|
Go up
|
— |
— |
|
|
2018-01-01 - Analyzing Ramnit used in Seamless campaign/
|
— |
|
|
|
2018-01-02 - Burping on MuddyWater/
|
— |
|
|
|
2018-01-04 - Iran Cyber Threat Carnegie/
|
— |
|
|
|
2018-01-04 - Iran’s Cyber Ecosystem- Who Are the Threat Actors-/
|
— |
|
|
|
2018-01-04 - MALSPAM PUSHING PCRAT-GH0ST/
|
— |
|
|
|
2018-01-06 - Ostap malware analysis (Backswap dropper)/
|
— |
|
|
|
2018-01-06 - Pyeong Olympics/
|
— |
|
|
|
2018-01-07 - Operation Dustysky/
|
— |
|
|
|
2018-01-08 - SkyRAT Powershell RAT/
|
— |
|
|
|
2018-01-09 - BestKorea/
|
— |
|
|
|
2018-01-09 - Diplomats in Eastern Europe bitten by a Turla mosquito/
|
— |
|
|
|
2018-01-10 - Analysis of BlackTech's latest APT attack/
|
— |
|
|
|
2018-01-10 - Hack Brief- Russian Hackers Release Apparent IOC Emails in Wake of Olympic Ban/
|
— |
|
|
|
2018-01-10 - Taiwanese cops give malware-laden USB sticks as prizes for security quiz/
|
— |
|
|
|
2018-01-11 - Ay MaMi/
|
— |
|
|
|
2018-01-11 - Malspam Entitled “Invoice attched for your reference” Delivers Agent Tesla Keylogger/
|
— |
|
|
|
2018-01-11 - North Korean Defectors and Journalists Targeted/
|
— |
|
|
|
2018-01-12 - Fake Spectre and Meltdown patch pushes Smoke Loader malware/
|
— |
|
|
|
2018-01-12 - Holiday lull- Not so much/
|
— |
|
|
|
2018-01-12 - Malware Displaying Porn Ads Discovered in Game Apps on Google Play/
|
— |
|
|
|
2018-01-12 - Sonja Analysis/
|
— |
|
|
|
2018-01-12 - Update on Pawn Storm - New Targets and Politically Motivated Campaigns/
|
— |
|
|
|
2018-01-15 - Bootkits are not dead. Pitou is back!/
|
— |
|
|
|
2018-01-15 - GlobeImposter ransomware- A holiday gift from the Necurs botnet/
|
— |
|
|
|
2018-01-15 - New KillDisk Variant Hits Financial Organizations in Latin America/
|
— |
|
|
|
2018-01-15 - New KillDisk Variant Hits Financial Organizations in Latin/
|
— |
|
|
|
2018-01-16 - Analyzing the TRITON industrial malware/
|
— |
|
|
|
2018-01-16 - Anatomy of the thread suspension mechanism in Windows (Windows Internals)/
|
— |
|
|
|
2018-01-16 - First Activities of Cobalt Group in 2018- Spear Phishing Russian Banks/
|
— |
|
|
|
2018-01-16 - GlobeImposter Ransomware/
|
— |
|
|
|
2018-01-16 - Korea In The Crosshairs/
|
— |
|
|
|
2018-01-16 - North Korea Targeted South Korean Cryptocurrency Users and Exchange in Late 2017 Campaign/
|
— |
|
|
|
2018-01-16 - Skygofree IOC/
|
— |
|
|
|
2018-01-16 - Skygofree- Following in the footsteps of HackingTeam/
|
— |
|
|
|
2018-01-16 - Threat Spotlight- LockPOS Point of Sale Malware/
|
— |
|
|
|
2018-01-17 - A coin miner with a “Heaven’s Gate”/
|
— |
|
|
|
2018-01-17 - Art of Steal- Satori Variant is Robbing ETH BitCoin by Replacing Wallet Address/
|
— |
|
|
|
2018-01-17 - Exobot Author Calls It Quits and Sells Off Banking Trojan Source Code/
|
— |
|
|
|
2018-01-17 - Microsoft Office Vulnerabilities Used to Distribute Zyklon Malware in Recent Campaign/
|
— |
|
|
|
2018-01-17 - Reviewing the spam filters- Malspam pushing Gozi-ISFB/
|
— |
|
|
|
2018-01-17 - Turla group malware/
|
— |
|
|
|
2018-01-17 - Zumanek- novo malware tenta roubar credenciais de serviços das vítimas/
|
— |
|
|
|
2018-01-18 - Dark Caracal/
|
— |
|
|
|
2018-01-18 - The ARC of Satori/
|
— |
|
|
|
2018-01-18 - Turla Neuron Malware Update/
|
— |
|
|
|
2018-01-21 - Evrial Trojan Switches Bitcoin Addresses Copied to Windows Clipboard/
|
— |
|
|
|
2018-01-22 - Op EvilTraffic CSE CybSec ZLAB Malware Analysis Report – Exclusive, tens of thousands of compromised sites involved in a new massive malvertising campaign/
|
— |
|
|
|
2018-01-22 - Paradise Ransomware strikes again/
|
— |
|
|
|
2018-01-22 - SamSam - The Evolution Continues Netting Over $325,000 in 4 Weeks/
|
— |
|
|
|
2018-01-22 - This hacking gang just updated the malware it uses against UK targets/
|
— |
|
|
|
2018-01-23 - A Walk-Through Tutorial, with Code, on Statically Unpacking the FinSpy VM- Part One, x86 Deobfuscation/
|
— |
|
|
|
2018-01-23 - Espionage Campaign Leverages Spear Phishing, RATs Against Turkish Defense Contractors/
|
— |
|
|
|
2018-01-23 - Maldoc (RTF) drops Loda Logger/
|
— |
|
|
|
2018-01-23 - Satori Author Linked to New Mirai Variant Masuta/
|
— |
|
|
|
2018-01-23 - Uncovering 2017’s Largest Malvertising Operation/
|
— |
|
|
|
2018-01-24 - A Look into the Lazarus Group’s Operations/
|
— |
|
|
|
2018-01-24 - Analyzing CrossRAT- A cross-platform implant, utilized in a global cyber-espionage campaign/
|
— |
|
|
|
2018-01-24 - Lazarus Campaign Targeting Cryptocurrencies Reveals Remote Controller Tool and Evolved RATANKBA/
|
— |
|
|
|
2018-01-24 - Lazarus Campaign Targeting Cryptocurrencies Reveals Remote Controller Tool, an Evolved RATANKBA, and More/
|
— |
|
|
|
2018-01-24 - New Hide ‘N Seek IoT Botnet using custom-built Peer-to-Peer communication spotted in the wild/
|
— |
|
|
|
2018-01-24 - New HNS IoT Botnet Has Already Amassed 14K Bots/
|
— |
|
|
|
2018-01-25 - OilRig uses RGDoor IIS Backdoor on Targets in the Middle East/
|
— |
|
|
|
2018-01-25 - WannaMine Cryptomining- Harmless Nuisance or Disruptive Threat-/
|
— |
|
|
|
2018-01-26 - FriedEx- BitPaymer ransomware the work of Dridex authors/
|
— |
|
|
|
2018-01-26 - The TopHat Campaign- Attacks Within The Middle East Region Using Popular Third-Party Services/
|
— |
|
|
|
2018-01-26 - The Velso Ransomware Being Manually Installed by Attackers/
|
— |
|
|
|
2018-01-26 - Top Hat Campaign - Attacks Within The Middle East Region Using Popular Third-Party Services/
|
— |
|
|
|
2018-01-27 - Dragonfish Analysis/
|
— |
|
|
|
2018-01-29 - GandCrab Ransomware Distributed by Exploit Kits Appends GDCB Extension/
|
— |
|
|
|
2018-01-29 - Let's Learn- Dissecting FormBook Infostealer Malware- Crypter & -RunLib.dll-/
|
— |
|
|
|
2018-01-29 - PoriewSpy India/
|
— |
|
|
|
2018-01-29 - Vermin - Quasar Rat and Custom Malware Used In Ukraine/
|
— |
|
|
|
2018-01-29 - VERMIN- Quasar RAT and Custom Malware Used In Ukraine/
|
— |
|
|
|
2018-01-29 - Weekly TrickBot Analysis - End of w-c 22-Jan-2018 to 1000119/
|
— |
|
|
|
2018-01-30 - APT-32 ASEAN Targeting/
|
— |
|
|
|
2018-01-30 - GandCrab ransomware distributed by RIG and GrandSoft exploit kits (updated)/
|
— |
|
|
|
2018-01-31 - Comnie Continues to Target Organizations in East Asia/
|
— |
|
|
|
2018-01-31 - Smominru Monero mining botnet making millions for operators/
|
— |
|
|
|
2018-01-31 - What are “WannaMine” attacks, and how do I avoid them-/
|
— |
|
|
|
2018-02-01 - JenX – Los Calvos de San Calvicie/
|
— |
|
|
|
2018-02-01 - Operation PZChao- a possible return of the Iron Tiger APT/
|
— |
|
|
|
2018-02-01 - Operation Pzchao/
|
— |
|
|
|
2018-02-01 - Quick Test Drive of Trickbot (It now has a Monero Module)/
|
— |
|
|
|
2018-02-02 - Break Out Of The Tinynuke Malware/
|
— |
|
|
|
2018-02-02 - Gold Dragon Widens Olympics Malware Attacks Gains Permanent Presence on Victims' Systems/
|
— |
|
|
|
2018-02-02 - Gold Dragon Widens Olympics Malware Attacks, Gains Permanent Presence on Victims’ Systems/
|
— |
|
|
|
2018-02-02 - New Mac cryptominer distributed via a MacUpdate hack/
|
— |
|
|
|
2018-02-03 - Attacks Leveraging Adobe Zero-Day (CVE-2018-4878) – Threat Attribution, Attack Scenario and Recommendations/
|
— |
|
|
|
2018-02-04 - DorkBot- An Investigation/
|
— |
|
|
|
2018-02-04 - MALWARE ANALYSIS – PLUGX/
|
— |
|
|
|
2018-02-05 - Analyzing OSX-CreativeUpdater/
|
— |
|
|
|
2018-02-07 - Compromised Servers & Fraud Accounts- Recent Hancitor Attacks/
|
— |
|
|
|
2018-02-07 - RAT Trapped- LuminosityLink Falls Foul of Vermin Eradication Efforts/
|
— |
|
|
|
2018-02-07 - Targeted Attacks In The Middle East/
|
— |
|
|
|
2018-02-07 - Threat Spotlight- URSNIF Infostealer Malware/
|
— |
|
|
|
2018-02-07 - VBS Campaign - Targeted Attacks in the Middle East/
|
— |
|
|
|
2018-02-08 - A review of the evolution of Andromeda over the years before we say goodbye/
|
— |
|
|
|
2018-02-08 - DarkSky Botnet/
|
— |
|
|
|
2018-02-08 - GandCrab Ransomware Being Distributed Via Malspam Disguised as Receipts/
|
— |
|
|
|
2018-02-08 - How not to use a driver to execute code with kernel privileges/
