2017-10-09 - OilRig Group Steps Up Attacks with New Delivery Documents and New Injector Trojan/
|
— |
|
|
|
2017-10-10 - ATMii- a small but effective ATM robber/
|
— |
|
|
|
2017-10-10 - LokiBot - The first hybrid Android malware/
|
— |
|
|
|
2017-10-10 - Malvertising Campaign Uses RIG EK to Drop Quant Loader which Downloads FormBook/
|
— |
|
|
|
2017-10-10 - Post Soviet Bank Heists/
|
— |
|
|
|
2017-10-11 - More info on 'Evolved DNSMessenger'/
|
— |
|
|
|
2017-10-11 - Spoofed SEC Emails Distribute Evolved DNSMessenger/
|
— |
|
|
|
2017-10-11 - TrickBot Takes to Latin America, Continues to Expand Its Global Reach/
|
— |
|
|
|
2017-10-12 - BRONZE BUTLER Targets Japanese Enterprises/
|
— |
|
|
|
2017-10-12 - Emotet beutet Outlook aus/
|
— |
|
|
|
2017-10-12 - The Beer Drinker’s Guide to SAML/
|
— |
|
|
|
2017-10-13 - Blank Slate Malspam Stops Pushing Locky, Starts Pushing Sage 2.2 Randsomware/
|
— |
|
|
|
2017-10-13 - DoubleLocker- Innovative Android Ransomware/
|
— |
|
|
|
2017-10-13 - FIN7 Dissected- Hackers Accelerate Pace of Innovation/
|
— |
|
|
|
2017-10-13 - Rig EK via Malvertising drops a Smoke Loader leading to a Miner and AZORult/
|
— |
|
|
|
2017-10-16 - BlackOasis APT and new targeted attacks leveraging zero-day exploit/
|
— |
|
|
|
2017-10-16 - Blackoasis new targeted attacks leveraging zero-day exploit/
|
— |
|
|
|
2017-10-16 - CoalaBot- http Ddos Bot/
|
— |
|
|
|
2017-10-16 - Leviathan - Espionage actor spearphishes maritime and defense targets/
|
— |
|
|
|
2017-10-16 - Leviathan- Espionage actor spearphishes maritime and defense targets/
|
— |
|
|
|
2017-10-16 - Taiwan Heist - Lazarus Tools and Ransomware/
|
— |
|
|
|
2017-10-16 - Taiwan Heist- Lazarus Tools and Ransomware/
|
— |
|
|
|
2017-10-17 - WaterMiner – a New Evasive Crypto-Miner/
|
— |
|
|
|
2017-10-18 - Magniber ransomware- exclusively for South Koreans/
|
— |
|
|
|
2017-10-19 - A deeper look at Tofsee modules/
|
— |
|
|
|
2017-10-19 - A New IoT Botnet Storm is Coming/
|
— |
|
|
|
2017-10-19 - APT28 racing to exploit CVE-2017-11292 Flash vulnerability before patches are deployed/
|
— |
|
|
|
2017-10-19 - Magniber Ransomware Wants to Infect Only the Right People/
|
— |
|
|
|
2017-10-19 - Operation PZCHAO/
|
— |
|
|
|
2017-10-20 - BadPatch/
|
— |
|
|
|
2017-10-20 - Dragonfly- Western energy sector targeted by sophisticated attack group/
|
— |
|
|
|
2017-10-20 - IoT_reaper- A Rappid Spreading New IoT Botnet/
|
— |
|
|
|
2017-10-20 - JadeRAT mobile surveillanceware spikes in espionage activity/
|
— |
|
|
|
2017-10-20 - OSX-Proton spreading again through supply‑chain attack/
|
— |
|
|
|
2017-10-22 - “Cyber Conflict” Decoy Document Used In Real Cyber Conflict/
|
— |
|
|
|
2017-10-23 - Reaper- Calm Before the IoT Security Storm-/
|
— |
|
|
|
2017-10-24 - Bad Rabbit ransomware/
|
— |
|
|
|
2017-10-24 - Bad Rabbit- Not‑Petya is back with improved ransomware/
|
— |
|
|
|
2017-10-24 - Iranian Threat Agent Greenbug Impersonates Israeli High-Tech and Cyber Security Companies/
