|
Go up
|
— |
— |
|
|
2022-01-01 - Analyzing an IcedID Loader Document/
|
— |
|
|
|
2022-01-01 - Brute Ratel/
|
— |
|
|
|
2022-01-02 - -Cracking Open the Malware Piñata- Series- Intro to Dynamic Analysis with RedLineStealer/
|
— |
|
|
|
2022-01-02 - Analyzing a Magnitude EK Appx Package Dropping Magniber/
|
— |
|
|
|
2022-01-02 - Malicious CSV text files used to install BazarBackdoor malware/
|
— |
|
|
|
2022-01-02 - MMON (aka KAPTOXA)/
|
— |
|
|
|
2022-01-02 - SBIDIOT IoT Malware- miner edition/
|
— |
|
|
|
2022-01-02 - White Rabbit Ransomware and the F5 Backdoor/
|
— |
|
|
|
2022-01-03 - A Tale of Two Dropper Scripts for Agent Tesla/
|
— |
|
|
|
2022-01-03 - BlackLotusLabs - KONNI/
|
— |
|
|
|
2022-01-03 - Distribution of Redline Stealer Disguised as Software Crack/
|
— |
|
|
|
2022-01-03 - Malicious Telegram Installer Drops Purple Fox Rootkit/
|
— |
|
|
|
2022-01-04 - Extracting Indicators from a Packed Mirai Sample/
|
— |
|
|
|
2022-01-04 - Leveraging the Power of KQL in Incident Response/
|
— |
|
|
|
2022-01-04 - Purple Fox malware is actively distributed via Telegram Installers/
|
— |
|
|
|
2022-01-05 - 2022 Q1 Threat Intel Final/
|
— |
|
|
|
2022-01-05 - Analysis Report on Kimsuky Group’s APT Attacks (AppleSeed, PebbleDash)/
|
— |
|
|
|
2022-01-05 - Can You Trust a File’s Digital Signature- New Zloader Campaign exploits Microsoft’s Signature Verification putting users at risk/
|
— |
|
|
|
2022-01-05 - Elephant Beetle - FINANCIAL THEFT OPERATION/
|
— |
|
|
|
2022-01-05 - Elephant Beetle- Uncovering an Organized Financial-Theft Operation/
|
— |
|
|
|
2022-01-05 - Malware Analysis Spotlight- Kuzuluy Phishing Kit/
|
— |
|
|
|
2022-01-05 - New Konni Campaign Kicks Off the New Year by Targeting Russian Ministry of Foreign Affairs/
|
— |
|
|
|
2022-01-05 - SIDECOPY APT- From Windows to nix/
|
— |
|
|
|
2022-01-05 - Technical Analysis of CVE-2021-1732/
|
— |
|
|
|
2022-01-05 - Threat Intelligence Report- The Evolution of Doppel Spider from BitPaymer to Grief Ransomware/
|
— |
|
|
|
2022-01-06 - A “GULP” of PlugX/
|
— |
|
|
|
2022-01-06 - Malware Analysis Spotlight- XLoader’ Cross-platform Support Utilizing XBinder/
|
— |
|
|
|
2022-01-06 - Night Sky is the latest ransomware targeting corporate networks/
|
— |
|
|
|
2022-01-06 - NOBELIUM’s EnvyScout infection chain goes in the registry, targeting embassies/
|
— |
|
|
|
2022-01-06 - Rook Ransomware Analysis/
|
— |
|
|
|
2022-01-06 - Unpacking Emotet malware part 01/
|
— |
|
|
|
2022-01-07 - Patchwork APT caught in its own web/
|
— |
|
|
|
2022-01-07 - Technical Analysis of Code-Signed Blister Malware Campaign Part 1/
|
— |
|
|
|
2022-01-07 - Technical Analysis of Code-Signed “Blister” Malware Campaign (Part 1)/
|
— |
|
|
|
2022-01-07 - Unpacking CVE-2021-40444- A Deep Technical Analysis of an Office RCE Exploit/
|
— |
|
|
|
2022-01-07 - Unpacking Emotet malware part 02/
|
— |
|
|
|
2022-01-08 - Trojanized dnSpy app drops malware cocktail on researchers, devs/
|
— |
|
|
|
2022-01-08 - Unpacking Hancitor malware/
|
— |
|
|
|
2022-01-09 - Inspecting a PowerShell Cobalt Strike Beacon/
|
— |
|
|
|
2022-01-09 - Malware Headliners- Dridex/
|
— |
|
|
|
2022-01-09 - Observed malicious IOCs for the ChromeLoader-CS_installer aka Choziosi Loader Malware/
|
— |
|
|
|
2022-01-09 - Unpacking Vmprotect packer/
|
— |
|
|
|
2022-01-10 - Abcbot - An Evolution of Xanthe/
|
— |
|
|
|
2022-01-10 - COVID Omicron Variant Lure Used to Distribute RedLine Stealer/
|
— |
|
|
|
2022-01-10 - Detecting Malware Script Loaders using Remcos- Threat Research Release December 2021/
|
— |
|
|
|
2022-01-10 - TokyoX- DLL side-loading an unknown artifact/
|
— |
|
|
|
2022-01-11 - APT35 exploits Log4j vulnerability to distribute new modular PowerShell toolkit/
|
— |
|
|
|
2022-01-11 - New SysJoker Backdoor Targets Windows, Linux, and macOS/
|
— |
|
|
|
2022-01-11 - New SysJoker backdoor targets Windows, macOS, and Linux/
|
— |
|
|
|
2022-01-11 - Reimplementation of Expiro's DGA/
|
— |
|
|
|
2022-01-11 - Signed DLL campaigns as a service/
|
— |
|
|
|
2022-01-11 - Signed kernel drivers – Unguarded gateway to Windows’ core/
|
— |
|
|
|
2022-01-11 - TellYouThePass Ransomware Analysis Reveals a Modern Reinterpretation Using Golang/
|
— |
|
|
|
2022-01-11 - Threat Analysis Report- DatopLoader Exploits ProxyShell to Deliver QBOT and Cobalt Strike/
|
— |
|
|
|
2022-01-11 - Understanding and Mitigating Russian Threats/
|
— |
|
|
|
2022-01-11 - Unpacking Dridex malware/
|
— |
|
|
|
2022-01-12 - 2021 Gorgon Group APT Operation/
|
— |
|
|
|
2022-01-12 - Abusing Microsoft Office Using Malicious Web Archive Files/
|
— |
|
|
|
2022-01-12 - Analysis of njRAT PowerPoint Macros/
|
— |
|
|
|
2022-01-12 - Deep analysis agent tesla malware/
|
— |
|
|
|
2022-01-12 - Exploit Kits vs. Google Chrome/
|
— |
|
|
|
2022-01-12 - Forensics Analysis of the NSO Group’s Pegasus Spyware/
|
— |
|
|
|
2022-01-12 - Hackers take over diplomat's email, target Russian deputy minister/
|
— |
|
|
|
2022-01-12 - Iranian intel cyber suite of malware uses open source tools/
|
— |
|
|
|
2022-01-12 - Magniber Ransomware Being Distributed via Microsoft Edge and Google Chrome/
|
— |
|
|
|
2022-01-12 - MuddyWater - Recent Activity of an Iranian State-Sponsored Threat Actor/
|
— |
|
|
|
2022-01-12 - Nanocore, Netwire and AsyncRAT spreading campaign uses public cloud infrastructure/
|
— |
|
|
|
2022-01-12 - Newly Found Malware Threatens IoT Devices/
|
— |
|
|
|
2022-01-12 - NightSky Ransomware – just a Rook RW fork in VMProtect suit/
|
— |
|
|
|
2022-01-12 - OceanLotus hackers turn to web archive files to deploy backdoors/
|
— |
|
|
|
2022-01-12 - TokyoX- DLL side-loading an unknown artifact (Part 2)/
|
— |
|
|
|
2022-01-12 - Unpacking Ramnit malware/
|
— |
|
|
|
2022-01-12 - Wading Through Muddy Waters - Recent Activity of an Iranian State-Sponsored Threat Actor/
|
— |
|
|
|
2022-01-13 - Decrypting Qakbot’s Encrypted Registry Keys/
|
— |
|
|
|
2022-01-13 - FIN7 Uses Flash Drives to Spread Remote Access Trojan/
|
— |
|
|
|
2022-01-13 - Linux-Targeted Malware Increases by 35 Percent in 2021- XorDDoS, Mirai and Mozi Most Prevalent/
|
— |
|
|
|
2022-01-13 - North Korean Hackers Have Prolific Year/
|
— |
|
|
|
2022-01-13 - The BlueNoroff cryptocurrency hunt is still on/
|
— |
|
|
|
2022-01-13 - Threat Thursday- Jupyter Infostealer is a Master of Disguise/
|
— |
|
|
|
2022-01-13 - Unpacking Remcos malware/
|
— |
|
|
|
2022-01-14 - How Attackers Use XLL Malware to Infect Systems/
|
— |
|
|
|
2022-01-14 - Multidex trick to unpack Android-BianLian/
|
— |
|
|
|
2022-01-14 - Ransom.Win32.WHITERABBIT.YACAET/
|
— |
|
|
|
2022-01-14 - Storm in -Safe Haven-- Takeaways from Russian Authorities Takedown of REvil/
|
— |
|
|
|
2022-01-15 - BazarLoader - Back from Holiday Break/
|
— |
|
|
|
2022-01-15 - Destructive malware targeting Ukrainian organizations (DEV-0586)/
|
— |
|
|
|
2022-01-15 - Donot Team — Indicators of Compromise/
|
— |
|
|
|
2022-01-15 - Malware attacks targeting Ukraine government (DEV-0586)/
|
— |
|
|
|
2022-01-15 - Malware Headliners- Qakbot/
|
— |
|
|
|
2022-01-15 - Operation Bleeding Bear/
|
— |
|
|
|
2022-01-15 - Threat Advisory- VMware Horizon Servers Actively Being Hit With Cobalt Strike (by DEV-0401)/
|
— |
|
|
|
2022-01-16 - Analyzing a CACTUSTORCH HTA Leading to Cobalt Strike/
|
— |
|
|
|
2022-01-16 - CreateHiddenAccount/
|
— |
|
|
|
2022-01-17 - An Analysis of Earth Lusca’s Operations/
|
— |
|
|
|
2022-01-17 - Android-BianLian payload/
|
— |
|
|
|
2022-01-17 - AvosLocker Ransomware Linux Version Targets VMware ESXi Servers/
|
— |
|
|
|
2022-01-17 - Cyber espionage campaign targets renewable energy companies/
|
— |
|
|
|
2022-01-17 - Emotet's Excel 4.0 Macros Dropping DLLs/
|
— |
|
|
|
2022-01-17 - IOCs for Astaroth-Guildma malware infection/
|
— |
|
|
|
2022-01-17 - Resources for DFIR Professionals Responding to WhisperGate Malware/
|
— |
|
|
|
2022-01-17 - The Chaos Ransomware Can Be Ravaging/
|
— |
|
|
|
2022-01-18 - Analysis of Destructive Malware (WhisperGate) targeting Ukraine/
|
— |
|
|
|
2022-01-18 - Annual APT Group Threat Research Report-knownsec/
|
— |
|
|
|
2022-01-18 - BlackCat Ransomware - Highly-Configurable, Rust-Driven RaaS On The Prowl For Victims/
|
— |
|
|
|
2022-01-18 - DoNot Go! Do not respawn!/
|
— |
|
|
|
2022-01-18 - Dozens of Computers in Ukraine Wiped with Destructive Malware in Coordinated Attack/
|
— |
|
|
|
2022-01-18 - ESET Research investigates Donot Team- Cyberespionage targeting military & governments in South Asia/
|
— |
|
|
|
2022-01-18 - Evolved phishing- Device registration trick adds to phishers’ toolbox for victims without MFA/
|
— |
|
|
|
2022-01-18 - FORMBOOK Adopts CAB-less Approach/
|
— |
|
|
|
2022-01-18 - Info-Stealing Tool Posing As Naver OTP/
|
— |
|
|
|
2022-01-18 - New Ransomware Spotted- White Rabbit and Its Evasion Tactics/
|
— |
|
|
|
2022-01-18 - SideCopy Arsenal Update- Golang-based Linux stealth tools surface/
|
— |
|
|
|
2022-01-19 - 0.0.0.0 in Emotet Spambot Traffic/
|
— |
|
|
|
2022-01-19 - Campaigns abusing corporate trusted infrastructure hunt for corporate credentials on ICS networks/
|
— |
|
|
|
2022-01-19 - Collecting Cobalt Strike Beacons with the Elastic Stack/
|
— |
|
|
|
2022-01-19 - DDoS IRC Bot Malware (GoLang) Being Distributed via Webhards/
|
— |
|
|
|
2022-01-19 - Extracting Cobalt Strike Beacon Configurations/
|
— |
|
|
|
2022-01-19 - Kraken the Code on Prometheus/
|
— |
|
|
|
2022-01-19 - Malware vaccines can prevent pandemics, yet are rarely used/