|
— |
|
|
|
2018-02-08 - MBRlock Ransomware/
|
— |
|
|
|
2018-02-08 - Meet CrowdStrike’s Adversary of the Month for February- MUMMY SPIDER/
|
— |
|
|
|
2018-02-08 - Merlin for Red Teams/
|
— |
|
|
|
2018-02-08 - ShurL0ckr Ransomware as a Service Peddled on Dark Web, can Reportedly Bypass Cloud Applications/
|
— |
|
|
|
2018-02-08 - UDPoS - exfiltrating credit card data via DNS/
|
— |
|
|
|
2018-02-09 - Black Ruby Ransomware Skips Victims in Iran and Adds a Miner for Good Measure/
|
— |
|
|
|
2018-02-09 - DexCrypt MBRLocker Demands 30 Yuan To Gain Access to Computer/
|
— |
|
|
|
2018-02-12 - Lazarus Resurfaces, Targets Global Banks and Bitcoin Users/
|
— |
|
|
|
2018-02-12 - New Satori Botnet Variant Enslaves Thousands of Dasan WiFi Routers/
|
— |
|
|
|
2018-02-12 - Olympic Destroyer Takes Aim At Winter Olympics/
|
— |
|
|
|
2018-02-13 - Deciphering Confucius’ Cyberespionage Operations/
|
— |
|
|
|
2018-02-13 - Lotus Blossom Continues ASEAN Targeting/
|
— |
|
|
|
2018-02-13 - Stopping Olympic Destroyer- New Process Injection Insights/
|
— |
|
|
|
2018-02-14 - Reversing Py2Exe binaries/
|
— |
|
|
|
2018-02-15 - Malspam delivers Keybase keylogger/
|
— |
|
|
|
2018-02-15 - Olympic Destroyer/
|
— |
|
|
|
2018-02-15 - SamSam Ransomware Campaigns/
|
— |
|
|
|
2018-02-15 - SamSam- Converting Opportunity into Profit/
|
— |
|
|
|
2018-02-15 - TrickBot’s Cryptocurrency Hunger- Tricking the Bitcoin Out of Wallets/
|
— |
|
|
|
2018-02-16 - New jRAT-Adwind Variant Being Spread With Package Delivery Scam/
|
— |
|
|
|
2018-02-17 - Tearing Apart the Undetected (OSX)Coldroot RAT/
|
— |
|
|
|
2018-02-20 - A Slice of 2017 Sofacy Activity/
|
— |
|
|
|
2018-02-20 - APT37 (Reaper)- The Overlooked North Korean Actor/
|
— |
|
|
|
2018-02-20 - APT37 - The Overlooked North Korean Actor/
|
— |
|
|
|
2018-02-20 - Latest Elise APT comes packed with Sandbox Evasions/
|
— |
|
|
|
2018-02-20 - Musical Chairs Playing Tetris/
|
— |
|
|
|
2018-02-20 - Sofacy Activity/
|
— |
|
|
|
2018-02-21 - Avast tracks down Tempting Cedar Spyware/
|
— |
|
|
|
2018-02-21 - FinSpy VM Unpacking Tutorial Part 3- Devirtualization. Phase #1- Deobfuscating FinSpy VM Bytecode Programs/
|
— |
|
|
|
2018-02-21 - FinSpy VM Unpacking Tutorial Part 3- Devirtualization. Phase #2- First Attempt At Devirtualization/
|
— |
|
|
|
2018-02-21 - FinSpy VM Unpacking Tutorial Part 3- Devirtualization. Phase #3- Fixing The Function-Related Issues/
|
— |
|
|
|
2018-02-21 - FinSpy VM Unpacking Tutorial Part 3- Devirtualization. Phase #4- Second Attempt At Devirtualization/
|
— |
|
|
|
2018-02-21 - FinSpy VM Unpacking Tutorial Part 3- Devirtualization. Phase 1- Deobfuscating FinSpy VM Bytecode Programs/
|
— |
|
|
|
2018-02-21 - FinSpy VM Unpacking Tutorial Part 3- Devirtualization. Phase 2- First Attempt At Devirtualization/
|
— |
|
|
|
2018-02-21 - FinSpy VM Unpacking Tutorial Part 3- Devirtualization. Phase 3- Fixing The Function-Related Issues/
|
— |
|
|
|
2018-02-21 - FinSpy VM Unpacking Tutorial Part 3- Devirtualization. Phase 4- Second Attempt At Devirtualization/
|
— |
|
|
|
2018-02-21 - FinSpy VM Unpacking Tutorial Part 3- Devirtualization/
|
— |
|
|
|
2018-02-21 - FinSpyVM (Static Unpacker for FinSpyVM)/
|
— |
|
|
|
2018-02-21 - Olympic Destroyer- A new Candidate in South Korea/
|
— |
|
|
|
2018-02-21 - Tempting Cedar Spyware/
|
— |
|
|
|
2018-02-22 - Let's Learn- Deeper Dive into Ramnit Banker -VNC IFSB- Remote Control Module/
|
— |
|
|
|
2018-02-23 - Avzhan DDoS bot dropped by Chinese drive-by attack/
|
— |
|
|
|
2018-02-23 - OopsIE! OilRig Uses ThreeDollars to Deliver New Trojan/
|
— |
|
|
|
2018-02-26 - Analyzing the nasty .NET protection of the Ploutus.D malware/
|
— |
|
|
|
2018-02-26 - Anatomy of the Process Environment Block (PEB) (Windows Internals)/
|
— |
|
|
|
2018-02-26 - Nanocore RAT Author Gets 33 Months in Prison/
|
— |
|
|
|
2018-02-26 - Thanatos Ransomware Is First to Use Bitcoin Cash Messes Up Encryption/
|
— |
|
|
|
2018-02-26 - Who Wasn’t Responsible for Olympic Destroyer-/
|
— |
|
|
|
2018-02-27 - Dissecting Hancitor’s Latest 2018 Packer/
|
— |
|
|
|
2018-02-28 - Black Ruby- Combining Ransomware and Coin Miner Malware/
|
— |
|
|
|
2018-02-28 - CannibalRAT targets Brazil/
|
— |
|
|
|
2018-02-28 - Chafer - Latest Attacks Reveal Heightened Ambitions/
|
— |
|
|
|
2018-02-28 - Chafer- Latest Attacks Reveal Heightened Ambitions/
|
— |
|
|
|
2018-02-28 - Sofacy Attacks Multiple Government Entities/
|
— |
|
|
|
2018-03-01 - A Quick Dip into MuddyWater's Recent Activity/
|
— |
|
|
|
2018-03-01 - Blast from the past- stowaway Virut delivered with Chinese DDoS bot/
|
— |
|
|
|
2018-03-01 - FinFisher exposed- A researcher’s tale of defeating traps, tricks, and complex virtual machines/
|
— |
|
|
|
2018-03-02 - Analysing Remcos RAT’s executable/
|
— |
|
|
|
2018-03-02 - McAfee Uncovers Operation Honeybee, a Malicious Document Campaign Targeting Humanitarian Aid Groups/
|
— |
|
|
|
2018-03-02 - Spear-phishing campaign leveraging on MSXSL/
|
— |
|
|
|
2018-03-02 - Tales of a Threat Hunter 2 Following the trace of WMI Backdoors & other nastiness/
|
— |
|
|
|
2018-03-05 - New ComboJack Malware Alters Clipboards to Steal Cryptocurrency/
|
— |
|
|
|
2018-03-05 - Sure, I’ll take that! New ComboJack Malware Alters Clipboards to Steal Cryptocurrency/
|
— |
|
|
|
2018-03-05 - Suricata rules to detect Winnti communication/
|
— |
|
|
|
2018-03-06 - Gozi ISFB Remains Active in 2018, Leverages -Dark Cloud- Botnet For Distribution/
|
— |
|
|
|
2018-03-06 - The Slingshot APT/
|
— |
|
|
|
2018-03-07 - Leaked Ammyy Admin Source Code Turned into Malware/
|
— |
|
|
|
2018-03-07 - Patchwork Continues to Deliver BADNEWS to the Indian Subcontinent/
|
— |
|
|
|
2018-03-07 - Ransomware news- GlobeImposter gets a facelift, GandCrab is still out there/
|
— |
|
|
|
2018-03-08 - Donot Team Leverages New Modular Malware Framework in South Asia/
|
— |
|
|
|
2018-03-08 - Hidden Cobra Targets Turkish Financial Sector With New Bankshot Implant/
|
— |
|
|
|
2018-03-08 - New investigations into the CCleaner incident point to a possible third stage that had keylogger capacities/
|
— |
|
|
|
2018-03-08 - OlympicDestroyer is here to trick the industry/
|
— |
|
|
|
2018-03-08 - Territorial Dispute - NSA’s perspective on APT landscape/
|
— |
|
|
|
2018-03-08 - The devil’s in the Rich header/
|
— |
|
|
|
2018-03-09 - APT-15 is alive and strong - An analysis of RoyalCli and RoyalDNS/
|
— |
|
|
|
2018-03-09 - Cloning chip-and-PIN cards- Brazilian job/
|
— |
|
|
|
2018-03-09 - From Russia(-) with Code/
|
— |
|
|
|
2018-03-09 - Masha and these Bears - 2018 Sofacy Activity/
|
— |
|
|
|
2018-03-09 - Masha and These Bears/
|
— |
|
|
|
2018-03-09 - New Traces Hacking Team Wild/
|
— |
|
|
|
2018-03-09 - New traces of Hacking Team in the wild/
|
— |
|
|
|
2018-03-09 - Sandvine’S Packetlogic Devices APT/
|
— |
|
|
|
2018-03-09 - Sandvine’s PacketLogic Devices Used to Deploy Government Spyware in Turkey and Redirect Egyptian Users to Affiliate Ads-/
|
— |
|
|
|
2018-03-09 - The Slingshot APT FAQ/
|
— |
|
|
|
2018-03-10 - APT15 is alive and strong- An analysis of RoyalCli and RoyalDNS/
|
— |
|
|
|
2018-03-12 - A Study of RATs- Third Timeline Iteration/
|
— |
|
|
|
2018-03-12 - Campaign Possibly Connected to MuddyWater Surfaces in the Middle East and Central Asia/
|
— |
|
|
|
2018-03-12 - Campaign Possibly Connected to “MuddyWater” Surfaces in the Middle East and Central Asia/
|
— |
|
|
|
2018-03-12 - Python decryptor for newer AdWind config file/
|
— |
|
|
|
2018-03-13 - BlackTDS/
|
— |
|
|
|
2018-03-13 - HenBox- The Chickens Come Home to Roost/
|
— |
|
|
|
2018-03-13 - Iranian Threat Group Spear Phishing Campaign/
|
— |
|
|
|
2018-03-13 - Iranian Threat Group Updates Tactics, Techniques and Procedures in Spear Phishing Campaign/
|
— |
|
|
|
2018-03-13 - New Variant of BankBot Banking Trojan Ups Ante, Cashes Out on Android Users/
|
— |
|
|
|
2018-03-13 - OceanLotus/
|
— |
|
|
|
2018-03-13 - Therapeutic Postmortem of Connected Medicine/
|
— |
|
|
|