|
— |
|
|
|
2017-10-24 - New Ransomware Linked to NotPetya Sweeps Russia and Ukraine/
|
— |
|
|
|
2017-10-24 - NotPetya Returns as Bad Rabbit/
|
— |
|
|
|
2017-10-24 - Threat Spotlight- Follow the Bad Rabbit/
|
— |
|
|
|
2017-10-25 - Down the Rabbit Hole- Tracking the BadRabbit Ransomware to a Long Ongoing Campaign of Target Selection/
|
— |
|
|
|
2017-10-25 - SnatchLoader Reloaded/
|
— |
|
|
|
2017-10-26 - BACKSWING - Pulling a BADRABBIT Out of a Hat/
|
— |
|
|
|
2017-10-26 - Keranger- the first “in-the-wild” ransomware for Macs. But certainly not the last/
|
— |
|
|
|
2017-10-26 - New htpRAT Gives Complete Remote Control Capabilities to Chinese Cyber Threat Actors/
|
— |
|
|
|
2017-10-26 - ReversingLabs' YARA rule detects BadRabbit encryption routine specifics/
|
— |
|
|
|
2017-10-27 - Bahamaut Revisited/
|
— |
|
|
|
2017-10-27 - Bahamut Revisited, More Cyber Espionage in the Middle East and South Asia/
|
— |
|
|
|
2017-10-27 - British security minister says North Korea was behind WannaCry hack on NHS/
|
— |
|
|
|
2017-10-27 - The big difference with Bad Rabbit/
|
— |
|
|
|
2017-10-27 - Threat Round Up for Oct 20 - Oct 27/
|
— |
|
|
|
2017-10-27 - Tracking Subaat Targeted Phishing Attack Leads to Threat Actors Repository/
|
— |
|
|
|
2017-10-27 - Tracking Subaat- Targeted Phishing Attack Leads to Threat Actor’s Repository/
|
— |
|
|
|
2017-10-27 - XiaoBa Ransomware/
|
— |
|
|
|
2017-10-29 - Sality Configuration Extractor (sality_extractor.py)/
|
— |
|
|
|
2017-10-30 - Coin Miner Mobile Malware Returns, Hits Google Play/
|
— |
|
|
|
2017-10-30 - Gaza Cybergang Using CVE 2017-0199/
|
— |
|
|
|
2017-10-30 - Gaza Cybergang – updated activity in 2017-/
|
— |
|
|
|
2017-10-30 - Windigo Still not Windigone- An Ebury Update/
|
— |
|
|
|
2017-10-31 - Analyzing malware by API calls/
|
— |
|
|
|
2017-10-31 - Expiro Malware Is Back and Even Harder to Remove/
|
— |
|
|
|
2017-10-31 - Night of the Devil/
|
— |
|
|
|
2017-10-31 - ONI Ransomware Used in Month-Long Attacks Against Japanese Companies/
|
— |
|
|
|
2017-11-01 - CryptoShuffler Stole $150,000 by Replacing Bitcoin Wallet IDs in PC Clipboards/
|
— |
|
|
|
2017-11-01 - Everybody Gets One- QtBot Used to Distribute Trickbot and Locky/
|
— |
|
|
|
2017-11-01 - Silence of the Moles/
|
— |
|
|
|
2017-11-01 - Silence – a new Trojan attacking financial organizations/
|
— |
|
|
|
2017-11-01 - VB2017 - Offensive Malware Analysis - Dissecting OSX-FruitFly.B Via a Custom C&C Server/
|
— |
|
|
|
2017-11-02 - ADVENTURES WITH SMOKE LOADER/
|
— |
|
|
|
2017-11-02 - LeetMX - a Yearlong Cyber-Attack Campaign Against Targets in/
|
— |
|
|
|
2017-11-02 - New Insights Into Energetic Bear'S Attacks on Turkish Critical Infrastructure/
|
— |
|
|
|
2017-11-02 - New Insights into Energetic Bear’s Watering Hole Cyber Attacks on Turkish Critical Infrastructure/
|
— |
|
|
|
2017-11-02 - Poisoning the Well- Banking Trojan Targets Google Search Results/
|
— |
|
|
|
2017-11-02 - Recent InPage Exploits Lead to Multiple Malware Families/