|
— |
|
|
|
2022-01-19 - Meet the Malware Families Helping Hackers Steal and Mine Millions in Cryptocurrency/
|
— |
|
|
|
2022-01-19 - New BHUNT malware targets your crypto wallets and passwords/
|
— |
|
|
|
2022-01-19 - One Source to Rule Them All- Chasing AVADDON Ransomware/
|
— |
|
|
|
2022-01-19 - Operation Bleeding Bear/
|
— |
|
|
|
2022-01-19 - Technical Analysis of the WhisperGate Malicious Bootloader/
|
— |
|
|
|
2022-01-19 - WhisperGate/
|
— |
|
|
|
2022-01-19 - Zloader Installs Remote Access Backdoors and Delivers Cobalt Strike/
|
— |
|
|
|
2022-01-20 - [SANS ISC] RedLine Stealer Delivered Through FTP/
|
— |
|
|
|
2022-01-20 - Anticipating and Preparing for Russian Cyber Activity/
|
— |
|
|
|
2022-01-20 - Anticipating Cyber Threats as the Ukraine Crisis Escalates/
|
— |
|
|
|
2022-01-20 - Buer Loader Analysis, a Rusted malware program/
|
— |
|
|
|
2022-01-20 - Deep Dive Into Ragnar_locker Ransomware Gang/
|
— |
|
|
|
2022-01-20 - Fallout from Log4Shell-related Vietnamese Cryptocurrency Exchange Attack- KYC Data for Sale on Dark Web/
|
— |
|
|
|
2022-01-20 - FBI links Diavol ransomware to the TrickBot cybercrime group/
|
— |
|
|
|
2022-01-20 - Fresh Phish- Phishers Lure Victims with Fake Invites to Bid on Nonexistent Federal Projects/
|
— |
|
|
|
2022-01-20 - Indicators of Compromise Associated with Diavol Ransomware/
|
— |
|
|
|
2022-01-20 - Log4j Exploit Hits Again- Vulnerable VMWare Horizon Servers at Risk/
|
— |
|
|
|
2022-01-20 - MoonBounce- the dark side of UEFI firmware/
|
— |
|
|
|
2022-01-20 - New espionage attack by Molerats APT targeting users in the Middle East/
|
— |
|
|
|
2022-01-20 - New STRRAT RAT Phishing Campaign/
|
— |
|
|
|
2022-01-20 - RedLine Stealer Delivered Through FTP/
|
— |
|
|
|
2022-01-20 - Return of Pseudo Ransomware/
|
— |
|
|
|
2022-01-20 - Technical details of MoonBounce’s implementation/
|
— |
|
|
|
2022-01-20 - Threat Brief- Ongoing Russia and Ukraine Cyber Conflict/
|
— |
|
|
|
2022-01-20 - Threat Thursday- Purple Fox Rootkit/
|
— |
|
|
|
2022-01-20 - Treasury Sanctions Russian-Backed Actors Responsible for Destabilization Activities in Ukraine (Taras Kozak, Oleh Voloshyn, Volodymyr Oliynyk, Vladimir Sivkovich)/
|
— |
|
|
|
2022-01-20 - Update on WhisperGate, Destructive Malware Targeting Ukraine – Threat Intelligence & Protections Update/
|
— |
|
|
|
2022-01-21 - A deeper UEFI dive into MoonBounce/
|
— |
|
|
|
2022-01-21 - Analysis of Xloader’s C2 Network Encryption/
|
— |
|
|
|
2022-01-21 - Analyzing an IDA Pro anti-decompilation code/
|
— |
|
|
|
2022-01-21 - Better Together- The Power of Managed Cybersecurity Services in the Face of Pressing Global Security Challenges/
|
— |
|
|
|
2022-01-21 - Creating a safe dummy C&C to test Android bots/
|
— |
|
|
|
2022-01-21 - Deep Analysis Agent Tesla Malware/
|
— |
|
|
|
2022-01-21 - Disruptive Attacks in Ukraine Likely Linked to Escalating Tensions/
|
— |
|
|
|
2022-01-21 - Emotet Spam Abuses Unconventional IP Address Formats to Spread Malware/
|
— |
|
|
|
2022-01-21 - Hackers Were in Ukraine Systems Months Before Deploying Wiper/
|
— |
|
|
|
2022-01-21 - Ukraine Campaign Delivers Defacement and Wipers, in Continued Escalation/
|
— |
|
|
|
2022-01-21 - WhisperGate Malware/
|
— |
|
|
|
2022-01-21 - WhisperGate- Not NotPetya/
|
— |
|
|
|
2022-01-22 - Analysis of the Cyberattack on Ukrainian Government Resources/
|
— |
|
|
|
2022-01-22 - BazarISO Analysis - Loading with Advpack.dll/
|
— |
|
|
|
2022-01-22 - Malware Headliners- Emotet/
|
— |
|
|
|
2022-01-23 - [QuickNote] Emotet epoch4 & epoch5 tactics/
|
— |
|
|
|
2022-01-23 - Analysis of a DLL Downloader/
|
— |
|
|
|
2022-01-23 - HCrypt Injecting BitRAT using PowerShell, HTAs, and .NET/
|
— |
|
|
|
2022-01-24 - Analysis and Impact of LockBit Ransomware’s First Linux and VMware ESXi Variant/
|
— |
|
|
|
2022-01-24 - Cobalt Strike, a Defender’s Guide – Part 2/
|
— |
|
|
|
2022-01-24 - Deep Dive into Trickbot's Web Injection/
|
— |
|
|
|
2022-01-24 - DTPacker – a .NET Packer with a Curious Password/
|
— |
|
|
|
2022-01-24 - How BRATA is monitoring your bank account/
|
— |
|
|
|
2022-01-24 - Infected PowerPoint Files Using Cloud Services to Deliver Multiple Malware/
|
— |
|
|
|
2022-01-24 - Intelligence Insights- January 2022/
|
— |
|
|
|
2022-01-24 - Investigating APT36 or Earth Karkaddans Attack Chain and Malware Arsenal/
|
— |
|
|
|
2022-01-24 - Investigating APT36 or Earth Karkaddan’s Attack Chain and Malware Arsenal/
|
— |
|
|
|
2022-01-24 - Log4Shell- No Mass Abuse, But No Respite, What Happened-/
|
— |
|
|
|
2022-01-24 - New TransparenTribe Operation- Targeting India with weaponized COVID-19 lure documents/
|
— |
|
|
|
2022-01-24 - Scammers are creating new fraudulent Crypto Tokens and misconfiguring smart contract’s to steal funds/
|
— |
|
|
|
2022-01-24 - TrickBot Bolsters Layered Defenses to Prevent Injection Research/
|
— |
|
|
|
2022-01-24 - Web Skimming Attacks Using Google Tag Manager/
|
— |
|
|
|
2022-01-25 - An Exhaustively Analyzed IDB for ComLook/
|
— |
|
|
|
2022-01-25 - Analyzing OSX.DazzleSpy/
|
— |
|
|
|
2022-01-25 - BianLian C&C domain name/
|
— |
|
|
|
2022-01-25 - Chasing Chaes Kill Chain/
|
— |
|
|
|
2022-01-25 - Emotet Stops Using 0.0.0.0 in Spambot Traffic/
|
— |
|
|
|
2022-01-25 - Hacktivist group shares details related to Belarusian Railways hack/
|
— |
|
|
|
2022-01-25 - How to Analyze Malware for Technical Writing/
|
— |
|
|
|
2022-01-25 - New DeadBolt ransomware targets QNAP devices, asks 50 BTC for master key/
|
— |
|
|
|
2022-01-25 - New Threat Campaign Identified- AsyncRAT Introduces a New Delivery Technique/
|
— |
|
|
|
2022-01-25 - Prime Ministers Office Compromised Details of Recent Espionage Campaign/
|
— |
|
|
|
2022-01-25 - Prime Minister’s Office Compromised- Details of Recent Espionage Campaign/
|
— |
|
|
|
2022-01-25 - Ransoms Demanded for Hijacked Instagram Accounts/
|
— |
|
|
|
2022-01-25 - Threats Looming Over the Horizon/
|
— |
|
|
|
2022-01-25 - TianySpy Malware Uses Smishing Disguised as Message From Telco/
|
— |
|
|
|
2022-01-25 - WastedLocker malware analysis/
|
— |
|
|
|
2022-01-25 - Watering hole deploys new macOS malware DazzleSpy in Asia/
|
— |
|
|
|
2022-01-25 - Watering hole deploys new macOS malware, DazzleSpy, in Asia/
|
— |
|
|
|
2022-01-25 - Weaponization of Excel Add-Ins Part 1- Malicious XLL Files and Agent Tesla Case Studies/
|
— |
|
|
|
2022-01-25 - Windows services lay the groundwork for a Midas ransomware attack/
|
— |
|
|
|
2022-01-26 - [QuickNote] Analysis of malware suspected to be an APT attack targeting Vietnam/
|
— |
|
|
|
2022-01-26 - ALPHV (BlackCat) Ransomware/
|
— |
|
|
|
2022-01-26 - ALPHV ransomware gang analysis/
|
— |
|
|
|
2022-01-26 - Analysis of a Management IP Address linked to Molerats APT/
|
— |
|
|
|
2022-01-26 - BfV Cyber-Brief/
|
— |
|
|
|
2022-01-26 - BotenaGo strikes again - malware source code uploaded to GitHub/
|
— |
|
|
|
2022-01-26 - Financially Motivated Mobile Scamware Exceeds 100M Installations/
|
— |
|
|
|
2022-01-26 - German govt warns of APT27 hackers backdooring business networks/
|
— |
|
|
|
2022-01-26 - Hackers Using New Evasive Technique to Deliver AsyncRAT Malware/
|
— |
|
|
|
2022-01-26 - KONNI evolves into stealthier RAT/
|
— |
|
|
|
2022-01-26 - Log4U Shell4Me/
|
— |
|
|
|
2022-01-26 - Log4U, Shell4Me/
|
— |
|
|
|
2022-01-26 - Netskope Threat Coverage- WhisperGate/
|
— |
|
|
|
2022-01-26 - New FluBot and TeaBot Global Malware Campaigns Discovered/
|
— |
|
|
|
2022-01-26 - Vidar Exploiting Social Media Platform (Mastodon)/
|
— |
|
|
|
2022-01-27 - Adversary Emulation Diavol Ransomware ThreatThursday/
|
— |
|
|
|
2022-01-27 - Crazy Journey - Evolution of Smoky Camouflage/
|
— |
|
|
|
2022-01-27 - Cylera Labs Kwampirs Shamoon Technical Report/
|
— |
|
|
|
2022-01-27 - Early Bird Catches the Wormhole- Observations from the StellarParticle Campaign/
|
— |
|
|
|
2022-01-27 - Facestealer – The Rise of Facebook Credential Stealer Malware/
|
— |
|
|
|
2022-01-27 - Focusing on “Left of Boom”/
|
— |
|
|
|
2022-01-27 - GuLoader Executing Shellcode Using Callback Functions/
|
— |
|
|
|
2022-01-27 - JSAC2022 - Ambiguously Black - The Current State of Earth Hundun's Arsenal/
|
— |
|
|
|
2022-01-27 - JSAC2022 - What We Can Do against the Chaotic A41APT Campaign/
|
— |
|
|
|
2022-01-27 - LuoYu - Continuous Espionage Activities Targeting Japan with the new version of WinDealer in 2021/
|
— |
|
|
|
2022-01-27 - Malware Analysis Emotet Infection/
|
— |
|
|
|
2022-01-27 - Malware Analysis —Manual Unpacking of Redaman/
|
— |
|
|
|
2022-01-27 - North Koreas Lazarus APT leverages Windows Update client GitHub in latest campaign/
|
— |
|
|
|
2022-01-27 - North Korea’s Lazarus APT leverages Windows Update client, GitHub in latest campaign/
|
— |
|
|
|
2022-01-27 - Programs Hacking Programs- How to Extract Memory Information to Spot Linux Malware/
|
— |
|
|
|
2022-01-27 - Ransomware as a Service Innovation Curve/
|
— |
|
|
|
2022-01-27 - StellarParticle Campaign Novel Tactics and Techniques/
|
— |
|
|
|
2022-01-27 - Taiwanese Apple and Tesla contractor hit by Conti ransomware/
|
— |
|
|
|
2022-01-27 - Threat actor of in-Tur-est/
|
— |
|
|
|
2022-01-27 - Threat Advisory- STRT-TA02 - Destructive Software/
|
— |
|
|
|
2022-01-27 - Threat Assessment- BlackCat Ransomware/
|
— |
|
|
|
2022-01-27 - Threat Thursday- WhisperGate Wiper Targets Government, Non-profit, and IT Organizations in Ukraine/
|
— |
|
|
|
2022-01-27 - Widespread FluBot and TeaBot Malware Campaigns Targeting Android Devices/