2018-03-13 - Time of death- A therapeutic postmortem of connected medicine/
|
— |
|
|
|
2018-03-14 - Hermes ransomware distributed to South Koreans via recent Flash zero-day/
|
— |
|
|
|
2018-03-14 - Inception Framework- Alive and Well, and Hiding Behind Proxies/
|
— |
|
|
|
2018-03-14 - Inception Framework/
|
— |
|
|
|
2018-03-14 - New POS Malware PinkKite Takes Flight/
|
— |
|
|
|
2018-03-14 - Tropic Trooper's New Strategy/
|
— |
|
|
|
2018-03-14 - Tropic Trooper’s New Strategy/
|
— |
|
|
|
2018-03-15 - Russian Government Cyber Activity/
|
— |
|
|
|
2018-03-16 - Royal APT - APT15 Repository/
|
— |
|
|
|
2018-03-16 - Suspected Chinese Cyber Espionage Group (TEMP.Periscope) Targeting U.S. Engineering and Maritime Industries/
|
— |
|
|
|
2018-03-20 - Kaspersky's 'Slingshot' report burned an ISIS-focused intelligence operation/
|
— |
|
|
|
2018-03-20 - Rootkit Umbreon - Umreon - x86, ARM samples/
|
— |
|
|
|
2018-03-20 - TeleRAT- Another Android Trojan Leveraging Telegram’s Bot API to Target Iranian Users/
|
— |
|
|
|
2018-03-20 - Tweet on Unlock92 Ransomware/
|
— |
|
|
|
2018-03-21 - Fobos Malvertising Campaign Delivers Bunitu Proxy Trojan via RIG EK/
|
— |
|
|
|
2018-03-21 - GrayBird-Colony/
|
— |
|
|
|
2018-03-21 - TrickBot Banking Trojan Adapts with New Module/
|
— |
|
|
|
2018-03-22 - GhostMiner- Cryptomining Malware Goes Fileless/
|
— |
|
|
|
2018-03-22 - Glupteba is no longer part of Windigo/
|
— |
|
|
|
2018-03-23 - Nine Iranians Charged With Conducting Massive Cyber Theft Campaign on Behalf of the Islamic Revolutionary Guard Corps/
|
— |
|
|
|
2018-03-23 - Sanny malware delivery method updated in recently observed attacks/
|
— |
|
|
|
2018-03-23 - Targeted Attacks on South Korean Organizations/
|
— |
|
|
|
2018-03-23 - The AVCrypt Ransomware Tries To Uninstall Your AV Software/
|
— |
|
|
|
2018-03-25 - Let's Learn- Internals of Iranian-Based Threat Group -Chafer- Malware- Autoit and PowerShell Persistence/
|
— |
|
|
|
2018-03-26 - Silent Librarian- More to the Story of the Iranian Mabna Institute Indictment/
|
— |
|
|
|
2018-03-27 - Evolving Trickbot Adds Detection Evasion and Screen-Locking Features/
|
— |
|
|
|
2018-03-27 - Panda Banker Zeros in on Japanese Targets/
|
— |
|
|
|
2018-03-28 - An in-depth malware analysis of QuantLoader/
|
— |
|
|
|
2018-03-28 - Dissecting Olympic Destroyer – a walk-through/
|
— |
|
|
|
2018-03-28 - Multi-stage Powershell script (Brownies)/
|
— |
|
|
|
2018-03-28 - Quick summary about the Port 8291 scan/
|
— |
|
|
|
2018-03-29 - ChessMaster Adds Updated Tools to Its Arsenal/
|
— |
|
|
|
2018-03-30 - BADFLICK is not so bad!/
|
— |
|
|
|
2018-03-30 - hajime_hashes/
|
— |
|
|
|
2018-03-30 - Reflow JavaScript Backdoor/
|
— |
|
|
|
2018-03-31 - NavRAT Uses US-North Korea Summit As Decoy For Attacks In South Korea/
|
— |
|
|
|
2018-04-02 - Fake AV Investigation Unearths KevDroid, New Android Malware/
|
— |
|
|
|
2018-04-03 - Lazarus KillDisks Central American casino/
|
— |
|
|
|
2018-04-03 - Let's Learn- Trickbot Implements Network Collector Module Leveraging CMD, WMI & LDAP/
|
— |
|
|
|
2018-04-04 - Hostile state actors compromising UK organisations with focus on engineering and industrial control companies/
|
— |
|
|
|
2018-04-04 - Hunting down Dofoil with Windows Defender ATP/
|
— |
|
|
|
2018-04-04 - New MacOS Backdoor Linked to OceanLotus Found/
|
— |
|
|
|
2018-04-04 - Smoking Out the Rarog Cryptocurrency Mining Trojan/
|
— |
|
|
|
2018-04-04 - The Billion-Dollar Hacking Group Behind a String of Big Breaches/
|
— |
|
|
|
2018-04-05 - Analysis of New Agent Tesla Spyware Variant/
|
— |
|
|
|
2018-04-05 - Reaper Group’s Updated Mobile Arsenal/
|
— |
|
|
|
2018-04-05 - Silent Librarian University Attacks Continue Unabated in Days Following Indictment/
|
— |
|
|
|
2018-04-10 - IcedID Banking Trojan Teams up with Ursnif-Dreambot for Distribution/
|
— |
|
|
|
2018-04-10 - Maktub ransomware- possibly rebranded as Iron/
|
— |
|
|
|
2018-04-10 - schneiken/
|
— |
|
|
|
2018-04-10 - ‘FakeUpdates’ campaign leverages multiple website platforms/
|
— |
|
|
|
2018-04-12 - APT Trends report Q1 2018/
|
— |
|
|
|
2018-04-12 - Operation Parliament, who is doing what-/
|
— |
|
|
|
2018-04-12 - Operation Parliament/
|
— |
|
|
|
2018-04-13 - Let's Learn- In-Depth Dive into Gootkit Banker Version 4 Malware Analysis/
|
— |
|
|
|
2018-04-13 - RadRAT- An all-in-one toolkit for complex espionage ops/
|
— |
|
|
|
2018-04-13 - Say “Cheese”- WebMonitor RAT Comes with C2-as-a-Service (C2aaS)/
|
— |
|
|
|
2018-04-15 - This is Spartacus- new ransomware on the block/
|
— |
|
|
|
2018-04-16 - Malware Analysis- New Trojan Double Dropper/
|
— |
|
|
|
2018-04-16 - RAT Gone Rogue- Meet ARS VBS Loader/
|
— |
|
|
|
2018-04-16 - Searching for the Reuse of Mirai Code- Hide ‘N Seek Bot/
|
— |
|
|
|
2018-04-16 - Smoke Loader malware improves after Microsoft spoils its Campaign/
|
— |
|
|
|
2018-04-16 - TrickBot & UACME/
|
— |
|
|
|
2018-04-17 - Decoding network data from a Gh0st RAT variant/
|
— |
|
|
|
2018-04-17 - Iron Tiger Gh0St Rat Variant/
|
— |
|
|
|
2018-04-17 - Recent findings from CCleaner APT investigation reveal that attackers entered the Piriform network via TeamViewer/
|
— |
|
|
|
2018-04-17 - Reversing the Bandios - Colony Malware/
|
— |
|
|
|
2018-04-17 - SquirtDanger- The Swiss Army Knife Malware from Veteran Malware Author TheBottle/
|
— |
|
|
|
2018-04-18 - APT33/
|
— |
|
|
|
2018-04-18 - GOLD GALLEON- How a Nigerian Cyber Crew Plunders the Shipping Industry/
|
— |
|
|
|
2018-04-18 - Stresspaint Malware Campaign Targeting Facebook Credentials/
|
— |
|
|
|
2018-04-18 - Stresspaint Malware Steals Facebook Credentials and Session Cookies/
|
— |
|
|
|
2018-04-18 - Stresspaint Malware Targeting Facebook Credentials/
|
— |
|
|
|
2018-04-18 - Tens of thousands of Facebook accounts compromised in days by malware/
|
— |
|
|
|
2018-04-19 - XLoader Android Spyware and Banking Trojan Distributed via DNS Spoofing/
|
— |
|
|
|
2018-04-20 - Researchers Discover New variants of APT34 Malware/
|
— |
|
|
|
2018-04-20 - XLoader Android Spyware and Banking Trojan Distributed via DNS Spoofing/
|
— |
|
|
|
2018-04-22 - Satan ransomware adds EternalBlue exploit/
|
— |
|
|
|
2018-04-23 - APT10 Hogfish targets Japan with RedLeaves/
|
— |
|
|
|
2018-04-23 - Energetic Bear - attacks on servers/
|
— |
|
|
|
2018-04-23 - Energetic Bear-Crouching Yeti- attacks on servers/
|
— |
|
|
|
2018-04-23 - Muhstik Botnet Exploits Highly Critical Drupal Bug/
|
— |
|
|
|
2018-04-23 - New Orangeworm attack group targets the healthcare sector in the U.S., Europe, and Asia/
|
— |
|
|
|
2018-04-23 - Orangeworm/
|
— |
|
|
|
2018-04-24 - Analyzing Operation GhostSecret - Attack Seeks to Steal Data Worldwide/
|
— |
|
|
|
2018-04-24 - Analyzing Operation GhostSecret- Attack Seeks to Steal Data Worldwide/
|
— |
|
|
|
2018-04-24 - Metamorfo Campaign - Targeting Brazilian Users/
|
— |
|
|
|
2018-04-24 - Metamorfo Campaigns Targeting Brazilian Users/
|
— |
|
|
|
2018-04-24 - New Crossrider variant installs configuration profiles on Macs/
|
— |
|
|
|
2018-04-24 - Sednit update- Analysis of Zebrocy/
|
— |
|
|
|
2018-04-24 - Sednit/
|
— |
|
|
|
2018-04-26 - GravityRAT - The Two-Year Evolution Of An APT Targeting India/
|
— |
|
|
|
2018-04-26 - Necurs Evolves to Evade Spam Detection via Internet Shortcut File/
|
— |
|
|
|
2018-04-27 - GravityRAT malware takes your system's temperature/
|
— |
|
|
|
2018-04-27 - North Korean Hackers Are up to No Good Again/
|
— |
|
|
|
2018-04-27 - Ocean Lotus/
|
— |
|
|
|
2018-05-01 - Legitimate Application AnyDesk Bundled with New Ransomware Variant/
|
— |
|
|
|
2018-05-01 - Lojack Becomes a Double-Agent/
|
— |
|
|
|
2018-05-03 - Analysis of Red Eyes Hacking Group/
|
— |
|
|
|
2018-05-03 - Burning Umbrella Intelligence Report/
|
— |
|
|
|
2018-05-03 - Who’s who in the Zoo/
|
— |
|
|
|
2018-05-03 - ZoopPark - Who's Who in the Zoo/
|
— |
|
|
|
2018-05-04 - Botception with Necurs- Botnet distributes script with bot capabilities/
|
— |
|
|
|
2018-05-07 - EAST Publishes European Fraud Update 2-2018/
|