|
— |
|
|
|
2017-11-02 - The KeyBoys are back in town/
|
— |
|
|
|
2017-11-04 - How the FBI Took Down Russia's Spam King—And His Massive Botnet/
|
— |
|
|
|
2017-11-05 - Let's Learn- Lethic Spambot & Survey of Anti-Analysis Techniques/
|
— |
|
|
|
2017-11-06 - Mitigating and eliminating info-stealing Qakbot and Emotet in corporate networks/
|
— |
|
|
|
2017-11-06 - New Strategy - Evolving Tools and Tactics/
|
— |
|
|
|
2017-11-06 - OceanLotus Blossoms/
|
— |
|
|
|
2017-11-07 - Locky Ransomware/
|
— |
|
|
|
2017-11-07 - REDBALDKNIGHT-BRONZE BUTLER’s Daserf Backdoor Now Using Steganography/
|
— |
|
|
|
2017-11-07 - Sowbug - Cyber espionage group targets South American and Southeast Asian governments/
|
— |
|
|
|
2017-11-07 - Sowbug- Cyber espionage group targets South American and Southeast Asian governments/
|
— |
|
|
|
2017-11-07 - Threat Group APT28 Slips Office Malware into Doc Citing NYC Terror Attack/
|
— |
|
|
|
2017-11-08 - A short journey into DarkVNC attack chain/
|
— |
|
|
|
2017-11-08 - Analysis of an active USB flash drive virus/
|
— |
|
|
|
2017-11-08 - OilRig Deploys “ALMA Communicator” – DNS Tunneling Trojan/
|
— |
|
|
|
2017-11-08 - Overlay RAT Malware Uses AutoIt Scripting to Bypass Antivirus Detection/
|
— |
|
|
|
2017-11-09 - He Perfected a Password-Hacking Tool—Then the Russians Came Calling/
|
— |
|
|
|
2017-11-09 - Ordinypt Ransomware Intentionally Destroys Files, Currently Targeting Germany/
|
— |
|
|
|
2017-11-10 - CCleaner Stage 2- In-Depth Analysis of the Payload/
|
— |
|
|
|
2017-11-10 - New Malware with Ties to SunOrcal Discovered/
|
— |
|
|
|
2017-11-12 - Let's Learn- Dissecting Golroted Trojan's Process Hollowing Technique & UAC Bypass in HKCU-Environment/
|
— |
|
|
|
2017-11-12 - Seamless Campaign Delivers Ramnit via RIG EK at 188.225.82.158. Follow-up Malware is AZORult Stealer/
|
— |
|
|
|
2017-11-13 - IcedID Banking Trojan Shares Code with Pony 2.0 Trojan/
|
— |
|
|
|
2017-11-13 - New Banking Trojan IcedID Discovered by IBM X-Force Research/
|
— |
|
|
|
2017-11-14 - Alert (TA17-318B)- HIDDEN COBRA – North Korean Trojan- Volgmer/
|
— |
|
|
|
2017-11-14 - HIDDEN COBRA – North Korean Remote Administration Tool- FALLCHILL/
|
— |
|
|
|
2017-11-14 - IceID Banking Trojan Targeting Banks, Payment Card Providers, E-Commerce Sites/
|
— |
|
|
|
2017-11-14 - Muddying the Water Targeted Attacks/
|
— |
|
|
|
2017-11-14 - Muddying the Water- Targeted Attacks in the Middle East/
|
— |
|
|
|
2017-11-15 - New EMOTET Hijacks a Windows API, Evades Sandbox and Analysis/
|
— |
|
|
|
2017-11-16 - CACTUSTORCH- Payload Generation for Adversary Simulations/
|
— |
|
|
|
2017-11-16 - Tropic Trooper goes mobile with Titan surveillanceware/
|
— |
|
|
|
2017-11-17 - [Part 1] - Analysing the New Linux-AES.DDoS IoT Malware/
|
— |
|
|
|
2017-11-19 - Iranian agents blackmailed BBC reporter with ‘naked photo’ threats/
|
— |
|
|
|
2017-11-20 - Android Malware Appears Linked to Lazarus Cybercrime Group/
|