|
— |
|
|
|
2022-01-28 - Indian Army Personnel Face Remote Access Trojan Attacks/
|
— |
|
|
|
2022-01-28 - Lessons Learned From Successive Use of Offensive Cyber Operations Against Ukraine and What May Be Next/
|
— |
|
|
|
2022-01-28 - Log4j Exploit Hits Again- Vulnerable Unifi Network Application (Ubiquiti) at Risk/
|
— |
|
|
|
2022-01-28 - Malware Headliners- LokiBot/
|
— |
|
|
|
2022-01-28 - Remcos RAT/
|
— |
|
|
|
2022-01-28 - Shedding light on the dark web/
|
— |
|
|
|
2022-01-28 - WhisperGate Malware Corrupts Computers in Ukraine/
|
— |
|
|
|
2022-01-28 - Who Wrote the ALPHV-BlackCat Ransomware Strain-/
|
— |
|
|
|
2022-01-30 - Point-of-Sale malware - RTPOS/
|
— |
|
|
|
2022-01-31 - 1 in 7 Ransomware Extortion Attacks Leak Critical Operational Technology Information/
|
— |
|
|
|
2022-01-31 - A Detailed Analysis Of Lazarus APT Malware Disguised As Notepad++ Shell Extension/
|
— |
|
|
|
2022-01-31 - Analyzing Malware with Hooks, Stomps and Return-addresses/
|
— |
|
|
|
2022-01-31 - Conversation with a top Ukrainian cyber official - What we know, what we don't, what it means/
|
— |
|
|
|
2022-01-31 - Conversation with a top Ukrainian cyber official- What we know, what we don't, what it means/
|
— |
|
|
|
2022-01-31 - CrowdStrike Falcon Proactively Protects Against Wiper Malware as CISA Warns U.S. Companies of Potential Attacks/
|
— |
|
|
|
2022-01-31 - Iranian APT MuddyWater targets Turkish users via malicious PDFs executables/
|
— |
|
|
|
2022-01-31 - Iranian APT MuddyWater targets Turkish users via malicious PDFs, executables/
|
— |
|
|
|
2022-01-31 - Russian 'Gamaredon' hackers use 8 new malware payloads in attacks/
|
— |
|
|
|
2022-01-31 - Shuckworm Continues Cyber-Espionage Attacks Against Ukraine/
|
— |
|
|
|
2022-01-31 - Taking the bait- The modus operandi of massive social engineering waves impacting banks in Portugal/
|
— |
|
|
|
2022-01-31 - Top-Ranking Banking Trojan Ramnit Out to Steal Payment Card Data/
|
— |
|
|
|
2022-01-31 - WhisperKill vs WhiteBlackCrypt- un petit soucis de fichiers…/
|
— |
|
|
|
2022-02-01 - Cyberspies linked to Memento ransomware use new PowerShell malware/
|
— |
|
|
|
2022-02-01 - Dumping WhisperGate’s wiper from an Eazfuscator obfuscated loader/
|
— |
|
|
|
2022-02-01 - Inside Trickbot, Russia’s Notorious Ransomware Gang/
|
— |
|
|
|
2022-02-01 - Mars Stealer Oski refactoring/
|
— |
|
|
|
2022-02-01 - N-W0rm analysis (Part 1)/
|
— |
|
|
|
2022-02-01 - PowerLess Trojan Iranian APT Phosphorus Adds New PowerShell Backdoor for Espionage/
|
— |
|
|
|
2022-02-01 - PowerLess Trojan- Iranian APT Phosphorus Adds New PowerShell Backdoor for Espionage/
|
— |
|
|
|
2022-02-01 - Sneaky Spies and Backdoor RATs - SysJoker and DazzleSpy Malware Target macOS/
|
— |
|
|
|
2022-02-01 - SolarMarker campaign used novel registry changes to establish persistence/
|
— |
|
|
|
2022-02-01 - StrifeWater RAT Iranian APT Moses Staff Adds New Trojan to Ransomware Operations/
|
— |
|
|
|
2022-02-01 - StrifeWater RAT- Iranian APT Moses Staff Adds New Trojan to Ransomware Operations/
|
— |
|
|
|
2022-02-01 - Xenomorph - A Newly Hatched Banking Trojan/
|
— |
|
|
|
2022-02-01 - Zoom For You — SEO Poisoning to Distribute BATLOADER and Atera Agent/
|
— |
|
|
|
2022-02-02 - Arid Viper APT targets Palestine with new wave of politically themed phishing attacks malware/
|
— |
|
|
|
2022-02-02 - Arid Viper APT targets Palestine with new wave of politically themed phishing attacks, malware/
|
— |
|
|
|
2022-02-02 - BlackCat ransomware implicated in attack on German oil companies/
|
— |
|
|
|
2022-02-02 - Catching the RAT called Agent Tesla/
|
— |
|
|
|
2022-02-02 - CoinStomp Malware Family Targets Asian Cloud Service Providers/
|
— |
|
|
|
2022-02-02 - Experts warn of a spike in APT35 activity and a possible link to Memento ransomware op/
|
— |
|
|
|
2022-02-02 - Malware Analysis Spotlight- Emotet’s Use of Cryptography/
|
— |
|
|
|
2022-02-02 - Sandboxing Antimalware Products for Fun and Profit/
|
— |
|
|
|
2022-02-02 - STRRAT Attached to a MSI File/
|
— |
|
|
|
2022-02-02 - The evolution of a Mac trojan- UpdateAgent’s progression/
|
— |
|
|
|
2022-02-02 - TrickBot Gang Uses Template-Based Metaprogramming in Bazar Malware/
|
— |
|
|
|
2022-02-02 - US officials prepare for potential Russian cyberattacks as Ukraine standoff continues/
|
— |
|
|
|
2022-02-02 - White Rabbit Continued Sardonic and F5/
|
— |
|
|
|
2022-02-02 - White Rabbit Continued- Sardonic and F5/
|
— |
|
|
|
2022-02-03 - Analysis of Attack Against National Games of China Systems -/
|
— |
|
|
|
2022-02-03 - Analysis of Attack Against National Games of China Systems/
|
— |
|
|
|
2022-02-03 - Antlion - Chinese APT Uses Custom Backdoor to Target Financial Institutions in Taiwan/
|
— |
|
|
|
2022-02-03 - Antlion- Chinese APT Uses Custom Backdoor to Target Financial Institutions in Taiwan/
|
— |
|
|
|
2022-02-03 - Gamaredon (Primitive Bear) Russian APT Group Actively Targeting Ukraine/
|
— |
|
|
|
2022-02-03 - Investigating Lateral Movement — WMI and Scheduled Tasks/
|
— |
|
|
|
2022-02-03 - njRAT Installed from a MSI/
|
— |
|
|
|
2022-02-03 - QR codes on Twitter deliver malicious Chrome extension/
|
— |
|
|
|
2022-02-03 - Russias Gamaredon aka Primitive Bear APT Group Actively Targeting Ukraine/
|
— |
|
|
|
2022-02-03 - Russia’s Gamaredon aka Primitive Bear APT Group Actively Targeting Ukraine (Updated June 22)/
|
— |
|
|
|
2022-02-03 - State hackers' new malware helped them stay undetected for 250 days/
|
— |
|
|
|
2022-02-03 - Threat Spotlight- WhisperGate Wiper Wreaks Havoc in Ukraine/
|
— |
|
|
|
2022-02-04 - ACTINIUM targets Ukrainian organizations/
|
— |
|
|
|
2022-02-04 - Cyberattack on News Corp Believed Linked to China Targeted Emails of Journalists Others/
|
— |
|
|
|
2022-02-04 - Cyberattack on News Corp, Believed Linked to China, Targeted Emails of Journalists, Others/
|
— |
|
|
|
2022-02-04 - FluBot Malware Persists- Most Prevalent In Germany and Spain/
|
— |
|
|
|
2022-02-04 - HHS- Conti ransomware encrypted 80% of Ireland's HSE IT systems/
|
— |
|
|
|
2022-02-04 - N-W0rm analysis (Part 2)/
|
— |
|
|
|
2022-02-04 - News Corp discloses hack from -persistent- nation state cyber attacks/
|
— |
|
|
|
2022-02-04 - Shortcut to Windows Update/
|
— |
|
|
|
2022-02-04 - Ukraine Campaign Delivers Defacement and Wipers, in Continued Escalation/
|
— |
|
|
|
2022-02-06 - AgentTesla From RTF Exploitation to .NET Tradecraft/
|
— |
|
|
|
2022-02-06 - Chinese Hackers Target Taiwanese Financial Institutions with a new Stealthy Backdoor/
|
— |
|
|
|
2022-02-06 - Deep Analysis of Vidar Information Stealer/
|
— |
|
|
|
2022-02-07 - APT27 Group Targets German Organizations with HyperBro/
|
— |
|
|
|
2022-02-07 - Avast released a free decryptor for TargetCompany ransomware/
|
— |
|
|
|
2022-02-07 - Decrypted- TargetCompany Ransomware/
|
— |
|
|
|
2022-02-07 - Exploring Windows UAC Bypasses- Techniques and Detection Strategies/
|
— |
|
|
|
2022-02-07 - Free decryptor released for TargetCompany ransomware victims/
|
— |
|
|
|
2022-02-07 - Medusa- a marriage partner as gunslinger/
|
— |
|
|
|
2022-02-07 - Newly Found Sugar Ransomware is Now Being Offered as RaaS/
|
— |
|
|
|
2022-02-07 - Qbot Likes to Move It, Move It/
|
— |
|
|
|
2022-02-07 - Roaming Mantis reaches Europe/
|
— |
|
|
|
2022-02-07 - Trellix Global Defenders- Invasion of the Information Snatchers - Protecting against RedLine Infostealer/
|
— |
|
|
|
2022-02-08 - Annual Threat trends 2021/
|
— |
|
|
|
2022-02-08 - Attackers Disguise RedLine Stealer as a Windows 11 Upgrade/
|
— |
|
|
|
2022-02-08 - BlackCat Ransomware as a Service - The Cat is certainly out of the bag!/
|
— |
|
|
|
2022-02-08 - Brbbot Analysis/
|
— |
|
|
|
2022-02-08 - Conficker Analysis/
|
— |
|
|
|
2022-02-08 - Cybereason vs. Lorenz Ransomware/
|
— |
|
|
|
2022-02-08 - Distribution of Kimsuky Groups xRAT Quasar RAT Confirmed - ASEC BLOG/
|
— |
|
|
|
2022-02-08 - Distribution of Kimsuky Group’s xRAT (Quasar RAT) Confirmed/
|
— |
|
|
|
2022-02-08 - EP 110- Spam Botnets/
|
— |
|
|
|
2022-02-08 - HawkEye Analysis/
|
— |
|
|
|
2022-02-08 - LolZarus- Lazarus Group Incorporating Lolbins into Campaigns/
|
— |
|
|
|
2022-02-08 - NaturalFreshMall- a mass store hack/
|
— |
|
|
|
2022-02-08 - NetWalker ransomware affiliate sentenced to 80 months in prison/
|
— |
|
|
|
2022-02-08 - Palestinian Hackers Use New NimbleMamba Implant in Recent Attacks/
|
— |
|
|
|
2022-02-08 - PrivateLoader The first step in many malware schemes/
|
— |
|
|
|
2022-02-08 - Qbot needs only 30 minutes to steal your credentials, emails/
|
— |
|
|
|
2022-02-08 - Ransomware Spotlight- LockBit/
|
— |
|
|
|
2022-02-08 - Remcos Analysis/
|
— |
|
|
|
2022-02-08 - RevengeRAT Analysis/
|
— |
|
|
|
2022-02-08 - Ugg Boots 4 Sale A Tale of Palestinian-Aligned Espionage Proofpoint US/
|
— |
|
|
|
2022-02-08 - Ugg Boots 4 Sale- A Tale of Palestinian-Aligned Espionage/
|
— |
|
|
|
2022-02-09 - Dragos ICS-OT Ransomware Analysis- Q4 2021/
|
— |
|
|
|
2022-02-09 - Elephant APT Report/
|
— |
|
|
|
2022-02-09 - ESET Threat Report/
|
— |
|
|
|
2022-02-09 - Fake Windows 11 upgrade installers infect you with RedLine malware/
|
— |
|
|
|
2022-02-09 - HiddenArt - A Russian-linked SS7 Threat Actor/
|
— |
|
|
|
2022-02-09 - HiddenArt – A Russian-linked SS7 Threat Actor/
|
— |
|
|
|
2022-02-09 - Iranian Hackers Using New Marlin Backdoor in 'Out to Sea' Espionage Campaign/
|
— |
|
|
|