— |
|
|
|
2018-05-07 - Hide and Seek IoT Botnet resurfaces with new tricks, persistence/
|
— |
|
|
|
2018-05-07 - SynAck targeted ransomware uses the Doppelgänging technique/
|
— |
|
|
|
2018-05-08 - -Hide and Seek- Becomes First IoT Botnet Capable of Surviving Device Reboots/
|
— |
|
|
|
2018-05-08 - Clearing the MuddyWater - Analysis of new MuddyWater Samples/
|
— |
|
|
|
2018-05-08 - Russian hackers posed as IS to threaten military wives/
|
— |
|
|
|
2018-05-09 - Analysis of CVE-2018-8174/
|
— |
|
|
|
2018-05-09 - Gandcrab Ransomware Walks its Way onto Compromised Sites/
|
— |
|
|
|
2018-05-09 - Iran's Hacker Hiearchy Exposed/
|
— |
|
|
|
2018-05-09 - Malware Analysis - PlugX - Part 2/
|
— |
|
|
|
2018-05-09 - Panda Malware Broadens Targets to Cryptocurrency Exchanges and Social Media/
|
— |
|
|
|
2018-05-09 - The King is dead. Long live the King!/
|
— |
|
|
|
2018-05-10 - TreasureHunter Point-of-Sale Malware and Builder Source Code Leaked/
|
— |
|
|
|
2018-05-11 - Attackers Exploit DLL Hijacking to Bypass SmartScreen/
|
— |
|
|
|
2018-05-12 - MS Crypto Derive Functions/
|
— |
|
|
|
2018-05-12 - PRB-Backdoor - A Fully Loaded PowerShell Backdoor with Evil Intentions/
|
— |
|
|
|
2018-05-14 - A Deep Dive Into RIG Exploit Kit Delivering Grobios Trojan/
|
— |
|
|
|
2018-05-14 - StalinLocker Deletes Your Files Unless You Enter the Right Code/
|
— |
|
|
|
2018-05-15 - IR in Heterogeneous Environment/
|
— |
|
|
|
2018-05-15 - N40, the botnet created in Brazil which evolves to attack the Chilean banking sector/
|
— |
|
|
|
2018-05-15 - PAKISTAN- HUMAN RIGHTS UNDER SURVEILLANCE/
|
— |
|
|
|
2018-05-15 - Swedish sports body says anti-doping unit hit by hacking attack/
|
— |
|
|
|
2018-05-17 - A Wicked Family of Bots/
|
— |
|
|
|
2018-05-17 - Analyzing an AZORult Attack – Evasion in a Cloak of Multiple Layers/
|
— |
|
|
|
2018-05-17 - Gozi V3 Technical Update/
|
— |
|
|
|
2018-05-18 - Meet CrowdStrike’s Adversary of the Month for May- MYTHIC LEOPARD/
|
— |
|
|
|
2018-05-18 - Stealth Mango and Tangelo- Nation state mobile surveillanceware stealing data from military & government officials/
|
— |
|
|
|
2018-05-19 - Malicious Powershell Targeting UK Bank Customers/
|
— |
|
|
|
2018-05-21 - An In-Depth Analysis of Samsam Ransomware and BOSS SPIDER/
|
— |
|
|
|
2018-05-21 - Decrypting APT33’s Dropshot Malware with Radare2 and Cutter – Part 1/
|
— |
|
|
|
2018-05-21 - Tiny SHell/
|
— |
|
|
|
2018-05-22 - Nmap Script to scan for Winnti infections/
|
— |
|
|
|
2018-05-22 - The destruction of APT3/
|
— |
|
|
|
2018-05-22 - Turla Mosquito- A shift towards more generic tools/
|
— |
|
|
|
2018-05-22 - Turla Mosquito/
|
— |
|
|
|
2018-05-23 - Andariel Group/
|
— |
|
|
|
2018-05-23 - Confucius Update - New Tools and Techniques, FurtherConnections with Patchwork/
|
— |
|
|
|
2018-05-23 - Justice Department Announces Actions to Disrupt Advanced Persistent Threat 28 Botnet of Infected Routers and Network Storage Devices/
|
— |
|
|
|
2018-05-23 - New VPNFilter malware targets at least 500K networking devices worldwide/
|
— |
|
|
|
2018-05-23 - VPNFilter- New Router Malware with Destructive Capabilities/
|
— |
|
|
|
2018-05-24 - JavaScript based Bot using Github C&C/
|
— |
|
|
|
2018-05-24 - Phorpiex – A decade of spamming from the shadows/
|
— |
|
|
|
2018-05-24 - VPNFilter EXIF to C2 mechanism analysed/
|
— |
|
|
|
2018-05-25 - Analysis of CVE-2018-8174 VBScript 0day and APT actor related to Office targeted attack/
|
— |
|
|
|
2018-05-25 - BackSwap malware finds innovative ways to empty bank accounts/
|
— |
|
|
|
2018-05-28 - BackNet/
|
— |
|
|
|
2018-05-29 - Alert (TA18-149A)- HIDDEN COBRA – Joanap Backdoor Trojan and Brambul Server Message Block Worm/
|
— |
|
|
|
2018-05-29 - Cobalt Renaissance- new attacks and joint operations/
|
— |
|
|
|
2018-05-29 - Iron Cybercrime Group Under The Scope/
|
— |
|
|
|
2018-05-29 - MAR-10135536-3 - HIDDEN COBRA RAT-Worm/
|
— |
|
|
|
2018-05-29 - Mexico Foiled a $110 Million Bank Heist, Then Kept It a Secret/
|
— |
|
|
|
2018-05-30 - Thief in the night- New Nocturnal Stealer grabs data on the cheap/
|
— |
|
|
|
2018-05-31 - APT28 Rollercoaster- The Lowdown on Hijacked Lo/
|
— |
|
|
|
2018-05-31 - DanaBot - A new banking Trojan surfaces Down Under/
|
— |
|
|
|
2018-05-31 - NavRAT Uses US-North Korea Summit As Decoy For Attacks In South Korea/
|
— |
|
|
|
2018-06-01 - MysteryBot - A New Android Banking Trojan Ready For Android 7 and 8/
|
— |
|
|
|
2018-06-01 - Satan Ransomware Spawns New Methods to Spread/
|
— |
|
|
|
2018-06-05 - The Evolution of GandCrab Ransomware/
|
— |
|
|
|
2018-06-06 - Banking Trojans Under Development/
|
— |
|
|
|
2018-06-06 - Operation Prowli- Monetizing 40,000 Victim Machines/
|
— |
|
|
|
2018-06-06 - Operation Prowli/
|
— |
|
|
|
2018-06-06 - Sofacy Group’s Parallel Attacks/
|
— |
|
|
|
2018-06-06 - VPNFilter exploits endpoints, targets/
|
— |
|
|
|
2018-06-06 - VPNFilter Update - VPNFilter exploits endpoints, targets new devices/
|
— |
|
|
|
2018-06-07 - A Totally Tubular Treatise on TRITON and TriStation/
|
— |
|
|
|
2018-06-07 - Adobe Flash Zero Day Targeted Attack/
|
— |
|
|
|
2018-06-07 - InvisiMole- Surprisingly equipped spyware, undercover since 2013/
|
— |
|
|
|
2018-06-07 - New KillDisk Variant Hits Latin American Financial Organizations Again/
|
— |
|
|
|
2018-06-07 - Patchwork APT Group Targets US Think Tanks/
|
— |
|
|
|
2018-06-12 - Deep Dive into UPAS Kit vs. Kronos/
|
— |
|
|
|
2018-06-12 - Trik Spam Botnet Leaks 43 Million Email Addresses/
|
— |
|
|
|
2018-06-13 - Banco de Chile Wiper Attack Just a Cover for $10M SWIFT Heist/
|
— |
|
|
|
2018-06-13 - DDG.Mining.Botnet 近期活动分析/
|
— |
|
|
|
2018-06-13 - Lateral Movement Technique Employed by Hidden Cobra/
|
— |
|
|
|
2018-06-13 - LuckyMouse hits national data center to organize country-level waterholing campaign/
|
— |
|
|
|
2018-06-13 - TrickBot config files/
|
— |
|
|
|
2018-06-14 - Another Potential MuddyWater Campaign uses Powershell-based PRB Backdoor/
|
— |
|
|
|
2018-06-14 - Another Potential MuddyWater Campaign uses Powershell-based PRB-Backdoor/
|
— |
|
|
|
2018-06-14 - DBGer Ransomware Uses EternalBlue and Mimikatz to Spread Across Networks/
|
— |
|
|
|
2018-06-14 - Miragefox - APT15/
|
— |
|
|
|
2018-06-15 - Betabot still alive with multi-stage packing/
|
— |
|
|
|
2018-06-15 - Chinese Cyber-Espionage Group Hacked Government Data Center/
|
— |
|
|
|
2018-06-15 - Hacker Breaches Syscoin GitHub Account and Poisons Official Client/
|
— |
|
|
|
2018-06-15 - Meet CrowdStrike’s Adversary of the Month for June- MUSTANG PANDA/
|
— |
|
|
|
2018-06-17 - Storwize USB Initialization Tool may contain malicious code/
|
— |
|
|
|
2018-06-18 - Decrypting APT33’s Dropshot Malware with Radare2 and Cutter – Part 2/
|
— |
|
|
|
2018-06-18 - Joshua Adam Schulte Charged with the Unauthorized Disclosure of Classified Information and Other Offenses Relating to the Theft of Classified Material from the Central Intelligence Agency/
|
— |
|
|
|
2018-06-18 - New Telegram‑abusing Android RAT discovered in the wild/
|
— |
|
|
|
2018-06-19 - -Hidden Bee- strikes- Kingsoft Internet Security intercepts the world's first Bootkit-class mining botnet/
|
— |
|
|
|
2018-06-19 - Backswap malware analysis/
|
— |
|
|
|
2018-06-19 - FakeSpy Android Information-Stealing Malware Targets Japanese and Korean-Speaking Users/
|
— |
|
|
|
2018-06-19 - FakeSpy Targets Japanese and Korean-Speaking Users/
|
— |
|
|
|
2018-06-19 - Hades, the actor behind Olympic Destroyer is still alive/
|
— |
|
|
|
2018-06-19 - Kardon Loader Looks for Beta Testers/
|
— |
|
|
|
2018-06-19 - Olympic Destroyer is still alive/
|
— |
|
|
|
2018-06-19 - Thrip- Espionage Group Hits Satellite, Telecoms, and Defense Companies/
|
— |
|
|
|
2018-06-20 - Meet MyloBot – A New Highly Sophisticated Never-Seen-Before Botnet That’s Out In The Wild/
|
— |
|
|
|
2018-06-20 - My Little FormBook/
|
— |
|
|
|
2018-06-20 - Thrip/
|
— |
|
|
|
2018-06-22 - Tick Group/
|
— |
|
|
|
2018-06-23 - Andariel Group, A Subgroup of Lazarus Threat Group/