— |
|
|
|
2017-11-20 - Cobalt Strikes Again- Spam Runs Use Macros and CVE-2017-8759 Exploit Against Russian Banks/
|
— |
|
|
|
2017-11-20 - Operation Blockbuster Goes Mobile/
|
— |
|
|
|
2017-11-20 - OSX.Proton spreading through fake Symantec blog/
|
— |
|
|
|
2017-11-21 - Let's Learn- Trickbot Socks5 Backconnect Module In Detail/
|
— |
|
|
|
2017-11-21 - New campaigns spread banking malware through Google Play/
|
— |
|
|
|
2017-11-22 - A dive into MuddyWater APT targeting Middle-East/
|
— |
|
|
|
2017-11-22 - Trickbot Gang Evolves, Incorporates Account Checking Into Hybrid Attack Model/
|
— |
|
|
|
2017-11-23 - NECURS BOTNET MALSPAM PUSHES -SCARAB- RANSOMWARE/
|
— |
|
|
|
2017-11-24 - Mirai Activity Picks up Once More After Publication of PoC Exploit Code/
|
— |
|
|
|
2017-11-26 - Source Code of HIVE/
|
— |
|
|
|
2017-11-28 - Gaffe Reveals Full List of Targets in Spear Phishing Attack Using Cobalt Strike Against Financial Institutions/
|
— |
|
|
|
2017-11-28 - Newly Observed Ursnif Variant Employs Malicious TLS Callback Technique to Achieve Process Injection/
|
— |
|
|
|
2017-11-28 - OSX.CPUMEANER New Cryptocurrency Mining Trojan Targets MacOS/
|
— |
|
|
|
2017-11-28 - ROKRAT Reloaded/
|
— |
|
|
|
2017-12 - Nine circles of Cerber/
|
— |
|
|
|
2017-12 - TRISIS- Analyzing Safety System Targeting Malware/
|
— |
|
|
|
2017-12-01 - Advanced Persistent Threat Groups/
|
— |
|
|
|
2017-12-02 - Scarabey Ransomware/
|
— |
|
|
|
2017-12-03 - Notes on Linux-BillGates/
|
— |
|
|
|
2017-12-04 - Microsoft teams up with law enforcement and other partners to disrupt Gamarue (Andromeda)/
|
— |
|
|
|
2017-12-04 - New method of macro malware disguised as defense-related files/
|
— |
|
|
|
2017-12-04 - The Shadows of Ghosts - Inside the Response of a Unique Carbanak Intrusion/
|
— |
|
|
|
2017-12-05 - Charming Kitten/
|
— |
|
|
|
2017-12-05 - Warning- Satori, a Mirai Branch Is Spreading in Worm Style on Port 37215 and 52869/
|
— |
|
|
|
2017-12-06 - Champing at the Cyberbit Ethiopian Dissidents Targeted with New Commercial Spyware/
|
— |
|
|
|
2017-12-06 - Recam Redux - DeConfusing ConfuserEx/
|
— |
|
|
|
2017-12-07 - A Peculiar Case of Orcus RAT Targeting Bitcoin Investors/
|
— |
|
|
|
2017-12-07 - New Targeted Attack in the Middle East by APT34, a Suspected Iranian Threat Group, Using CVE-2017-11882 Exploit/
|
— |
|
|
|
2017-12-07 - Using CVE-2017-11882 - New Targeted Attack in the Middle East by APT34/
|
— |
|
|
|
2017-12-08 - GratefulPOS credit card stealing malware - just in time for the shopping season/
|
— |
|
|
|
2017-12-08 - Interesting disguise employed by new Mac malware HiddenLotus/
|
— |
|
|
|
2017-12-08 - StrongPity2 spyware replaces FinFisher in MitM campaign – ISP involved-/
|
— |
|
|
|
2017-12-09 - 10 Years of Targeted Credential Phishing/
|
— |
|
|
|
2017-12-11 - Banking malware on Google Play targets Polish banks/
|
— |
|
|
|
2017-12-11 - BrickerBot Author Retires Claiming to Have Bricked over 10 Million IoT Devices/
|
— |
|
|
|