2022-02-09 - Master decryption keys for Maze, Egregor, and Sekhmet ransomware leaked online/
|
— |
|
|
|
2022-02-09 - Meta and Chime sue Nigerians behind Facebook, Instagram phishing/
|
— |
|
|
|
2022-02-09 - ModifiedElephant APT and a Decade of Fabricating Evidence/
|
— |
|
|
|
2022-02-09 - Ransomware dev releases Egregor, Maze master decryption keys/
|
— |
|
|
|
2022-02-09 - What’s with the shared VBA code between Transparent Tribe and other threat actors-/
|
— |
|
|
|
2022-02-10 - +380-GlowSpark/
|
— |
|
|
|
2022-02-10 - A walk through Project Zero metrics/
|
— |
|
|
|
2022-02-10 - InQuest - Join the Hunt/
|
— |
|
|
|
2022-02-10 - Malicious Chrome Browser Extension Exposed- ChromeBack Leverages Silent Extension Loading/
|
— |
|
|
|
2022-02-10 - Threat Analysis Report- All Paths Lead to Cobalt Strike - IcedID, Emotet and QBot/
|
— |
|
|
|
2022-02-10 - Threat Thursday- BHunt Scavenger Harvests Victims’ Crypto Wallets/
|
— |
|
|
|
2022-02-10 - What’s with the shared VBA code between Transparent Tribe and other threat actors/
|
— |
|
|
|
2022-02-11 - [SANS ISC] CinaRAT Delivered Through HTML ID Attributes/
|
— |
|
|
|
2022-02-11 - Deep Dive Analysis capraRAT/
|
— |
|
|
|
2022-02-11 - Indicators of Compromise Associated with BlackByte Ransomware/
|
— |
|
|
|
2022-02-11 - Netwalker- from Powershell reflective loader to injected dll/
|
— |
|
|
|
2022-02-11 - Threat Roundup for February 4 to February 11/
|
— |
|
|
|
2022-02-11 - XLoader-Formbook Distributed by Encrypted VelvetSweatshop Spreadsheets/
|
— |
|
|
|
2022-02-12 - Analyzing a Stealer MSI using msitools/
|
— |
|
|
|
2022-02-12 - Full Hancitor malware analysis/
|
— |
|
|
|
2022-02-12 - How RAT Malware Is Using Telegram to Evade Detection/
|
— |
|
|
|
2022-02-13 - Colibri Loader - Back to basics/
|
— |
|
|
|
2022-02-13 - Kovter Analysis/
|
— |
|
|
|
2022-02-13 - Technical Malware Analysis- The Return of Emotet/
|
— |
|
|
|
2022-02-14 - Allcome clipbanker is a newcomer in underground forums/
|
— |
|
|
|
2022-02-14 - Chaos ransomware v4/
|
— |
|
|
|
2022-02-14 - FBI- BlackByte ransomware breached US critical infrastructure/
|
— |
|
|
|
2022-02-14 - NFT Lure Used to Distribute BitRAT/
|
— |
|
|
|
2022-02-14 - PrivateLoader to Anubis Loader/
|
— |
|
|
|
2022-02-14 - Ransomware Becomes Deadlier, Conti Makes the Most Money/
|
— |
|
|
|
2022-02-14 - Sophisticated FritzFrog P2P Botnet Returns After Long Break/
|
— |
|
|
|
2022-02-14 - Staying ahead of REvil’s Ransomware-as-a-Service business model/
|
— |
|
|
|
2022-02-14 - The APT Fallout of Vulnerabilities such as ProxyLogon, OGNL Injection, and log4shell/
|
— |
|
|
|
2022-02-14 - ThreatReport - EmissaryPanda/
|
— |
|
|
|
2022-02-14 - Var tæt på at slukke tusindvis af vindmøller- Nu fortæller Vestas om cyberangreb/
|
— |
|
|
|
2022-02-14 - Wazawaka Goes Waka Waka/
|
— |
|
|
|
2022-02-15 - Analysis of Microsoft CVE-2022-21907/
|
— |
|
|
|
2022-02-15 - Charting TA2541's Flight/
|
— |
|
|
|
2022-02-15 - Charting TA2541s Flight Proofpoint US/
|
— |
|
|
|
2022-02-15 - Guard Your Drive from DriveGuard Moses Staff Campaigns Against Israeli Organizations Span Several Months/
|
— |
|
|
|
2022-02-15 - Guard Your Drive from DriveGuard- Moses Staff Campaigns Against Israeli Organizations Span Several Months/
|
— |
|
|
|
2022-02-15 - How the Russia-Ukraine conflict is impacting cybercrime/
|
— |
|
|
|
2022-02-15 - Increase in Emotet Activity and Cobalt Strike Deployment/
|
— |
|
|
|
2022-02-15 - MATANBUCHUS- Another Loader As A Service Malware/
|
— |
|
|
|
2022-02-15 - New Emotet Infection Method/
|
— |
|
|
|
2022-02-15 - New Evidence Linking Kwampirs Malware to Shamoon APTS (Technical Blog)/
|
— |
|
|
|
2022-02-15 - Researchers Link ShadowPad Malware Attacks to Chinese Ministry and PLA/
|
— |
|
|
|
2022-02-15 - ShadowPad Malware Analysis/
|
— |
|
|
|
2022-02-15 - TA2541- APT Has Been Shooting RATs at Aviation for Years/
|
— |
|
|
|
2022-02-15 - Unskilled hacker linked to years of attacks on aviation, transport sectors/
|
— |
|
|
|
2022-02-15 - Vulnerable Exchange server hit by Squirrelwaffle and financial fraud/
|
— |
|
|
|
2022-02-16 - A Modern Ninja- Evasive Trickbot Attacks Customers of 60 High-Profile Companies/
|
— |
|
|
|
2022-02-16 - Alert (AA22-047A) Russian State-Sponsored Cyber Actors Target Cleared Defense Contractor Networks to Obtain Sensitive U.S. Defense Information and Technology/
|
— |
|
|
|
2022-02-16 - APT organization Lorec53 Lori Bear recently launched a large-scale cyber attack on Ukraine/
|
— |
|
|
|
2022-02-16 - DDoS Attack Campaign Targeting Multiple Organizations in Ukraine/
|
— |
|
|
|
2022-02-16 - Emotet Now Spreading Through Malicious Excel Files/
|
— |
|
|
|
2022-02-16 - Meet Kraken- A New Golang Botnet in Development/
|
— |
|
|
|
2022-02-16 - Playing with AsyncRAT/
|
— |
|
|
|
2022-02-16 - QBot Malware Detection- Old Dog New Tricks/
|
— |
|
|
|
2022-02-16 - Quick Malware Analysis- Emotet Epoch 5 and Cobalt Strike pcap from 2022-02-08/
|
— |
|
|
|
2022-02-16 - Red Cross blames hack on Zoho vulnerability, suspects APT attack/
|
— |
|
|
|
2022-02-16 - SMS PVA Services' Use of Infected Android Phones Reveals Flaws in SMS Verification/
|
— |
|
|
|
2022-02-16 - The TrickBot Saga’s Finale Has Aired- Spinoff is Already in the Works/
|
— |
|
|
|
2022-02-16 - TrickBot Ravages Customers of Amazon, PayPal and Other Top Brands/
|
— |
|
|
|
2022-02-17 - Detecting Karakurt – an extortion focused threat actor/
|
— |
|
|
|
2022-02-17 - FreeCryptoScam - A New Cryptocurrency Scam That Leads to Installation of Backdoors and Stealers/
|
— |
|
|
|
2022-02-17 - Investigating a Monero Coin Miner/
|
— |
|
|
|
2022-02-17 - Log4j2 In The Wild - Iranian-Aligned Threat Actor “TunnelVision” Actively Exploiting VMware Horizon/
|
— |
|
|
|
2022-02-17 - Log4j2 In The Wild Iranian-Aligned Threat Actor TunnelVision Actively Exploiting VMware Horizon/
|
— |
|
|
|
2022-02-17 - Looking over the nation-state actors’ shoulders- Even they have a difficult day sometimes/
|
— |
|
|
|
2022-02-17 - Nwgen Ransomware/
|
— |
|
|
|
2022-02-17 - Phishers Spoof Power BI to Visualize Your Credential Data/
|
— |
|
|
|
2022-02-17 - Ransomware Windows DarkBit/
|
— |
|
|
|
2022-02-17 - Technical Analysis of Code-Signed Blister Malware Campaign Part 2/
|
— |
|
|
|
2022-02-17 - Technical Analysis of Code-Signed “Blister” Malware Campaign (Part 2)/
|
— |
|
|
|
2022-02-17 - The story of a ransomware builder- from Thanos to Spook and beyond (Part 1)/
|
— |
|
|
|
2022-02-17 - Threat Thursday- Arkei Infostealer Expands Reach Using SmokeLoader to Target Crypto Wallets and MFA/
|
— |
|
|
|
2022-02-17 - VMProtect Analysis 1.0- VMP Mutation Fix/
|
— |
|
|
|
2022-02-18 - A Tale of Two Shells/
|
— |
|
|
|
2022-02-18 - Conti ransomware gang takes over TrickBot malware operation/
|
— |
|
|
|
2022-02-18 - Dynamically extracting the encryption key from a simple ransomware/
|
— |
|
|
|
2022-02-18 - EvilPlayout Attack Against Irans State Broadcaster - Check Point Research/
|
— |
|
|
|
2022-02-18 - EvilPlayout- Attack Against Iran’s State Broadcaster/
|
— |
|
|
|
2022-02-18 - Executive Overview of Russian Aggression Against Ukraine/
|
— |
|
|
|
2022-02-18 - Hackers No Hashing- Randomizing API Hashes to Evade Cobalt Strike Shellcode Detection/
|
— |
|
|
|
2022-02-18 - How a Saudi woman's iPhone revealed hacking around the world/
|
— |
|
|
|
2022-02-18 - New Golang botnet empties Windows users’ cryptocurrency wallets/
|
— |
|
|
|
2022-02-18 - PseudoManuscrypt Being Distributed in the Same Method as Cryptbot - ASEC BLOG/
|
— |
|
|
|
2022-02-18 - PseudoManuscrypt Being Distributed in the Same Method as Cryptbot/
|
— |
|
|
|
2022-02-18 - Remcos RAT Delivered Through Double Compressed Archive/
|
— |
|
|
|
2022-02-18 - TeamTNT Cryptomining Explosion/
|
— |
|
|
|
2022-02-19 - Master Key for Hive Ransomware Retrieved Using a Flaw in its Encryption Algorithm/
|
— |
|
|
|
2022-02-20 - Detecting Cobalt Strike Beacons/
|
— |
|
|
|
2022-02-20 - Technical Analysis of the DDoS Attacks against Ukrainian Websites/
|
— |
|
|
|
2022-02-20 - The Conti ransomware group takes over TrickBot malware operation and plans to replace it with BazarBackdoor malware/
|
— |
|
|
|
2022-02-21 - A flaw in the encryption algorithm of Hive Ransomware allows retrieving encrypted files/
|
— |
|
|
|
2022-02-21 - CERT UA GOV/
|
— |
|
|
|
2022-02-21 - Chinese hackers linked to months-long attack on Taiwanese financial sector/
|
— |
|
|
|
2022-02-21 - Cobalt Strike Being Distributed to Vulnerable MS-SQL Servers/
|
— |
|
|
|
2022-02-21 - CyCraft - APT10 - Operation Cache Panda/
|
— |
|
|
|
2022-02-21 - Darkside Ransomware Analysis Report/
|
— |
|
|
|
2022-02-21 - Iranian State Broadcaster IRIB Hit by Destructive Wiper Malware/
|
— |
|
|
|
2022-02-21 - Modified CryptBot Infostealer Being Distributed/
|
— |
|
|
|
2022-02-21 - Ousaban MSI Installer Analysis/
|
— |
|
|
|
2022-02-21 - Qbot and Zerologon Lead To Full Domain Compromise/
|
— |
|
|
|
2022-02-21 - Revamped CryptBot malware spread by pirated software sites/
|
— |
|
|
|
2022-02-21 - TTPs used by BlackByte Ransomware Targeting Critical Infrastructure/
|
— |
|
|
|
2022-02-21 - Watch out, the Kraken botnet can easily bypass Defender and steal your crypto/
|
— |
|
|
|
2022-02-22 - APT Attack Attempts Disguised as North Korea Related Paper Requirements Kimsuky/
|
— |
|
|
|
2022-02-22 - China Implicated in Prolonged Supply Chain Attack Targeting Taiwan Financial Sector/
|
— |
|
|
|
2022-02-22 - CrowdStrike Research Investigates Exploit Behavior to Strengthen Customer Protection/