|
— |
|
|
|
2018-06-23 - Full Discloser of Andariel, A Subgroup of Lazarus Threat Group/
|
— |
|
|
|
2018-06-23 - Malware Analysis- Kardon Loader/
|
— |
|
|
|
2018-06-26 - Files Cannot Be Decrypted- Challenge Accepted. Talos Releases ThanatosDecryptor/
|
— |
|
|
|
2018-06-26 - Rancor - Targeted Attacks in South East Asia Using PLAINTEE and DDKONG/
|
— |
|
|
|
2018-06-26 - RANCOR- Targeted Attacks in South East Asia Using PLAINTEE and DDKONG Malware Families/
|
— |
|
|
|
2018-06-26 - Thanatos Ransomware Decryptor Released by the Cisco Talos Group/
|
— |
|
|
|
2018-06-28 - A Brief Overview of the AMMYY RAT Downloader/
|
— |
|
|
|
2018-06-28 - The New Face of Necurs- Noteworthy Changes to Necurs’ Behaviors/
|
— |
|
|
|
2018-06-29 - BackSwap Defrauds Online Banking Customers Using Hidden Input Fields/
|
— |
|
|
|
2018-06-29 - OSX.Dummy/
|
— |
|
|
|
2018-06-29 - Recent LiteHTTP activities and IOCs/
|
— |
|
|
|
2018-06-29 - Where we go, we don't need files- Analysis of fileless malware -Rozena-/
|
— |
|
|
|
2018-07-03 - Hamas Cyber Ops Spied on Hundreds of Israeli Soldiers Using Fake World Cup, Dating Apps/
|
— |
|
|
|
2018-07-03 - Iranian APT Charming Kitten impersonates ClearSky, the security firm that uncovered its campaigns/
|
— |
|
|
|
2018-07-03 - Smoking Guns - Smoke Loader learned new tricks/
|
— |
|
|
|
2018-07-05 - A Look At Recent Tinba Banking Trojan Variant/
|
— |
|
|
|
2018-07-05 - To crypt, or to mine – that is the question/
|
— |
|
|
|
2018-07-06 - BI_D Ransomware/
|
— |
|
|
|
2018-07-06 - HNS Botnet Recent Activities/
|
— |
|
|
|
2018-07-06 - HNS Evolves From IoT to Cross-Platform Botnet/
|
— |
|
|
|
2018-07-06 - Malware “WellMess” Targeting Linux and Windows/
|
— |
|
|
|
2018-07-08 - APT Attack In the Middle East - The Big Bang/
|
— |
|
|
|
2018-07-08 - APT Attack In the Middle East- The Big Bang/
|
— |
|
|
|
2018-07-08 - Hussarini – Targeted Cyber Attack in the Philippines/
|
— |
|
|
|
2018-07-09 - Certificates stolen from Taiwanese tech‑companies misused in Plead malware campaign/
|
— |
|
|
|
2018-07-09 - Certificates Stolen Taiwanese Tech/
|
— |
|
|
|
2018-07-10 - APT Trends Report Q2 2018/
|
— |
|
|
|
2018-07-11 - Chinese Espionage Group TEMP.Periscope Targets Cambodia Ahead of July 2018 Elections and Reveals Broad Operations Globally/
|
— |
|
|
|
2018-07-11 - Hawkeye Keylogger – Reborn v8- An in-depth campaign analysis/
|
— |
|
|
|
2018-07-11 - NotCarbanak Mystery - Source Code Leak/
|
— |
|
|
|
2018-07-11 - Tackling Gootkit's Traps/
|
— |
|
|
|
2018-07-12 - Advanced Mobile Malware Campaign in India uses Malicious MDM/
|
— |
|
|
|
2018-07-12 - Old Botnets never Die, and DDG REFUSE to Fade Away/
|
— |
|
|
|
2018-07-13 - Operation Roman Holiday Hunting the Russian APT28 group/
|
— |
|
|
|
2018-07-13 - Upatre Continued to Evolve with new Anti-Analysis Techniques/
|
— |
|
|
|
2018-07-13 - VPNFilter-affected Devices Still Riddled with 19 Vulnerabilities/
|
— |
|
|
|
2018-07-16 - APT Sidewinder- Tricks powershell, Anti Forensics and execution side loading/
|
— |
|
|
|
2018-07-16 - Author of LuminosityLink Pleads Guilty/
|
— |
|
|
|
2018-07-16 - DanaBot Riding Fake MYOB Invoice Emails/
|
— |
|
|
|
2018-07-16 - Magniber ransomware improves, expands within Asia/
|
— |
|
|
|
2018-07-16 - New Andariel Reconnaissance Tactics Uncovered/
|
— |
|
|
|
2018-07-16 - New Andariel/
|
— |
|
|
|
2018-07-17 - A deep dive down the Vermin RAThole/
|
— |
|
|
|
2018-07-17 - Blackgear Cyberespionage Campaign Resurfaces, Abuses Social Media for C&C Communication/
|
— |
|
|
|
2018-07-17 - The return of Fantomas, or how we deciphered Cryakl/
|
— |
|
|
|
2018-07-17 - Who was behind this unprecedented Cyber attack on Western infrastructure-/
|
— |
|
|
|
2018-07-18 - Dissecting Smoke Loader/
|
— |
|
|
|
2018-07-18 - GandCrab v4.1.2 Encryption Blocking Method (Kill Switch)/
|
— |
|
|
|
2018-07-18 - The Evolution of Emotet- From Banking Trojan to Threat Distributor/
|
— |
|
|
|
2018-07-19 - Killswitch File Now Available for GandCrab v4.1.2 Ransomware/
|
— |
|
|
|
2018-07-19 - Router Crapfest- Malware Author Builds 18,000-Strong Botnet in a Day/
|
— |
|
|
|
2018-07-19 - TA505 Abusing SettingContent-ms within PDF files to Distribute FlawedAmmyy RAT/
|
— |
|
|
|
2018-07-20 - Alert (TA18-201A) Emotet Malware/
|
— |
|
|
|
2018-07-20 - Calisto Trojan for macOS/
|
— |
|
|
|
2018-07-20 - Cyberattack on Singapore health database steals details of 1.5 million, including PM/
|
— |
|
|
|
2018-07-20 - Unit 42 Finds New Mirai and Gafgyt IoT-Linux Botnet Campaigns/
|
— |
|
|
|
2018-07-23 - APT-27 Syria Malware Analysis Report/
|
— |
|
|
|
2018-07-23 - Deobfuscating Emotet’s powershell payload/
|
— |
|
|
|
2018-07-23 - Source Code for Exobot Android Banking Trojan Leaked Online/
|
— |
|
|
|
2018-07-24 - Emotet- The Tricky Trojan that ‘Git Clones’/
|
— |
|
|
|
2018-07-24 - Kronos Reborn/
|
— |
|
|
|
2018-07-25 - Leafminer- New Espionage Campaigns Targeting Middle Eastern Regions/
|
— |
|
|
|
2018-07-25 - OilRig Targets Technology Service Provider and Government Agency with QUADAGENT/
|
— |
|
|
|
2018-07-25 - Parasite HTTP RAT cooks up a stew of stealthy tricks/
|
— |
|
|
|
2018-07-26 - Meet CrowdStrike’s Adversary of the Month for July- WICKED SPIDER/
|
— |
|
|
|
2018-07-26 - Mitigating Emotet, The Most Common Banking Trojan/
|
— |
|
|
|
2018-07-26 - ‘Hidden Bee’ miner delivered via improved drive-by download toolkit/
|
— |
|
|
|
2018-07-27 - Luoxk Malware – Exploiting CVE-2018-2893/
|
— |
|
|
|
2018-07-27 - New Threat Actor Group DarkHydrus Targets Middle East Government/
|
— |
|
|
|
2018-07-28 - New Underminer Exploit Kit Discovered Pushing Bootkits and CoinMiners/
|
— |
|
|
|
2018-07-29 - AdKoob information thief targets Facebook ad purchase info/
|
— |
|
|
|
2018-07-29 - Let's Learn- In-Depth Reversing of Qakbot -qbot- Banker Part 1/
|
— |
|
|
|
2018-07-30 - New version of AZORult stealer improves loading features, spreads alongside ransomware in new campaign/
|
— |
|
|
|
2018-07-30 - Who is Mr Zheng-/
|
— |
|
|
|
2018-07-31 - APT SideWinder - Malicious document targets Vietnamese officials/
|
— |
|
|
|
2018-07-31 - Bisonal Malware Used in Attacks Against Russia and South Korea/
|
— |
|
|
|
2018-07-31 - Malicious document targets Vietnamese officials/
|
— |
|
|
|
2018-07-31 - Multiple Cobalt Personality Disorder/
|
— |
|
|
|
2018-07-31 - SamSam guide to coverage/
|
— |
|
|
|
2018-07-31 - SamSam- The (almost) $6 million ransomware/
|
— |
|
|
|
2018-07-31 - Scanner for CobaltStrike/
|
— |
|
|
|
2018-07-31 - Sophos releases SamSam ransomware report/
|
— |
|
|
|
2018-08-01 - Arrests Put New Focus on CARBON SPIDER Adversary Group/
|
— |
|
|
|
2018-08-01 - Inside Look at Emotet's Global Victims and Malspam Qakbot Payloads/
|
— |
|
|
|
2018-08-01 - Malicious Document Targets Vietnamese Officials/
|
— |
|
|
|
2018-08-01 - On the Hunt for FIN7- Pursuing an Enigmatic and Evasive Global Criminal Operation/
|
— |
|
|
|
2018-08-01 - Threat Alert- DDG 3013 is Out/
|
— |
|
|
|
2018-08-02 - Goblin Panda against the Bears/
|
— |
|
|
|
2018-08-02 - Goldfin - A Persistent Campaign Targeting CIS Countries with SOCKSBOT/
|
— |
|
|
|
2018-08-02 - Gorgon Group - Slithering Between Nation State and Cybercrime/
|
— |
|
|
|
2018-08-02 - How to defend yourself against SamSam ransomware/
|
— |
|
|
|
2018-08-02 - Raspite/
|
— |
|
|
|
2018-08-02 - The Gorgon Group- Slithering Between Nation State and Cybercrime/
|
— |
|
|
|
2018-08-02 - Three Carbanak cyber heist gang members arrested/
|
— |
|
|
|
2018-08-02 - Who is Mr Gao-/
|
— |
|
|
|
2018-08-03 - CERT-FR ALERT BULLETIN/
|
— |
|
|
|
2018-08-03 - Volatility Plugin for Detecting Cobalt Strike Beacon/
|
— |
|
|
|
2018-08-05 - Let's Learn- Diving into the Latest -Ramnit- Banker Malware via -sLoad- PowerShell/
|
— |
|
|
|
2018-08-05 - Ramnit’s Network of Proxy Servers/
|
— |
|
|
|
2018-08-06 - Reversing Cerber - RaaS/
|
— |
|
|
|
2018-08-06 - Who is Mr Zhang-/
|
— |
|
|
|
2018-08-07 - DarkHydrus Uses Phishery to Harvest Credentials in the Middle East/
|
— |
|
|
|