2017-12-11 - Malware – Snatch Loader- Reloaded/
|
— |
|
|
|
2017-12-11 - Money Taker/
|
— |
|
|
|
2017-12-11 - MoneyTaker- in pursuit of the invisible/
|
— |
|
|
|
2017-12-11 - OilRig Performs Tests on the TwoFace Webshell/
|
— |
|
|
|
2017-12-11 - Untangling the Patchwork Cyberespionage Group/
|
— |
|
|
|
2017-12-12 - MoneyTaker Hacker Group Steals Millions from US and Russian Banks/
|
— |
|
|
|
2017-12-13 - Maker of sneaky Mac adware sends security researcher cease-and-desist letters/
|
— |
|
|
|
2017-12-13 - Mirai IoT Botnet Co-Authors Plead Guilty/
|
— |
|
|
|
2017-12-13 - Tyupkin ATM Malware- Take The Money Now Or Never!/
|
— |
|
|
|
2017-12-13 - Update- Let's Learn- Reversing FIN6 -GratefulPOS- aka -FrameworkPOS- Point-of-Sale Malware in-Depth/
|
— |
|
|
|
2017-12-13 - WORK Cryptomix Ransomware Variant Released/
|
— |
|
|
|
2017-12-14 - APT32/
|
— |
|
|
|
2017-12-14 - Attackers Deploy New ICS Attack Framework Triton/
|
— |
|
|
|
2017-12-14 - Attackers Deploy New ICS Attack Framework “TRITON” and Cause Operational Disruption to Critical Infrastructure/
|
— |
|
|
|
2017-12-14 - Zeus Panda Banking Trojan Targets Online Holiday Shoppers/
|
— |
|
|
|
2017-12-15 - In depth analysis of malware exploiting CVE-2017-11826/
|
— |
|
|
|
2017-12-15 - Introducing the Adversary Playbook- First up, OilRig/
|
— |
|
|
|
2017-12-17 - Operation Dragonfly Analysis/
|
— |
|
|
|
2017-12-17 - r77 Rootkit/
|
— |
|
|
|
2017-12-18 - Collaborative Takedown Kills IoT Worm 'Satori'/
|
— |
|
|
|
2017-12-18 - Jack of all trades/
|
— |
|
|
|
2017-12-18 - MedusaHTTP DDoS Slithers Back into the Spotlight/
|
— |
|
|
|
2017-12-18 - New GnatSpy Mobile Malware Family Discovered/
|
— |
|
|
|
2017-12-19 - BrickerBot mod_plaintext Analysis/
|
— |
|
|
|
2017-12-19 - Cyberespionage Campaign Sphinx Goes Mobile With AnubisSpy/
|
— |
|
|
|
2017-12-19 - Let's Learn- Introducing New Trickbot LDAP -DomainGrabber- Module/
|
— |
|
|
|
2017-12-19 - North Korea Bitten by Bitcoin Bug- Financially motivated campaigns reveal new dimension of the Lazarus Group/
|
— |
|
|
|
2017-12-19 - North Korea Bitten by Bitcoin Bug/
|
— |
|
|
|
2017-12-19 - Novel Excel Spreadsheet Attack Launches Password Stealing Malware Loki Bot/
|
— |
|
|
|
2017-12-20 - An End to “Smash-and-Grab” and a Move to More Targeted Approaches/
|
— |
|
|
|
2017-12-20 - Mining Insights- Infrastructure Analysis of Lazarus Group Cyber Attacks on the Cryptocurrency Industry/
|
— |
|
|
|
2017-12-20 - New version of mobile malware Catelites possibly linked to Cron cyber gang/
|
— |
|
|
|
2017-12-21 - Sednit update- How Fancy Bear Spent the Year/
|
— |
|
|
|
2017-12-22 - MALSPAM USES CVE-2017-0199 TO DISTRIBUTE REMCOS RAT/
|
— |
|
|
|
2017-12-22 - New DOC GlobeImposter Ransomware Variant Malspam Campaign Underway/
|
— |
|
|
|
2017-12-27 - Let's Learn- Cutlet ATM Malware Internals/
|
— |
|
|
|
2017-12-28 - PandaZeuS’s Christmas Gift- Change in the Encryption scheme/
|
— |
|
|
|
2017-12-30 - Analysis DarkSky Botnet/
|
— |
|
|