|
— |
|
|
|
2022-02-22 - Cybercrime Moves- Conti Ransomware Absorbs TrickBot Malware/
|
— |
|
|
|
2022-02-22 - Cyberthreats during Russian-Ukrainian tensions- what can we learn from history to be prepared-/
|
— |
|
|
|
2022-02-22 - IcedID to Cobalt Strike In Under 20 Minutes/
|
— |
|
|
|
2022-02-22 - Like Father Like Son- New Mars Stealer/
|
— |
|
|
|
2022-02-22 - Quick Update- Kraken Completes Its Rebrand to Anubis/
|
— |
|
|
|
2022-02-22 - Ransomware Spotlight- Clop/
|
— |
|
|
|
2022-02-22 - Russia-Ukraine Cyberattacks Updated How to Protect Against Related Cyberthreats Including DDoS Hermet/
|
— |
|
|
|
2022-02-22 - Vulnerable Microsoft SQL Servers targeted with Cobalt Strike/
|
— |
|
|
|
2022-02-22 - Week 7- Supposed order confirmation delivers malware and new variants in fake extortion emails/
|
— |
|
|
|
2022-02-23 - (Ex)Change of Pace- UNC2596 Observed Leveraging Vulnerabilities to Deploy Cuba Ransomware/
|
— |
|
|
|
2022-02-23 - 24 Hours From Log4Shell to Local Admin- Deep-Dive Into Conti Gang Attack on Fortune 500 (DFIR)/
|
— |
|
|
|
2022-02-23 - Access Brokers- Who Are the Targets, and What Are They Worth-/
|
— |
|
|
|
2022-02-23 - Alert (AA22-054A) New Sandworm Malware Cyclops Blink Replaces VPNFilter/
|
— |
|
|
|
2022-02-23 - APT-C-58 (Gorgon Group) attack warning/
|
— |
|
|
|
2022-02-23 - Chinese Experts Uncover Details of Equation Group's Bvp47 Covert Hacking Tool/
|
— |
|
|
|
2022-02-23 - Cyclops-Blink-Malware-Analysis-Report/
|
— |
|
|
|
2022-02-23 - Dridex bots deliver Entropy ransomware in recent attacks/
|
— |
|
|
|
2022-02-23 - ExChange of Pace UNC2596 Observed Leveraging Vulnerabilities to Deploy Cuba Ransomware/
|
— |
|
|
|
2022-02-23 - HermeticWiper - New Destructive Malware Used In Cyber Attacks on Ukraine/
|
— |
|
|
|
2022-02-23 - HermeticWiper New Destructive Malware Used In Cyber Attacks on Ukraine/
|
— |
|
|
|
2022-02-23 - New Sandworm malware Cyclops Blink replaces VPNFilter/
|
— |
|
|
|
2022-02-23 - New Wiper Malware Targeting Ukraine Amid Russia's Military Operation/
|
— |
|
|
|
2022-02-23 - NSA-linked Bvp47 Linux backdoor widely undetected for 10 years/
|
— |
|
|
|
2022-02-23 - Ransomware Profile- ALPHV/
|
— |
|
|
|
2022-02-23 - Re-cap- The Untold Story of NotPetya, The Most Devastating Cyberattack in History/
|
— |
|
|
|
2022-02-23 - Sanctions Be Damned - From Dridex to Macaw, The Evolution of Evil Corp/
|
— |
|
|
|
2022-02-23 - Second data wiper attack hits Ukraine computer networks/
|
— |
|
|
|
2022-02-23 - Security warning- Hackers are using this new malware to target firewall appliances/
|
— |
|
|
|
2022-02-23 - Shadowserver Special Reports – Cyclops Blink/
|
— |
|
|
|
2022-02-23 - The Bvp47 - a Top-tier Backdoor of US NSA Equation Group/
|
— |
|
|
|
2022-02-23 - What the Pack(er)-/
|
— |
|
|
|
2022-02-24 - [QuickNote] Techniques for decrypting BazarLoader strings/
|
— |
|
|
|
2022-02-24 - Alert (AA22-055A) Iranian Government-Sponsored Actors Conduct Cyber Operations Against Global Government and Commercial Networks/
|
— |
|
|
|
2022-02-24 - Cyber-Attacken auf die Ukraine- Wiper-Malware befällt „Hunderte Computer“/
|
— |
|
|
|
2022-02-24 - Defense contractors hit by stealthy SockDetour Windows backdoor/
|
— |
|
|
|
2022-02-24 - HermeticWiper & resurgence of targeted attacks on Ukraine/
|
— |
|
|
|
2022-02-24 - HermeticWiper- New data‑wiping malware hits Ukraine/
|
— |
|
|
|
2022-02-24 - How to Decrypt the Files Encrypted by the Hive Ransomware/
|
— |
|
|
|
2022-02-24 - IBM Security X-Force Research Advisory- New Destructive Malware Used In Cyber Attacks on Ukraine/
|
— |
|
|
|
2022-02-24 - Iranian Government-Sponsored Actors Conduct Cyber Operations Against Global Government and Commercial Networks/
|
— |
|
|
|
2022-02-24 - Left On Read- Telegram Malware Spotted in Latest Iranian Cyber Espionage Activity/
|
— |
|
|
|
2022-02-24 - Malware Analysis Report (AR22-055A) MuddyWater/
|
— |
|
|
|
2022-02-24 - Microsoft Exchange servers hacked to deploy Cuba ransomware/
|
— |
|
|
|
2022-02-24 - New Wave of Emotet – When Project X Turns Into Y/
|
— |
|
|
|
2022-02-24 - Nobelium Returns to the Political World Stage/
|
— |
|
|
|
2022-02-24 - Notorious TrickBot Malware Gang Shuts Down its Botnet Infrastructure/
|
— |
|
|
|
2022-02-24 - SockDetour - a Silent Fileless Socketless Backdoor - Targets US Defense Contractors/
|
— |
|
|
|
2022-02-24 - SockDetour – a Silent, Fileless, Socketless Backdoor – Targets U.S. Defense Contractors/
|
— |
|
|
|
2022-02-24 - Threat Advisory- Current executive guidance for ongoing cyberattacks in Ukraine/
|
— |
|
|
|
2022-02-24 - Threat Advisory- Cyclops Blink/
|
— |
|
|
|
2022-02-24 - Threat Update – Ukraine & Russia conflict/
|
— |
|
|
|
2022-02-24 - TrickBot Gang Likely Shifting Operations to Switch to New Malware/
|
— |
|
|
|
2022-02-24 - TrickBot gang shuts down botnet after months of inactivity/
|
— |
|
|
|
2022-02-24 - Ukraine- Analysis Of The New Disk-Wiping Malware (HermeticWiper)/
|
— |
|
|
|
2022-02-24 - Ukraine- Disk-wiping Attacks Precede Russian Invasion/
|
— |
|
|
|
2022-02-25 - Breaking news! Warning about “HermeticWiper Malware” by Russian APT Groups/
|
— |
|
|
|
2022-02-25 - CrowdStrike Falcon Protects from New Wiper Malware Used in Ukraine Cyberattacks/
|
— |
|
|
|
2022-02-25 - Details of the DDoS attacks we have seen recently against Ukraine and Russia/
|
— |
|
|
|
2022-02-25 - Disruptive HermeticWiper Attacks Targeting Ukrainian Organizations/
|
— |
|
|
|
2022-02-25 - Il ransomware Conti si schiera a favore della Russia/
|
— |
|
|
|
2022-02-25 - Le ransomware Cuba s’en prend aux serveurs Exchange/
|
— |
|
|
|
2022-02-25 - MuddyWater Targets Critical Infrastructure in Asia, Europe/
|
— |
|
|
|
2022-02-25 - New -SockDetour- Fileless, Socketless Backdoor Targets U.S. Defense Contractors/
|
— |
|
|
|
2022-02-25 - New Infostealer ‘ColdStealer’ Being Distributed/
|
— |
|
|
|
2022-02-25 - Putin Warns Russian Critical Infrastructure to Brace for Potential Cyber Attacks/
|
— |
|
|
|
2022-02-25 - Reverse Engineering - Hermetic Wiper/
|
— |
|
|
|
2022-02-25 - Russia or Ukraine- Hacking groups take sides/
|
— |
|
|
|
2022-02-25 - Some details of the DDoS attacks targeting Ukraine and Russia in recent days/
|
— |
|
|
|
2022-02-25 - Spear Phishing Attacks Target Organizations in Ukraine Payloads Include the Document Stealer OutSteel/
|
— |
|
|
|
2022-02-25 - Technical Analysis of PartyTicket Ransomware/
|
— |
|
|
|
2022-02-25 - The Hunt for the Lost Soul Unraveling the Evolution of the SoulSearcher Malware/
|
— |
|
|
|
2022-02-25 - The Hunt for the Lost Soul- Unraveling the Evolution of the SoulSearcher Malware/
|
— |
|
|
|
2022-02-25 - Threat updates – A new IcedID GZipLoader variant/
|
— |
|
|
|
2022-02-25 - Trickbot Group’s AnchorDNS Backdoor Upgrades to AnchorMail/
|
— |
|
|
|
2022-02-25 - TrickBot malware suddenly got quiet, researchers say, but it's hardly the end for its operators/
|
— |
|
|
|
2022-02-25 - UKRAINE- Timeline of Cyberattacks/
|
— |
|
|
|
2022-02-25 - What You Need to Know About Russian Cyber Escalation in Ukraine/
|
— |
|
|
|
2022-02-26 - Alert (AA22-057A) Destructive Malware Targeting Organizations in Ukraine/
|
— |
|
|
|
2022-02-26 - DiskKill-HermeticWiper, a disruptive cyber-weapon targeting Ukraine’s critical infrastructures/
|
— |
|
|
|
2022-02-26 - Meta’s Ongoing Efforts Regarding Russia’s Invasion of Ukraine/
|
— |
|
|
|
2022-02-26 - The hidden C2- Lampion trojan release 212 is on the rise and using a C2 server for two years/
|
— |
|
|
|
2022-02-26 - TRENDING EVIL Q1 2022/
|
— |
|
|
|
2022-02-26 - Yours Truly, Signed AV Driver- Weaponizing An Antivirus Driver/
|
— |
|
|
|
2022-02-27 - Conti ransomware's internal chats leaked after siding with Russia/
|
— |
|
|
|
2022-02-28 - Analyzing conti-leaks without speaking russian — only methodology/
|
— |
|
|
|
2022-02-28 - Change in Distribution Method of Malware Disguised as Estimate (VBS Script)/
|
— |
|
|
|
2022-02-28 - Chinese cyberspies target govts with their ‘most advanced’ backdoor/
|
— |
|
|
|
2022-02-28 - CoinMiner Being Distributed to Vulnerable MS-SQL Servers/
|
— |
|
|
|
2022-02-28 - Conti and Karma actors attack healthcare provider at same time through ProxyShell exploits/
|
— |
|
|
|
2022-02-28 - conti-leaks-englished/
|
— |
|
|
|
2022-02-28 - Cyber threat activity in Ukraine- analysis and resources/
|
— |
|
|
|
2022-02-28 - Daxin Stealthy Backdoor Designed for Attacks Against Hardened Networks/
|
— |
|
|
|
2022-02-28 - Daxin- Stealthy Backdoor Designed for Attacks Against Hardened Networks/
|
— |
|
|
|
2022-02-28 - Detecting malware kill chains with Defender and Microsoft Sentinel/
|
— |
|
|
|
2022-02-28 - How to Analyze Malicious Documents – Case Study of an Attack Targeting Ukrainian Organization/
|
— |
|
|
|
2022-02-28 - Looking for Penquins in the Wild/
|
— |
|
|
|
2022-02-28 - Meta- Ukrainian officials, military targeted by Ghostwriter hackers/
|
— |
|
|
|
2022-02-28 - Microsoft finds FoxBlade malware on Ukrainian systems, removes RT from Windows app store/
|
— |
|
|
|
2022-02-28 - New Chinese hacking tool found, spurring U.S. warning to allies/
|
— |
|
|
|
2022-02-28 - Remcos RAT malware disseminated by pretending to be tax invoices/
|
— |
|
|
|
2022-02-28 - Threat Actor targeted attack against Finance and Investment industry (ENG)/
|
— |
|
|
|
2022-02-28 - Trellix Global Defenders- Analysis and Protections for BlackByte Ransomware/
|
— |
|
|
|
2022-02-28 - Trellix Global Defenders- Analysis and Protections for RagnarLocker Ransomware/