2018-08-07 - Doctor Web discovered a clipper Trojan for Android/
|
— |
|
|
|
2018-08-08 - Export JRAT-Adwind Config with x32dbg/
|
— |
|
|
|
2018-08-09 - Bokbot- The (re)birth of a banker/
|
— |
|
|
|
2018-08-09 - Malware Analysis Report (AR18-221A)/
|
— |
|
|
|
2018-08-09 - More on Huaying Haitai and Laoying Baichaun, the companies associated with APT10. Is there a state connection-/
|
— |
|
|
|
2018-08-09 - North Korea Malware Families/
|
— |
|
|
|
2018-08-13 - KeyPass ransomware/
|
— |
|
|
|
2018-08-15 - APT10 was managed by the Tianjin bureau of the Chinese Ministry of State Security/
|
— |
|
|
|
2018-08-15 - Necurs Targeting Banks with PUB File that Drops FlawedAmmyy/
|
— |
|
|
|
2018-08-16 - Chinese Cyberespionage Originating From Tsinghua University Infrastructure/
|
— |
|
|
|
2018-08-16 - Chinese Cyberrespionage Tshinghua University/
|
— |
|
|
|
2018-08-16 - New modular downloaders fingerprint systems, prepare for more - Part 1- Marap/
|
— |
|
|
|
2018-08-17 - EvilOSX/
|
— |
|
|
|
2018-08-17 - Prince of Persia- The Sands of Foudre/
|
— |
|
|
|
2018-08-18 - AZORult Trojan Serving Aurora Ransomware by MalActor Oktropys/
|
— |
|
|
|
2018-08-20 - Advanced Brazilian Malware Analysis/
|
— |
|
|
|
2018-08-20 - Interesting hidden threat since years -/
|
— |
|
|
|
2018-08-20 - Let's Learn- Dissecting Panda Banker & Modules- Webinject, Grabber & Keylogger DLL Modules/
|
— |
|
|
|
2018-08-20 - Ryuk Ransomware- A Targeted Campaign Break-Down/
|
— |
|
|
|
2018-08-20 - We are taking new steps against broadening threats to democracy/
|
— |
|
|
|
2018-08-21 - Dark Tequila Añejo/
|
— |
|
|
|
2018-08-21 - Microsoft claims win over 'Russian political hackers'/
|
— |
|
|
|
2018-08-21 - Microsoft Disrupts APT28 Hacking Campaign Aimed at US Midterm Elections/
|
— |
|
|
|
2018-08-21 - Operation Red Signature Targets South Korean Companies/
|
— |
|
|
|
2018-08-21 - Supply Chain Attack Operation Red Signature Targets South Korean Organizations/
|
— |
|
|
|
2018-08-21 - Turla Outlook Backdoor/
|
— |
|
|
|
2018-08-22 - BackSwap Malware Now Targets Six Banks in Spain/
|
— |
|
|
|
2018-08-22 - Picking Apart Remcos Botnet-In-A-Box/
|
— |
|
|
|
2018-08-22 - The Untold Story of NotPetya, the Most Devastating Cyberattack in History/
|
— |
|
|
|
2018-08-22 - Turla Outlook Backdoor Uses Clever Tactics for Stealth and Persistence/
|
— |
|
|
|
2018-08-23 - Lazarus Group Deploys Its First Mac Malware in Cryptocurrency Exchange Hack/
|
— |
|
|
|
2018-08-23 - New modular downloaders fingerprint systems - Part 2- AdvisorsBot/
|
— |
|
|
|
2018-08-23 - Operation AppleJeus- Lazarus hits cryptocurrency exchange with fake installer and macOS malware/
|
— |
|
|
|
2018-08-23 - Operation Applejeus/
|
— |
|
|
|
2018-08-24 - Back to School- COBALT DICKENS Targets Universities/
|
— |
|
|
|
2018-08-24 - Cobalt Dickens threat group looks to be similar to indicted hackers/
|
— |
|
|
|
2018-08-24 - Iranian Hackers Charged in March Are Still Actively Phishing Universities/
|
— |
|
|
|
2018-08-25 - Let's Learn- In-Depth Reversing of Recent Gozi ISFB Banking Malware Version 2.16-2.17 (portion of ISFB v3) & -loader.dll-client.dll-/
|
— |
|
|
|
2018-08-26 - Remember Fancy Bear-/
|
— |
|
|
|
2018-08-27 - Lime-Miner/
|
— |
|
|
|
2018-08-27 - North Korean Hacking Group Steals $13.5 Million From Indian Bank/
|
— |
|
|
|
2018-08-28 - CeidPageLock - A Chinese RootKit/
|
— |
|
|
|
2018-08-28 - The rise of mobile banker Asacub/
|
— |
|
|
|
2018-08-29 - Bahamut, Confucius and Patchwork Connected to Urpage/
|
— |
|
|
|
2018-08-29 - BusyGasper – the unfriendly spy/
|
— |
|
|
|
2018-08-29 - Loki Bot- On a hunt for corporate passwords/
|
— |
|
|
|
2018-08-29 - Meet CrowdStrike’s Adversary of the Month for August- GOBLIN PANDA/
|
— |
|
|
|
2018-08-29 - The Urpage Connection to Bahamut, Confucius and Patchwork/
|
— |
|
|
|
2018-08-30 - Cobalt Group - Double the Infection, Double the Fun/
|
— |
|
|
|
2018-08-30 - Cobalt Hacking Group Tests Banks In Russia and Romania/
|
— |
|
|
|
2018-08-30 - Double the Infection, Double the Fun/
|
— |
|
|
|
2018-08-30 - GlobeImposter which has more than 20 variants, is still wildly growing/
|
— |
|
|
|
2018-08-30 - Hackers Are Exposing An Apple Mac Weakness In Middle East Espionage/
|
— |
|
|
|
2018-08-30 - In The Trails of Windshift APT/
|
— |
|
|
|
2018-08-30 - Manually unpacking Anubis APK/
|
— |
|
|
|
2018-08-30 - Reversing malware in a custom format - Hidden Bee elements/
|
— |
|
|
|
2018-08-30 - Reversing malware in a custom format- Hidden Bee elements/
|
— |
|
|
|
2018-08-30 - Rocke- The Champion of Monero Miners/
|
— |
|
|
|
2018-08-30 - Two Birds, One STONE PANDA/
|
— |
|
|
|
2018-08-31 - Who is Mr An, and was he working for APT10-/
|
— |
|
|
|
2018-09-02 - Alleged ‘Satori’ IoT Botnet Operator Sought Media Spotlight, Got Indicted/
|
— |
|
|
|
2018-09-02 - Weekend Project- A Custom IDA Loader Module For The Hidden Bee Malware Family/
|
— |
|
|
|
2018-09-03 - .lockymap Files Virus (PyLocky Ransomware) – Remove and Restore Data/
|
— |
|
|
|
2018-09-04 - CamuBot- New Financial Malware Targets Brazilian Banking Customers/
|
— |
|
|
|
2018-09-04 - OilRig Targets a Middle Eastern Government/
|
— |
|
|
|
2018-09-04 - Silence/
|
— |
|
|
|
2018-09-05 - New Silence hacking group suspected of having ties to cyber-security industry/
|
— |
|
|
|
2018-09-05 - PowerPool malware exploits ALPC LPE zero‑day vulnerability/
|
— |
|
|
|
2018-09-05 - Silence- Moving into the Darkside/
|
— |
|
|
|
2018-09-05 - Windows Task Scheduler Zero Day Exploited by Malware/
|
— |
|
|
|
2018-09-06 - Dissecting DEloader malware with obfuscation/
|
— |
|
|
|
2018-09-06 - North Korean Regime-Backed Programmer Charged With Conspiracy to Conduct Multiple Cyber Attacks and Intrusions/
|
— |
|
|
|
2018-09-06 - Slicing and Dicing CVE-2018-5002 Payloads- New CHAINSHOT Malware/
|
— |
|
|
|
2018-09-07 - Domestic Kitten - An Iranian Surveillance Operation/
|
— |
|
|
|
2018-09-07 - Domestic Kitten APT Operates in Silence Since 2016/
|
— |
|
|
|
2018-09-07 - Goblin Panda Targets Cambodia/
|
— |
|
|
|
2018-09-07 - Let's Learn- Deeper Dive into -IcedID---BokBot- Banking Malware- Part 1/
|
— |
|
|
|
2018-09-07 - Targeted Attack on Indian Ministry of External Affairs Using Crimson Rat/
|
— |
|
|
|
2018-09-09 - Multi-exploit IoT-Linux Botnets Mirai and Gafgyt Target Apache Struts, SonicWall/
|
— |
|
|
|
2018-09-10 - A Closer Look at the Locky Poser, PyLocky Ransomware/
|
— |
|
|
|
2018-09-10 - Android Malware Intercepts SMS 2FA- We have the Logs/
|
— |
|
|
|
2018-09-10 - IBM X-Force Delves Into ExoBot’s Leaked Source Code/
|
— |
|
|
|
2018-09-10 - LuckyMouse signs malicious NDISProxy driver with certificate of Chinese IT company/
|
— |
|
|
|
2018-09-11 - British Airways Fell Victim To Card Scraping Attack/
|
— |
|
|
|
2018-09-11 - New modular downloaders fingerprint systems - Part 3- CobInt/
|
— |
|
|
|
2018-09-11 - The Rise of Targeted Ransomware/
|
— |
|
|
|
2018-09-12 - Emotet IOC/
|
— |
|
|
|
2018-09-12 - Feedify Hacked with Magecart Information Stealing Script/
|
— |
|
|
|
2018-09-12 - Malware Campaign Targeting Jaxx Cryptocurrency Wallet Users Shut Down/
|
— |
|
|
|
2018-09-12 - OilRig Uses Updated BONDUPDATER to Target Middle Eastern Government/
|
— |
|
|
|
2018-09-13 - APT10 Targeting Japanese Corporations Using Updated TTPs/
|
— |
|
|
|
2018-09-14 - Kraken Cryptor Ransomware Masquerading as SuperAntiSpyware Security Program/
|
— |
|
|
|
2018-09-14 - Rektware Ransomware/
|
— |
|
|
|
2018-09-14 - Tunneling Under the Sands/
|
— |
|
|
|
2018-09-14 - Wannamine cryptominer that uses EternalBlue still active/
|
— |
|
|
|
2018-09-17 - Xbash Combines Botnet, Ransomware, Coinmining in Worm that Targets Linux and Windows/
|
— |
|
|
|
2018-09-18 - A taste of our own medicine- How SmokeLoader is deceiving configuration extraction by using binary code as bait/
|
— |
|
|
|
2018-09-18 - Fallout Exploit Kit Used in Malvertising Campaign to Deliver GandCrab Ransomware/
|
— |
|
|
|
2018-09-18 - Hide and Seek- Tracking NSO Group’s Pegasus Spyware to Operations in 45 Countries/