|
— |
|
|
|
2022-02-28 - Trellix Global Defenders- Cyberattacks Targeting Ukraine and HermeticWiper Protections/
|
— |
|
|
|
2022-03-01 - Asylum Ambuscade State Actor Uses Compromised Private Ukrainian Military Emails to Target European Gov/
|
— |
|
|
|
2022-03-01 - Asylum Ambuscade_State Actor Uses Compromised Private Ukrainian Military Emails to Target European Governments and Refugee Movement/
|
— |
|
|
|
2022-03-01 - China soll mit präzedenzlos ausgeklügelter Malware Regierungen ausspioniert haben/
|
— |
|
|
|
2022-03-01 - Conti Ransomware source code leaked by Ukrainian researcher/
|
— |
|
|
|
2022-03-01 - Cybereason vs. BlackCat Ransomware/
|
— |
|
|
|
2022-03-01 - Decryptable PartyTicket Ransomware Reportedly Targeting Ukrainian Entities/
|
— |
|
|
|
2022-03-01 - DiskKill-HermeticWiper and NotPetya (Dis)similarities/
|
— |
|
|
|
2022-03-01 - Elastic protects against data wiper malware targeting Ukraine- HERMETICWIPER/
|
— |
|
|
|
2022-03-01 - Elections GoRansom – a smoke screen for the HermeticWiper attack/
|
— |
|
|
|
2022-03-01 - How IoT Botnets Evade Detection and Analysis/
|
— |
|
|
|
2022-03-01 - IsaacWiper and HermeticWizard New wiper and worm targeting Ukraine/
|
— |
|
|
|
2022-03-01 - IsaacWiper and HermeticWizard- New wiper and worm targeting Ukraine/
|
— |
|
|
|
2022-03-01 - Leaks- Conti - Trickbot/
|
— |
|
|
|
2022-03-01 - Python script to decrypt embedded driver used in Daxin/
|
— |
|
|
|
2022-03-01 - Ransomware as a distraction/
|
— |
|
|
|
2022-03-01 - Second New 'IsaacWiper' Data Wiper Targets Ukraine After Russian Invasion/
|
— |
|
|
|
2022-03-01 - TAG Bulletin- Q1 2022/
|
— |
|
|
|
2022-03-01 - Targeted APT Activity- BABYSHARK Is Out for Blood/
|
— |
|
|
|
2022-03-01 - TeaBot is now spreading across the globe/
|
— |
|
|
|
2022-03-01 - The DGA Algorithm Used by Dealply and Bujo Campaigns/
|
— |
|
|
|
2022-03-01 - Ukraine Hit with Novel ‘FoxBlade’ Trojan Hours Before Invasion/
|
— |
|
|
|
2022-03-01 - Ukrainian Targets Hit by HermeticWiper, New Datawiper Malware/
|
— |
|
|
|
2022-03-01 - What is HermeticWiper – An Analysis of the Malware and Larger Threat Landscape in the Russian Ukrainian War/
|
— |
|
|
|
2022-03-02 - AvosLocker Ransomware Linux Version Analysis/
|
— |
|
|
|
2022-03-02 - Conti Group Leaked!/
|
— |
|
|
|
2022-03-02 - Conti Ransomware Decryptor, TrickBot Source Code Leaked/
|
— |
|
|
|
2022-03-02 - Conti Ransomware Group Diaries, Part II- The Office/
|
— |
|
|
|
2022-03-02 - Conti's Source Code- Deep-Dive Into/
|
— |
|
|
|
2022-03-02 - CrowdStrike cracks PartyTicket ransomware targeting Ukraine/
|
— |
|
|
|
2022-03-02 - Cybercrime bosses warn that they will -fight back- if Russia is hacked/
|
— |
|
|
|
2022-03-02 - DanaBot Launches DDoS Attack Against the Ukrainian Ministry of Defense/
|
— |
|
|
|
2022-03-02 - Digging into HermeticWiper/
|
— |
|
|
|
2022-03-02 - Domains Linked to Phishing Attacks Targeting Ukraine/
|
— |
|
|
|
2022-03-02 - Hackers Begin Weaponizing TCP Middlebox Reflection for Amplified DDoS Attacks/
|
— |
|
|
|
2022-03-02 - Log4shell exploits now used mostly for DDoS botnets, cryptominers/
|
— |
|
|
|
2022-03-02 - TrickBot’s AnchorDNS is Now Upgraded to AnchorMail/
|
— |
|
|
|
2022-03-03 - A Closer Look at the Russian Actors Targeting Organizations in Ukraine/
|
— |
|
|
|
2022-03-03 - Cloud Credential Compromise Campaign Originating from Russian-Affiliated Infrastructure/
|
— |
|
|
|
2022-03-03 - Cyberattacks are Prominent in the Russia-Ukraine Conflict/
|
— |
|
|
|
2022-03-03 - Deep Analysis of Redline Stealer- Leaked Credential with WCF/
|
— |
|
|
|
2022-03-03 - Dissemination of malicious korean documents masquering as press releases for the 20th presidential election/
|
— |
|
|
|
2022-03-03 - Free decryptor released for HermeticRansom victims in Ukraine/
|
— |
|
|
|
2022-03-03 - Help for Ukraine- Free decryptor for HermeticRansom ransomware/
|
— |
|
|
|
2022-03-03 - Luci Spools The Fun With Phobos Ransomware/
|
— |
|
|
|
2022-03-03 - Malware campaign impersonates VC firm looking to buy sites/
|
— |
|
|
|
2022-03-03 - Proofpoint is Closely Monitoring the Rapidly Evolving Threat Landscape Related to Ukraine and Russia/
|
— |
|
|
|
2022-03-03 - SharkBot- a “new” generation Android banking Trojan being distributed on Google Play Store/
|
— |
|
|
|
2022-03-03 - TeaBot Banking Trojan Posted as QR Code app in Google Play Store Targeting US Users/
|
— |
|
|
|
2022-03-03 - Technical Analysis of The Hermetic Wiper Malware Used to Target Ukraine/
|
— |
|
|
|
2022-03-03 - Threat Hunting for Malicious PowerShell Usage in Gigasheet/
|
— |
|
|
|
2022-03-04 - Amazon's assistance in Ukraine/
|
— |
|
|
|
2022-03-04 - Bitdefender Labs Sees Increased Malicious and Scam Activity Exploiting the War in Ukraine/
|
— |
|
|
|
2022-03-04 - Details of another big ransomware group 'Trickbot' leak online, experts say/
|
— |
|
|
|
2022-03-04 - Free HermeticRansom Ransomware Decryptor Released/
|
— |
|
|
|
2022-03-04 - HermeticWiper- A detailed analysis of the destructive malware that targeted Ukraine/
|
— |
|
|
|
2022-03-04 - HermeticWiper-FoxBlade Analysis (in-depth)/
|
— |
|
|
|
2022-03-04 - Imperva Mitigates Ransom DDoS Attack Measuring 2.5 Million Requests per Second/
|
— |
|
|
|
2022-03-04 - Legitimate Sites Used As Cobalt Strike C2s Against Indian Government/
|
— |
|
|
|
2022-03-04 - Massive Meris Botnet Embeds Ransomware Notes from REvil/
|
— |
|
|
|
2022-03-04 - New Wiper Malware Used Against Ukranian Organizations/
|
— |
|
|
|
2022-03-04 - Responses to Russia's Invasion of Ukraine Likely to Spur Retaliation/
|
— |
|
|
|
2022-03-04 - Russia-Ukraine war exploited as lure for malware distribution/
|
— |
|
|
|
2022-03-04 - SystemBC, PowerShell version/
|
— |
|
|
|
2022-03-05 - Malware now using NVIDIA's stolen code signing certificates/
|
— |
|
|
|
2022-03-06 - AvosLocker Ransomware Behavior Examined on Windows & Linux/
|
— |
|
|
|
2022-03-06 - Mozilla Firefox 97.0.2 fixes two actively exploited zero-day bugs (CVE-2022-26485 & CVE-2022-26486)/
|
— |
|
|
|
2022-03-07 - 2021 Year In Review/
|
— |
|
|
|
2022-03-07 - An update on the threat landscape (APT28, UNC1151, MUSTANG PANDA)/
|
— |
|
|
|
2022-03-07 - An update on the threat landscape/
|
— |
|
|
|
2022-03-07 - CERT-UA/
|
— |
|
|
|
2022-03-07 - Distribution of Remcos RAT Disguised as Tax Invoice/
|
— |
|
|
|
2022-03-07 - Fake Purchase Order Used to Deliver Agent Tesla/
|
— |
|
|
|
2022-03-07 - FBI- Ransomware gang breached 52 US critical infrastructure orgs/
|
— |
|
|
|
2022-03-07 - I CAN'T HEAR YOU NOW! INTERNAL BEHAVIOR OF INFORMATION-STEALING MALWARE AND JSOC DETECTION TRENDS/
|
— |
|
|
|
2022-03-07 - Lapsus$ Ransomware gang uses stolen source code to disguise malware files as trustworthy. Check Point customers remain protected/
|
— |
|
|
|
2022-03-07 - MS Office Files Involved Again in Recent Emotet Trojan Campaign – Part I/
|
— |
|
|
|
2022-03-07 - PHOREAL Malware Targets the Southeast Asian Financial Sector/
|
— |
|
|
|
2022-03-07 - PROPHET SPIDER Exploits Citrix ShareFile Remote Code Execution Vulnerability CVE-2021-22941 to Deliver Webshell/
|
— |
|
|
|
2022-03-07 - PROPHET SPIDER Exploits Citrix ShareFile Remote Code Execution Vulnerability/
|
— |
|
|
|
2022-03-07 - Ransomware gang Conti has already bounced back from damage caused by chat leaks, experts say/
|
— |
|
|
|
2022-03-07 - The Good the Bad and the Web Bug TA416 Increases Operational Tempo Against European Governments/
|
— |
|
|
|
2022-03-07 - The Good, the Bad, and the Web Bug TA416 Increases Operational Tempo Against European Governments as Conflict in Ukraine Escalates/
|
— |
|
|
|
2022-03-08 - Conti Ransomware source code- a well-designed COTS ransomware/
|
— |
|
|
|
2022-03-08 - Conti-Ransomware-IOC/
|
— |
|
|
|
2022-03-08 - Daxin Backdoor- In-Depth Analysis, Part One/
|
— |
|
|
|
2022-03-08 - Does This Look Infected A Summary of APT41 Targeting US State Governments/
|
— |
|
|
|
2022-03-08 - Does This Look Infected- A Summary of APT41 Targeting U.S. State Governments/
|
— |
|
|
|
2022-03-08 - Excel Add-ins Deliver JSSLoader Malware/
|
— |
|
|
|
2022-03-08 - GhostWriter - UNC1151 adopts MicroBackdoor Variants in Cyber Operations against Ukraine/
|
— |
|
|
|
2022-03-08 - Live reverse engineering of a trojanized medical app — Android-Joker/
|
— |
|
|
|
2022-03-08 - New RURansom Wiper Targets Russia/
|
— |
|
|
|
2022-03-08 - Record breaking DDoS Potential Discovered- CVE-2022-26143/
|
— |
|
|
|
2022-03-08 - The Media Environment and Domestic Public Opinion in China Toward Russia’s War On Ukraine/
|
— |
|
|
|
2022-03-08 - What Global Network Visibility Reveals about the Resurgence of One of the World’s Most Notorious Botnets/
|
— |
|
|
|
2022-03-09 - BazarLoader Actors Initiate Contact via Website Contact Forms/
|
— |
|
|
|
2022-03-09 - BokBot Technical Analysis/
|
— |
|
|
|
2022-03-09 - CISA updates Conti ransomware alert with nearly 100 domain names/
|
— |
|
|
|
2022-03-09 - Daxin Backdoor- In-Depth Analysis, Part Two/
|
— |
|
|
|
2022-03-09 - Exploitation of VMware Horizon Servers by TunnelVision Threat Actor/
|
— |
|
|
|
2022-03-09 - Hackers fork open-source reverse tunneling tool for persistence/
|
— |
|
|
|
2022-03-09 - New Nokoyawa Ransomware Possibly Related to Hive/
|
— |
|
|
|
2022-03-09 - Raccoon Stealer- “Trash panda” abuses Telegram/
|
— |
|
|
|
2022-03-09 - Ragnar Locker Breached 52 Organizations and Counting, FBI Warns/
|
— |
|
|
|
2022-03-09 - Ragnar ransomware gang hit 52 critical US orgs, says FBI/