|
— |
|
|
|
2018-09-18 - Magecart Skimming Attack Targets Mobile Users of Hotel Chain Booking Websites/
|
— |
|
|
|
2018-09-19 - Green Spot APT/
|
— |
|
|
|
2018-09-19 - Hex-Rays Microcode API vs. Obfuscating Compiler/
|
— |
|
|
|
2018-09-19 - 绿斑”行动——持续多年的攻击/
|
— |
|
|
|
2018-09-20 - On the Trail of OSX.FairyTale - Adware Playing at Malware/
|
— |
|
|
|
2018-09-20 - Poison Trumpet Vine Operation/
|
— |
|
|
|
2018-09-20 - Sustes Malware- CPU for Monero/
|
— |
|
|
|
2018-09-21 - DanaBot shifts its targeting to Europe, adds new features/
|
— |
|
|
|
2018-09-21 - VIGILANTE MALWARE REMOVES CRYPTOMINERS FROM THE INFECTED DEVICE/
|
— |
|
|
|
2018-09-24 - Adwind Dodges AV via DDE/
|
— |
|
|
|
2018-09-24 - Github Repo for Rubeus/
|
— |
|
|
|
2018-09-26 - VPNFilter III- More Tools for the Swiss Army Knife of Malware/
|
— |
|
|
|
2018-09-27 - APT28 Uses LoJax, First UEFI Rootkit Seen in the Wild/
|
— |
|
|
|
2018-09-27 - Cybercriminals Increasingly Trying to Ensnare the Big Financial Fish/
|
— |
|
|
|
2018-09-27 - LoJax- First UEFI rootkit found in the wild, courtesy of the Sednit group/
|
— |
|
|
|
2018-09-27 - Lojax/
|
— |
|
|
|
2018-09-27 - New KONNI Malware attacking Eurasia and Southeast Asia/
|
— |
|
|
|
2018-09-27 - Torii botnet - Not another Mirai variant/
|
— |
|
|
|
2018-09-28 - Meet CrowdStrike’s Adversary of the Month for September- COBALT SPIDER/
|
— |
|
|
|
2018-10-01 - BianLian - The Malware Dropper That Had A Dream/
|
— |
|
|
|
2018-10-01 - CDS 2018 - Unmasking APT X/
|
— |
|
|
|
2018-10-01 - NOKKI Almost Ties the Knot with DOGCALL- Reaper Group Uses New Malware to Deploy RAT/
|
— |
|
|
|
2018-10-01 - Report Ties North Korean Attacks to New Malware, Linked by Word Macros/
|
— |
|
|
|
2018-10-01 - Roaming Mantis Group Testing Coinhive Miner Redirects on iPhones/
|
— |
|
|
|
2018-10-01 - VB2018 - Who Was Not Responsible for Olympic Destroyer/
|
— |
|
|
|
2018-10-02 - Alert (TA18-275A) HIDDEN COBRA- FASTCash Campaign/
|
— |
|
|
|
2018-10-02 - Alert (TA18-275A)- HIDDEN COBRA – FASTCash Campaign/
|
— |
|
|
|
2018-10-02 - DanaBot Gains Popularity and Targets US Organizations in Large Campaigns/
|
— |
|
|
|
2018-10-03 - APT-38/
|
— |
|
|
|
2018-10-03 - APT37- Final1stspy Reaping the FreeMilk/
|
— |
|
|
|
2018-10-03 - New Betabot campaign under the microscope/
|
— |
|
|
|
2018-10-04 - APT28- New Espionage Operations Target Military and Government Organizations/
|
— |
|
|
|
2018-10-04 - Indicators of Compromise for Malware used by APT28/
|
— |
|
|
|
2018-10-04 - Nomadic Octopus- cyber espionage in Central Asia/
|
— |
|
|
|
2018-10-04 - Shedding Skin – Turla’s Fresh Faces/
|
— |
|
|
|
2018-10-05 - ARS Loader evolution, a new stealer (ZeroEvil) and AirNaine (TA545)/
|
— |
|
|
|
2018-10-08 - BSides Belfast 2018- Lazarus On The Rise- Insights From SWIFT Bank Attacks/
|
— |
|
|
|
2018-10-08 - Cobalt Group 2.0/
|
— |
|
|
|
2018-10-08 - Delivery (Key)Boy/
|
— |
|
|
|
2018-10-09 - Magecart Group Compromises Plugin Used in Thousands of Stores, Makes Rookie Mistake/
|
— |
|
|
|
2018-10-09 - Malware Configs - Pandabanker/
|
— |
|
|
|
2018-10-10 - Gallmaker- New Attack Group Eschews Malware to Live off the Land/
|
— |
|
|
|
2018-10-10 - MuddyWater expands operations/
|
— |
|
|
|
2018-10-11 - Gallmaker/
|
— |
|
|
|
2018-10-11 - GPlayed Trojan - .Net playing with Google Market/
|
— |
|
|
|
2018-10-11 - New TeleBots backdoor- First evidence linking Industroyer to NotPetya/
|
— |
|
|
|
2018-10-14 - Godzilla Loader and the Long Tail of Malware/
|
— |
|
|
|
2018-10-15 - Octopus - Russian-language actor exploits hype over Telegram ban in Central Asia/
|
— |
|
|
|
2018-10-15 - Octopus-infested seas of Central Asia/
|
— |
|
|
|
2018-10-15 - Predator The Thief- In-depth analysis (v2.3.5)/
|
— |
|
|
|
2018-10-17 - ESET unmasks ‘GREYENERGY’ cyber-espionage group/
|
— |
|
|
|
2018-10-17 - Grey Energy - Updated arsenal of one of the most dangerous threat actors/
|
— |
|
|
|
2018-10-17 - GreyEnergy- Updated arsenal of one of the most dangerous threat actors/
|
— |
|
|
|
2018-10-17 - Martymcfly Malware - Targeting Naval Industry/
|
— |
|
|
|
2018-10-17 - Martymcfly/
|
— |
|
|
|
2018-10-17 - Ocean Lotus Spy Rats/
|
— |
|
|
|
2018-10-17 - Software Description- More_eggs/
|
— |
|
|
|
2018-10-17 - The Emergence of the New Azorult 3.3/
|
— |
|
|
|
2018-10-17 - Thrip/
|
— |
|
|
|
2018-10-17 - ‘Operation Oceansalt’ Delivers Wave After Wave/
|
— |
|
|
|
2018-10-18 - APT Sidewinder changes theirs TTPs to install their/
|
— |
|
|
|
2018-10-18 - Operation Oceansalt Attacks South Korea, U.S., and Canada With Source Code From Chinese Hacker Group/
|
— |
|
|
|
2018-10-18 - Tracking Tick Through Recent Campaigns Targeting East Asia/
|
— |
|
|
|
2018-10-19 - DarkPulsar/
|
— |
|
|
|
2018-10-22 - Chalubo botnet wants to DDoS from your server or IoT device/
|
— |
|
|
|
2018-10-22 - Mobile beasts and where to find them — part four/
|
— |
|
|
|
2018-10-23 - godoh- A DNS-over-HTTPS Command & Control Proof of Concept/
|
— |
|
|
|
2018-10-23 - sLoad and Ramnit pairing in sustained campaigns against UK and Italy/
|
— |
|
|
|
2018-10-23 - TRITON Attribution- Russian Government-Owned Lab Most Likely Built Custom Intrusion Tools for TRITON Attackers/
|
— |
|
|
|
2018-10-24 - Waiting for goDoH/
|
— |
|
|
|
2018-10-25 - Cutwail Spam Campaign Uses Steganography to Distribute URLZone/
|
— |
|
|
|
2018-10-25 - Game of Trojans- Dissecting the #Khalesi Infostealer Malware/
|
— |
|
|
|
2018-10-25 - Game of Trojans- Dissecting the Khalesi Infostealer Malware/
|
— |
|
|
|
2018-10-25 - GandCrab Ransomware decryption tool/
|
— |
|
|
|
2018-10-25 - New sLoad malware downloader being leveraged by APT group TA554 to spread Ramnit/
|
— |
|
|
|
2018-10-25 - New Techniques to Uncover and Attribute Cobalt Gang Commodity Builders and Infrastructure Revealed/
|
— |
|
|
|
2018-10-26 - Meet CrowdStrike’s Adversary of the Month for October- DUNGEON SPIDER/
|
— |
|
|
|
2018-10-28 - LiteHTTP/
|
— |
|
|
|
2018-10-29 - GPlayed's younger brother is a banker — and it's after Russian banks/
|
— |
|
|
|
2018-10-30 - Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims/
|
— |
|
|
|
2018-10-30 - U.S. Indicts Chinese Hacker-Spies in Conspiracy to Steal Aerospace Secrets/
|
— |
|
|
|
2018-10-31 - Emotet Awakens With New Campaign of Mass Email Exfiltration/
|
— |
|
|
|
2018-10-31 - Let's Learn- Exploring ZeusVM Banking Malware Hooking Engine/
|
— |
|
|
|
2018-11-01 - CTA Adversary Playbook- Goblin Panda/
|
— |
|
|
|
2018-11-01 - GootKit Analysis (French)/
|
— |
|
|
|
2018-11-01 - Outlaw Group/
|
— |
|
|
|
2018-11-01 - Trickbot Shows Off New Trick- Password Grabber Module/
|
— |
|
|
|
2018-11-03 - Là 1937CN hay OceanLotus hay Lazarus …/
|
— |
|
|
|
2018-11-04 - BetaBot y Fleercivet, dos nuevos informes de código dañino del CCN-CERT/
|
— |
|
|
|
2018-11-05 - Data Talks- Deeper Down the Rabbit Hole- Second-Stage Attack and a Fileless Finale/
|
— |
|
|
|
2018-11-05 - Inception Attackers Target Europe with Year-old Office Vulnerability/
|
— |
|
|
|
2018-11-05 - Let's Learn- In-Depth Reversing of Hancitor Dropper-Loader- 2016 vs 2018 Malware Progression/
|
— |
|
|
|
2018-11-05 - Persian Stalker pillages Iranian users of Instagram and Telegram/
|
— |
|
|
|
2018-11-06 - Threat Spotlight- Inside VSSDestroy Ransomware (variant of Matrix Ransom)/
|
— |
|
|
|
2018-11-07 - BCMPUPnP_Hunter- A 100k Botnet Turns Home Routers to Email Spammers/
|
— |
|
|
|
2018-11-07 - Let’s Learn- Introducing Latest TrickBot Point-of-Sale Finder Module/
|
— |
|
|
|
2018-11-08 - Deep Analysis of TrickBot New Module pwgrab/
|
— |
|
|
|
2018-11-08 - FASTCash- How the Lazarus Group is Emptying Millions from ATMs/
|
— |
|
|
|
2018-11-08 - How the Lazarus Group Is Emptying Millions from Atms/
|
— |
|
|
|
2018-11-08 - Metamorfo Banking Trojan Keeps Its Sights on Brazil/
|
— |
|
|
|
2018-11-09 - Emotet launches major new spam campaign/
|
— |
|
|
|
2018-11-12 - Bug in Malware “TSCookie” - Fails to Read Configuration/
|
— |
|
|
|
2018-11-12 - What’s new in TrickBot- Deobfuscating elements/