|
— |
|
|
|
2022-03-09 - Set up Splunk for Incident Response in GCP in 15 minutes/
|
— |
|
|
|
2022-03-09 - Sockbot in GoLand/
|
— |
|
|
|
2022-03-09 - SodinokibiREvil Ransomware Defendant Extradited to United States and Arraigned in Texas/
|
— |
|
|
|
2022-03-09 - The Conti Leaks - Insight into a Ransomware Unicorn/
|
— |
|
|
|
2022-03-09 - Very very lazy Lazyscripter’s scripts- double compromise in a single obfuscation/
|
— |
|
|
|
2022-03-10 - AbereBot Returns as Escobar/
|
— |
|
|
|
2022-03-10 - BrightTALK- A look at current cyberattacks in Ukraine/
|
— |
|
|
|
2022-03-10 - Corporate website contact forms used to spread BazarBackdoor malware/
|
— |
|
|
|
2022-03-10 - Detecting HermeticWiper/
|
— |
|
|
|
2022-03-10 - Diavol the Enigma of Ransomware/
|
— |
|
|
|
2022-03-10 - HermeticWiper - Technical Analysis Report/
|
— |
|
|
|
2022-03-10 - Iranian Hackers Targeting Turkey and Arabian Peninsula in New Malware Campaign/
|
— |
|
|
|
2022-03-10 - Iranian linked conglomerate MuddyWater comprised of regionally focused subgroups/
|
— |
|
|
|
2022-03-10 - Leaks of Conti Ransomware Group Paint Picture of a Surprisingly Normal Tech Start-Up… Sort Of/
|
— |
|
|
|
2022-03-10 - MuddyWater targets Middle Eastern and Asian countries in phishing attacks/
|
— |
|
|
|
2022-03-10 - SecurityScorecard Discovers new botnet, ‘Zhadnost,’ responsible for Ukraine DDoS attacks/
|
— |
|
|
|
2022-03-10 - Threat Thursday- CryptBot Infostealer Masquerades as Cracked Software/
|
— |
|
|
|
2022-03-10 - WEDNESDAY, MARCH 9, 2022 Threat advisory- Cybercriminals compromise users with malware disguised as pro-Ukraine cyber tools/
|
— |
|
|
|
2022-03-11 - ChromeLoader Infects the Browser by Loading Malicious Extension/
|
— |
|
|
|
2022-03-11 - Cyberattack on the state authorities of Ukraine using the malicious program Cobalt Strike Beacon/
|
— |
|
|
|
2022-03-11 - Five Things You Need to Know About the Cyberwar in Ukraine/
|
— |
|
|
|
2022-03-11 - In-depth Technical Analysis of Colibri Loader Malware/
|
— |
|
|
|
2022-03-11 - Infamous Russian Troll Farm Appears to Be Source of Anti-Ukraine Propaganda/
|
— |
|
|
|
2022-03-11 - Is this SID taken- Varonis Threat Labs Discovers Synthetic SID Injection Attack/
|
— |
|
|
|
2022-03-11 - IsaacWiper Followed HermeticWiper Attack on Ukraine Orgs/
|
— |
|
|
|
2022-03-11 - LockBit 2.0 Ransomware Bugs and Database Recovery Attempts PART 1/
|
— |
|
|
|
2022-03-11 - LockBit 2.0 Ransomware Bugs and Database Recovery Attempts PART 2/
|
— |
|
|
|
2022-03-11 - LockBit ransomware gang claims attack on Bridgestone Americas/
|
— |
|
|
|
2022-03-11 - Malware Posing as Russia DDoS Tool Bites Ukraine Hackers/
|
— |
|
|
|
2022-03-11 - New Formbook Campaign Delivered Through Phishing Emails/
|
— |
|
|
|
2022-03-11 - New Wiper Malware Attacking Russia- Deep-Dive Into RURansom Malware/
|
— |
|
|
|
2022-03-11 - Part 1- LockBit 2.0 ransomware bugs and database recovery attempts/
|
— |
|
|
|
2022-03-11 - Part 2- LockBit 2.0 ransomware bugs and database recovery attempts/
|
— |
|
|
|
2022-03-12 - Analyzing Malware with Hooks, Stomps, and Return-addresses/
|
— |
|
|
|
2022-03-12 - AsyncRAT RCE vulnerability/
|
— |
|
|
|
2022-03-12 - Iranian APT- New Methods to Target Turkey, Arabian Peninsula/
|
— |
|
|
|
2022-03-13 - APT41 (Double Dragon)- A Dual Espionage and Cyber Crime Operation/
|
— |
|
|
|
2022-03-13 - Cutting corners against a Dridex downloader/
|
— |
|
|
|
2022-03-13 - Fake Valorant cheats on YouTube infect you with RedLine stealer/
|
— |
|
|
|
2022-03-13 - The hidden C2- Lampion trojan release 212 is on the rise and using a C2 server for two years/
|
— |
|
|
|
2022-03-14 - Android malware Escobar steals your Google Authenticator MFA codes/
|
— |
|
|
|
2022-03-14 - Fake antivirus updates used to deploy Cobalt Strike in Ukraine/
|
— |
|
|
|
2022-03-14 - Falcon OverWatch Threat Hunting Uncovers Ongoing NIGHT SPIDER Zloader Campaign/
|
— |
|
|
|
2022-03-14 - Nasty Escobar Banking Trojan Is Targeting Google Authenticator Codes For Android/
|
— |
|
|
|
2022-03-14 - New CaddyWiper data wiping malware hits Ukrainian networks/
|
— |
|
|
|
2022-03-14 - New destructive wiper malware deployed in Ukraine/
|
— |
|
|
|
2022-03-14 - Researchers Find New Evidence Linking Kwampirs Malware to Shamoon APT Hackers/
|
— |
|
|
|
2022-03-14 - Reversing Common Obfuscation Techniques/
|
— |
|
|
|
2022-03-14 - Stay Alert of Facebook Credential Stealer Applications Stealing User’s Credentials/
|
— |
|
|
|
2022-03-14 - Threat Advisory Opportunistic cyber criminals take advantage of Ukraine invasion/
|
— |
|
|
|
2022-03-14 - Webinar on cyberattacks in Ukraine – summary and Q&A/
|
— |
|
|
|
2022-03-15 - Alert (AA22-074A) Russian State-Sponsored Cyber Actors Gain Network Access by Exploiting Default Multifactor Authentication Protocols and “PrintNightmare” Vulnerability/
|
— |
|
|
|
2022-03-15 - Analysis of CaddyWiper, wiper targeting Ukraine/
|
— |
|
|
|
2022-03-15 - Anti-UPX Unpacking Technique/
|
— |
|
|
|
2022-03-15 - CaddyWiper, a new data wiper hits Ukraine/
|
— |
|
|
|
2022-03-15 - CaddyWiper- New wiper malware discovered in Ukraine/
|
— |
|
|
|
2022-03-15 - CaddyWiper- Third Wiper Malware Targeting Ukrainian Organizations/
|
— |
|
|
|
2022-03-15 - CaddyWiper- Yet Another Data Wiping Malware Targeting Ukrainian Networks/
|
— |
|
|
|
2022-03-15 - Decoding a DanaBot Downloader/
|
— |
|
|
|
2022-03-15 - Deep Dive Analysis - Pandora Ransomware/
|
— |
|
|
|
2022-03-15 - Detecting EnemyBot – Securonix Initial Coverage Advisory/
|
— |
|
|
|
2022-03-15 - Detecting EnemyBot/
|
— |
|
|
|
2022-03-15 - Russian State-Sponsored Cyber Actors Gain Network Access by Exploiting Default Multifactor Authentication Protocols and “PrintNightmare” Vulnerability/
|
— |
|
|
|
2022-03-15 - Threat Actor UAC-0056 Targeting Ukraine with Fake Translation Software/
|
— |
|
|
|
2022-03-15 - Threat Advisory- CaddyWiper/
|
— |
|
|
|
2022-03-15 - What Wicked Webs We Un-weave/
|
— |
|
|
|
2022-03-16 - BlackBerry says extortionists erase documents if ransom unpaid/
|
— |
|
|
|
2022-03-16 - China’s Government Is Learning From Russia’s Cyberattacks Against Ukraine/
|
— |
|
|
|
2022-03-16 - Cobalt Strike Analysis and Tutorial- How Malleable C2 Profiles Make Cobalt Strike Difficult to Detect/
|
— |
|
|
|
2022-03-16 - Conti Ransomware - An Analysis of Key Findings (Arctic Wolf)/
|
— |
|
|
|
2022-03-16 - CryptBot - Too good to be true/
|
— |
|
|
|
2022-03-16 - CVE-2022-23812- RIAEvangelist-node-ipc is malware - protestware/
|
— |
|
|
|
2022-03-16 - Destructive Data Wiper Malware Targeting high-profile Ukrainian Organizations/
|
— |
|
|
|
2022-03-16 - DirtyMoe Worming Modules/
|
— |
|
|
|
2022-03-16 - DirtyMoe- Worming Modules/
|
— |
|
|
|
2022-03-16 - Gh0stCringe RAT Being Distributed to Vulnerable Database Servers/
|
— |
|
|
|
2022-03-16 - Github Repository for Spark RAT/
|
— |
|
|
|
2022-03-16 - Have Your Cake and Eat it Too An Overview of UNC2891/
|
— |
|
|
|
2022-03-16 - Have Your Cake and Eat it Too- An Overview of UNC2891/
|
— |
|
|
|
2022-03-16 - New Ransomware Family Identified- LokiLocker RaaS Targets Windows Systems/
|
— |
|
|
|
2022-03-16 - Preparing for denial-of-service attacks with Talos Incident Response/
|
— |
|
|
|
2022-03-16 - Qakbot infection with Cobalt Strike and VNC activity/
|
— |
|
|
|
2022-03-16 - Quick revs- Pandora Ransomware - The Box has been open for a while/
|
— |
|
|
|
2022-03-16 - Suspected Conti Ransomware Activity in the Auto Manufacturing Sector/
|
— |
|
|
|
2022-03-16 - The Attack of the Chameleon Phishing Page/
|
— |
|
|
|
2022-03-16 - Uncompromised- When REvil comes knocking/
|
— |
|
|
|
2022-03-16 - Uncovering Trickbot’s use of IoT devices in command-and-control infrastructure/
|
— |
|
|
|
2022-03-17 - Analysis of CaddyWiper/
|
— |
|
|
|
2022-03-17 - ASUS warns of Cyclops Blink malware attacks targeting routers/
|
— |
|
|
|
2022-03-17 - Avira Labs Research Reveals Hydra Banking Trojan 2.0 targeting a wider network of German and Austrian banks/
|
— |
|
|
|
2022-03-17 - BIG sabotage- Famous npm package deletes files to protest Ukraine war/
|
— |
|
|
|
2022-03-17 - Cyber attack of the UAC-0020 group (Vermin) on state organizations of Ukraine using the malicious program SPECTR/
|
— |
|
|
|
2022-03-17 - Cyclops Blink Sets Sights on Asus Routers/
|
— |
|
|
|
2022-03-17 - Exposing initial access broker with ties to Conti/
|
— |
|
|
|
2022-03-17 - From BlackMatter to BlackCat- Analyzing two attacks from one affiliate/
|
— |
|
|
|
2022-03-17 - IcedID Analysis/
|
— |
|
|
|
2022-03-17 - Meet Lapsus$- An Unusual Group in the Cyber Extortion Business/
|
— |
|
|
|
2022-03-17 - New Unix rootkit used to steal ATM banking data/
|
— |
|
|
|
2022-03-17 - Rook ransomware analysis/
|
— |
|
|
|
2022-03-17 - Suspected DarkHotel APT activity update/
|
— |
|
|
|
2022-03-17 - The Ransomware Threat Intelligence Center/
|
— |
|
|
|
2022-03-17 - Threat Thursday- HermeticWiper Targets Defense Sectors in Ukraine/
|
— |
|
|
|
2022-03-18 - Analysis of Leaked Conti Intrusion Procedures by eSentire’s Threat Response Unit (TRU)/
|
— |
|
|
|
2022-03-18 - Cyber attack of UAC-0035 group (InvisiMole) on state organizations of Ukraine/
|
— |
|
|
|
2022-03-18 - Cyclops Blink malware sets up shop in ASUS routers/
|
— |
|
|
|
2022-03-18 - Double header- IsaacWiper and CaddyWiper/
|
— |
|
|
|
2022-03-18 - Ghostwriter in the Shell Expanding on Mandiant’s Attribution of UNC1151 to Belarus/
|
— |
|
|
|
2022-03-18 - Mēris and TrickBot standing on the shoulders of giants/