|
— |
|
|
|
2018-11-13 - Enter The DarkGate - New Cryptocurrency Mining and Ransomware Campaign/
|
— |
|
|
|
2018-11-13 - HookAds Malvertising Installing Malware via the Fallout Exploit Kit/
|
— |
|
|
|
2018-11-13 - Let's Learn- Dissect Panda Banking Malware's -libinject- Process Injection Module/
|
— |
|
|
|
2018-11-13 - Temp Periscope/
|
— |
|
|
|
2018-11-14 - A new exploit for zero-day vulnerability CVE-2018-8589/
|
— |
|
|
|
2018-11-14 - Big Game Hunting- The Evolution of INDRIK SPIDER From Dridex Wire Fraud to BitPaymer Targeted Ransomware/
|
— |
|
|
|
2018-11-15 - Mylobot Continues Global Infections/
|
— |
|
|
|
2018-11-15 - tRat- New modular RAT appears in multiple email campaigns/
|
— |
|
|
|
2018-11-16 - Analyzing OilRig’s Ops Tempo from Testing to Weaponization to Delivery/
|
— |
|
|
|
2018-11-16 - Exploring Emotet- Examining Emotet’s Activities, Infrastructure/
|
— |
|
|
|
2018-11-16 - Return to ROKRAT!! (feat. FAAAA...Sad...)/
|
— |
|
|
|
2018-11-18 - CozyBear – In from the Cold-/
|
— |
|
|
|
2018-11-19 - Not So Cozy - An Uncomfortable Examination of a Suspected APT29 Phishing/
|
— |
|
|
|
2018-11-19 - Not So Cozy- An Uncomfortable Examination of a Suspected APT29 Phishing Campaign/
|
— |
|
|
|
2018-11-19 - VisionDirect Data Breach Caused by MageCart Attack/
|
— |
|
|
|
2018-11-20 - Information, tools, and signatures around the Conficker computer worm/
|
— |
|
|
|
2018-11-20 - L0RDIX- MULTIPURPOSE ATTACK TOOL/
|
— |
|
|
|
2018-11-20 - Lazarus Continues Heists, Mounts Attacks on Financial Organizations in Latin America/
|
— |
|
|
|
2018-11-20 - Sednit- What’s going on with Zebrocy-/
|
— |
|
|
|
2018-11-20 - Sofacy Continues Global Attacks and Wheels Out New ‘Cannon’ Trojan/
|
— |
|
|
|
2018-11-21 - FIN7 Not Finished – Morphisec Spots New Campaign/
|
— |
|
|
|
2018-11-21 - MageCart Group Sabotages Rival to Ruin Data and Reputation/
|
— |
|
|
|
2018-11-22 - Turla PNG Dropper is back/
|
— |
|
|
|
2018-11-23 - Sload hits Italy. Unveil the power of powershell as a downloader/
|
— |
|
|
|
2018-11-26 - A Look into the Connection Between XLoader and FakeSpy, and Their Possible Ties With the Yanbian Gang/
|
— |
|
|
|
2018-11-26 - Examining XLoader, FakeSpy, and the Yanbian Gang/
|
— |
|
|
|
2018-11-27 - DNSpionage Campaign Targets Middle East/
|
— |
|
|
|
2018-11-27 - Let's Learn- In-Depth on Sofacy Cannon Loader-Backdoor Review/
|
— |
|
|
|
2018-11-27 - Meet CrowdStrike’s Adversary of the Month for November- HELIX KITTEN/
|
— |
|
|
|
2018-11-27 - The SLoad Powershell Threat is Expanding to Italy/
|
— |
|
|
|
2018-11-28 - AutoCAD Malware - Computer Aided Theft/
|
— |
|
|
|
2018-11-28 - MuddyWater Operations in Lebanon and Oman/
|
— |
|
|
|
2018-11-28 - Russian Hackers Haven't Stopped Probing the US Power Grid (Temp.Isotope)/
|
— |
|
|
|
2018-11-28 - Two Iranian Men Indicted for Deploying Ransomware to Extort Hospitals, Municipalities, and Public Institutions, Causing Over $30 Million in Losses/
|
— |
|
|
|
2018-11-28 - Windows Defender ATP device risk score exposes new cyberattack/
|
— |
|
|
|
2018-11-29 - Analysis Of Targeted Attack Against Pakistan By Exploiting InPage Vulnerability And Related APT Groups/
|
— |
|
|
|
2018-11-29 - Attacking Pakistan by Exploiting Inpage - Cn/
|
— |
|
|
|
2018-11-29 - Golden Chickens- Uncovering A Malware-as-a-Service (MaaS) Provider and Two New Threat Actors Using It/
|
— |
|
|
|
2018-11-29 - How a SamSam-like attack happens, and what you can do about it/
|
— |
|
|
|
2018-11-29 - Snakemackerel delivers Zekapab malware/
|
— |
|
|
|
2018-11-30 - New PowerShell-based Backdoor Found in Turkey, Strikingly Similar to MuddyWater Tools/
|
— |
|
|
|
2018-11-30 - The Evolution of BackSwap/
|
— |
|
|
|
2018-11-30 - Virut Resurrects -- Musings on long-term sinkholing/
|
— |
|
|
|
2018-12-01 - Tracking Mirai Variants (Ya Liu & Hui Wang)/
|
— |
|
|
|
2018-12-02 - The Ransomware Doctor Without A Cure/
|
— |
|
|
|
2018-12-03 - Analysis of cyberattack on U.S. think tanks, non-profits, public sector by unidentified attackers/
|
— |
|
|
|
2018-12-04 - Hide ‘N Seek botnet continues infecting devices with default credentials, building a P2P network and more/
|
— |
|
|
|
2018-12-04 - Malspam pushing Lokibot malware/
|
— |
|
|
|
2018-12-05 - APT review of the year/
|
— |
|
|
|
2018-12-05 - Farewell to Kelihos and ZOMBIE SPIDER/
|
— |
|
|
|
2018-12-05 - STOLEN PENCIL Campaign Targets Academia/
|
— |
|
|
|
2018-12-05 - The Dark Side of the ForSSHe/
|
— |
|
|
|
2018-12-05 - Torpig/
|
— |
|
|
|
2018-12-05 - Trickbot’s Tricks/
|
— |
|
|
|
2018-12-06 - DanaBot evolves beyond banking Trojan with new spam‑sending capability/
|
— |
|
|
|
2018-12-07 - Mac malware combines EmPyre backdoor and XMRig miner/
|
— |
|
|
|
2018-12-07 - Netbooks, RPis, & Bash Bunny Gear - Attacking Banks from the Inside/
|
— |
|
|
|
2018-12-10 - Collecting Malicious Particles from Neutrino Botnets/
|
— |
|
|
|
2018-12-10 - Let's Learn- Reviewing Sofacy's -Zebrocy- C++ Loader- Advanced Insight/
|
— |
|
|
|
2018-12-10 - Let's Learn- Reviewing Sofacy's -Zebrocy- CPlusPlus Loader- Advanced Insight/
|
— |
|
|
|
2018-12-10 - Seedworm- Group Compromises Government Agencies, Oil & Gas, NGOs, Telecoms, and IT Firms/
|
— |
|
|
|
2018-12-11 - New Satan ransomware variant ‘Lucky’ exposes 10 server-side vulnerabilities/
|
— |
|
|
|
2018-12-11 - Poking the Bear - Three-Year Campaign Targets Russian Critical Infrastructure/
|
— |
|
|
|
2018-12-12 - Dear Joohn- The Sofacy Group’s Global Campaign/
|
— |
|
|
|
2018-12-12 - Donot Group/
|
— |
|
|
|
2018-12-12 - Operation Sharpshooter/
|
— |
|
|
|
2018-12-12 - The TrickBot and MikroTik connection/
|
— |
|
|
|
2018-12-12 - Zero-day in Windows Kernel Transaction Manager (CVE-2018-8611)/
|
— |
|
|
|
2018-12-12 - ‘Operation Sharpshooter’ Targets Global Defense, Critical Infrastructure/
|
— |
|
|
|
2018-12-13 - POWERSING - From LNK Files To Janicab Through YouTube & Twitter/
|
— |
|
|
|
2018-12-13 - Shamoon 3 Targets Oil and Gas Organization/
|
— |
|
|
|
2018-12-13 - The Return of The Charming Kitten/
|
— |
|
|
|
2018-12-13 - Tiledeb - Analyzing the Implant from the Shadow Brokers' Leak/
|
— |
|
|
|
2018-12-14 - Cybercriminals Use Malicious Memes that Communicate with Malware/
|
— |
|
|
|
2018-12-14 - Shamoon- Destructive Threat Re-Emerges with New Sting in its Tail/
|
— |
|
|
|
2018-12-18 - Scumbag Combo- Agent Tesla and XpertRAT/
|
— |
|
|
|
2018-12-18 - Sofacy Creates New ‘Go’ Variant of Zebrocy Tool/
|
— |
|
|
|
2018-12-18 - URSNIF, EMOTET, DRIDEX and BitPaymer Gangs Linked by a Similar Loader/
|
— |
|
|
|
2018-12-18 - “GreenSpot”Operations Grow For Many Years/
|
— |
|
|
|
2018-12-19 - Analysis of Smoke Loader in New Tsunami Campaign/
|
— |
|
|
|
2018-12-19 - Danabot's Travels, A Global Perspective/
|
— |
|
|
|
2018-12-19 - MALSPAM PUSHING THE MYDOOM WORM IS STILL A THING/
|
— |
|
|
|
2018-12-19 - Shamoon Attackers Employ New Tool Kit to Wipe Infected Systems/
|
— |
|
|
|
2018-12-20 - Chinese Hackers Indicted - Members of APT 10 Group Targeted Intellectual Property and Confidential Business Information/
|
— |
|
|
|
2018-12-20 - Dissecting the Danabot Payload Targeting Italy/
|
— |
|
|
|
2018-12-20 - Middle East Cyber-Espionage- analyzing WindShift's implant- OSX.WindTail (part 1)/
|
— |
|
|
|
2018-12-20 - Wind Shift/
|
— |
|
|
|
2018-12-20 - With Mirai Comes Miori- IoT Botnet Delivered via ThinkPHP Remote Code Execution Exploit/
|
— |
|
|
|
2018-12-21 - FIN7 Not Finished - Morphisec Spots New Campaign/
|
— |
|
|
|
2018-12-21 - Let's Learn- In-Depth on APT28-Sofacy Zebrocy Golang Loader/
|
— |
|
|
|
2018-12-24 - Let’s dig into Vidar – An Arkei Copycat-Forked Stealer (In-depth analysis)/
|
— |
|
|
|
2018-12-27 - The Enigmatic Roma225 Campaign/
|
— |
|
|
|
2018-12-28 - Goblin Panda changes the dropper and reuses the old infrastructure/
|
— |
|
|
|
2018-12-29 - Malware attack disrupts delivery of L.A. Times and Tribune papers across the U.S/
|
— |
|
|
|
2018-12-30 - Retefe unpacker/
|
— |
|
|
|
2018-12-31 - FastCashMalwareDissected/
|
— |
|
|