|
— |
|
|
|
2022-03-18 - Open Source Maintainer Sabotages Code to Wipe Russian, Belarusian Computers/
|
— |
|
|
|
2022-03-18 - Ransomware Spotlight- Hive/
|
— |
|
|
|
2022-03-18 - Strengthening Cybersecurity of SATCOM Network Providers and Customers/
|
— |
|
|
|
2022-03-19 - Behind the hack-and-leak scandal in Poland (UNC1151)/
|
— |
|
|
|
2022-03-19 - LockBit Ransomware v2.0/
|
— |
|
|
|
2022-03-19 - New Phishing toolkit lets anyone create fake Chrome browser windows/
|
— |
|
|
|
2022-03-20 - WizardSpider/
|
— |
|
|
|
2022-03-21 - [QuickNote] Analysis of Pandora ransomware/
|
— |
|
|
|
2022-03-21 - Anatomy of An Mirai Botnet Attack/
|
— |
|
|
|
2022-03-21 - APT35 Automates Initial Access Using ProxyShell/
|
— |
|
|
|
2022-03-21 - BitRAT Disguised as Windows Product Key Verification Tool Being Distributed/
|
— |
|
|
|
2022-03-21 - BitRAT malware now spreading as a Windows 10 license activator/
|
— |
|
|
|
2022-03-21 - Conti Affiliate Exposed- New Domain Names, IP Addresses and Email Addresses Uncovered/
|
— |
|
|
|
2022-03-21 - Conti Ransomware V. 3, Including Decryptor, Leaked/
|
— |
|
|
|
2022-03-21 - Dynamics of Targeted Ransomware Negotiation/
|
— |
|
|
|
2022-03-21 - Emotet Is Back and Is Deadlier Than Ever! A Rundown of the Emotet Malware/
|
— |
|
|
|
2022-03-21 - eSentire Threat Intelligence Malware Analysis- HermeticWiper & PartyTicket/
|
— |
|
|
|
2022-03-21 - Facestealer Trojan Hidden in Google Play Plunders Facebook Accounts/
|
— |
|
|
|
2022-03-21 - IoC from Operation Dragon Castling/
|
— |
|
|
|
2022-03-21 - Lorenz ransomware rebound- corruption and irrecoverable files/
|
— |
|
|
|
2022-03-21 - Python script to check a Cyclops Blink C&C/
|
— |
|
|
|
2022-03-21 - Sandworm- A tale of disruption told anew/
|
— |
|
|
|
2022-03-21 - Serpent malware campaign abuses Chocolatey Windows package manager/
|
— |
|
|
|
2022-03-21 - Serpent No Swiping New Backdoor Targets French Entities with Unique Attack Chain/
|
— |
|
|
|
2022-03-21 - Serpent, No Swiping! New Backdoor Targets French Entities with Unique Attack Chain/
|
— |
|
|
|
2022-03-21 - The Art and Science of macOS Malware Hunting with radare2 - Leveraging Xrefs, YARA and Zignatures/
|
— |
|
|
|
2022-03-21 - Vermin (UAC-0020) Hacking Collective Hits Ukrainian Government and Military with SPECTR Malware/
|
— |
|
|
|
2022-03-21 - VPN Appliance Forensics/
|
— |
|
|
|
2022-03-21 - What is Arid Gopher An Analysis of a New Never-Before-Seen Malware Variant/
|
— |
|
|
|
2022-03-21 - What is Arid Gopher- An Analysis of a New, Never-Before-Seen Malware Variant/
|
— |
|
|
|
2022-03-22 - Analyzing Exmatter- A Ransomware Data Exfiltration Tool/
|
— |
|
|
|
2022-03-22 - APT Attack Being Distributed as Windows Help File chm/
|
— |
|
|
|
2022-03-22 - BitRAT Malware Seen Spreading Through Unofficial Microsoft Windows Activators/
|
— |
|
|
|
2022-03-22 - Cobalt Strike- Overview – Part 7/
|
— |
|
|
|
2022-03-22 - Conti ransomware leaks - what happens when hackers support Russia/
|
— |
|
|
|
2022-03-22 - Cyberattack on Ukrainian enterprises using the DoubleZero destructor program/
|
— |
|
|
|
2022-03-22 - DEV-0537 (LAPSUS$-UNC3661) criminal actor targeting organizations for data exfiltration and destruction/
|
— |
|
|
|
2022-03-22 - DEV-0537 (UNC3661) criminal actor targeting organizations for data exfiltration and destruction/
|
— |
|
|
|
2022-03-22 - DEV-0537 criminal actor targeting organizations for data exfiltration and destruction/
|
— |
|
|
|
2022-03-22 - Dissecting a Phishing Campaign with a Captcha-based URL/
|
— |
|
|
|
2022-03-22 - Hunters Become The Hunted- Clipper Malware Disguised As AvD Crypto Stealer/
|
— |
|
|
|
2022-03-22 - JSAC 2022 -Day 1-/
|
— |
|
|
|
2022-03-22 - Microsoft and Okta Confirm Breach by LAPSUS$ Extortion Group/
|
— |
|
|
|
2022-03-22 - Microsoft confirms they were hacked by Lapsus$ extortion group/
|
— |
|
|
|
2022-03-22 - Operation Dragon Castling APT group targeting betting companies/
|
— |
|
|
|
2022-03-22 - Operation Dragon Castling- APT group targeting betting companies/
|
— |
|
|
|
2022-03-22 - Quantum Attack System – NSA -APT-C-40- Hacking Organization High-end Cyber Attack Weapon Technical Analysis Report (I)/
|
— |
|
|
|
2022-03-22 - Russian-Ukrainian Cyber Warfare – Rewterz Threat Intelligence Rollup/
|
— |
|
|
|
2022-03-22 - Storm Cloud on the Horizon GIMMICK Malware Strikes at macOS/
|
— |
|
|
|
2022-03-22 - Storm Cloud on the Horizon- GIMMICK Malware Strikes at macOS/
|
— |
|
|
|
2022-03-22 - This is a BlackCat you don't want crossing your path/
|
— |
|
|
|
2022-03-22 - UAC-0026 Cyber Attack Using HeaderTip Malware/
|
— |
|
|
|
2022-03-22 - What does Go-written malware look like- Here's a sample under the microscope/
|
— |
|
|
|
2022-03-23 - -Not So Lazarus Mapping DPRK Cyber Threat Groups to Government Organizations/
|
— |
|
|
|
2022-03-23 - A Closer Look at the LAPSUS$ Data Extortion Group/
|
— |
|
|
|
2022-03-23 - abuse mikrotik router by GLUPTEBA malware/
|
— |
|
|
|
2022-03-23 - Analysis of Attack Activity of PROMETHIUM Disguised/
|
— |
|
|
|
2022-03-23 - Arkei Variants- From Vidar to Mars Stealer/
|
— |
|
|
|
2022-03-23 - Bad Actors Trying to Capitalize on Current Events via Shameless Email Scams/
|
— |
|
|
|
2022-03-23 - Conti puts the organized in organized crime/
|
— |
|
|
|
2022-03-23 - Cyberattack on state organizations of Ukraine using the malicious program Cobalt Strike Beacon/
|
— |
|
|
|
2022-03-23 - Falcon OverWatch Threat Hunting Contributes to Seamless Protection Against Novel BlackCat Attack/
|
— |
|
|
|
2022-03-23 - GOLD ULRICK Leaks Reveal Organizational Structure and Relationships/
|
— |
|
|
|
2022-03-23 - Gone in 52 Seconds…and 42 Minutes- A Comparative Analysis of Ransomware Encryption Speed/
|
— |
|
|
|
2022-03-23 - Hunting Emotet campaigns with Kusto/
|
— |
|
|
|
2022-03-23 - It’s official, Lapsus$ gang compromised a Microsoft employee’s account/
|
— |
|
|
|
2022-03-23 - LokiLocker Ransomware May Use False Flag to Avoid Identification/
|
— |
|
|
|
2022-03-23 - Midas Ransomware - Tracing the Evolution of Thanos Ransomware Variants/
|
— |
|
|
|
2022-03-23 - MS Office Files Involved Again in Recent Emotet Trojan Campaign – Part II/
|
— |
|
|
|
2022-03-23 - Mustang Pandas Hodur Old tricks new Korplug variant/
|
— |
|
|
|
2022-03-23 - Mustang Panda’s Hodur- Old tricks, new Korplug variant/
|
— |
|
|
|
2022-03-23 - New JSSLoader Trojan Delivered Through XLL Files/
|
— |
|
|
|
2022-03-23 - New Mustang Panda hacking campaign targets diplomats, ISPs/
|
— |
|
|
|
2022-03-23 - Not So Lazarus- Mapping DPRK Cyber Threat Groups to Government Organizations/
|
— |
|
|
|
2022-03-23 - Raccoon Stealer – An Insight into Victim “Gates”/
|
— |
|
|
|
2022-03-23 - Tracking cyber intruders with Jupyter and Python/
|
— |
|
|
|
2022-03-23 - Trustwave’s Action Response- The Lapsus$ Hacker Group Shows Us the Importance of Securing the Digital Supply Chain/
|
— |
|
|
|
2022-03-24 - Alert (AA22-083A) Tactics, Techniques, and Procedures of Indicted State-Sponsored Russian Cyber Actors Targeting the Energy Sector/
|
— |
|
|
|
2022-03-24 - Another cyber espionage campaign in the Russia-Ukrainian ongoing cyber attacks/
|
— |
|
|
|
2022-03-24 - Chinese APT Combines Fresh Hodur RAT with Complex Anti-Detection/
|
— |
|
|
|
2022-03-24 - Chinese Threat Actor Scarab Targeting Ukraine/
|
— |
|
|
|
2022-03-24 - Coper Banking Trojan- Android Malware Posing As Google Play Store App Installer/
|
— |
|
|
|
2022-03-24 - Countering threats from North Korea/
|
— |
|
|
|
2022-03-24 - Crypto malware in patched wallets targeting Android and iOS devices/
|
— |
|
|
|
2022-03-24 - GIMMICK Malware Attacks macOS to Attack Organizations Across Asia/
|
— |
|
|
|
2022-03-24 - IsaacWiper Continues Trend of Wiper Attacks Against Ukraine/
|
— |
|
|
|
2022-03-24 - Malicious Microsoft Excel add-ins used to deliver RAT malware/
|
— |
|
|
|
2022-03-24 - Microsoft Help Files Disguise Vidar Malware/
|
— |
|
|
|
2022-03-24 - Microsoft help files repurposed to contain Vidar malware in new campaign/
|
— |
|
|
|
2022-03-24 - Muhstik Gang targets Redis Servers/
|
— |
|
|
|
2022-03-24 - Phishing-kit market- what’s inside “off-the-shelf” phishing packages/
|
— |
|
|
|
2022-03-24 - Ransomware Threat Report 2022/
|
— |
|
|
|
2022-03-24 - Threat Advisory- DoubleZero/
|
— |
|
|
|
2022-03-24 - Threat Brief- Lapsus$ Group/
|
— |
|
|
|
2022-03-24 - Threat Thursday- SunSeed Malware Targets Ukraine Refugee Aid Efforts/
|
— |
|
|
|
2022-03-24 - UK exposes Russian spy agency behind cyber incidents/
|
— |
|
|
|
2022-03-24 - Ukrainian Cyber Lead Says ‘At Least 4 Types of Malware’ in Use to Target Critical Infrastructure and Humanitarian Aid/
|
— |
|
|
|
2022-03-24 - Vidar Malware Launcher Concealed in Help File/
|
— |
|
|
|
2022-03-25 - Conti Ransomware Attacks Persist With an Updated Version Despite Leaks/
|
— |
|
|
|
2022-03-25 - Cyber Attackers Leverage Russia-Ukraine Conflict in Multiple Spam Campaigns/
|
— |
|
|
|
2022-03-25 - Cybercriminal Connected to Multimillion Dollar Ransomware Attacks Sentenced for Online Fraud Schemes/
|
— |
|
|
|
2022-03-25 - Mining data from Cobalt Strike beacons/
|
— |
|
|
|
2022-03-25 - Mustang Panda's Hodur- Old stuff, new variant of Korplug/
|
— |
|
|
|
2022-03-25 - Purple Fox Uses New Arrival Vector and Improves Malware Arsenal (IOCs)/
|
— |
|
|
|
2022-03-25 - Purple Fox Uses New Arrival Vector and Improves Malware Arsenal/
|
— |
|
|
|
2022-03-25 - Raccoon Stealer malware suspends operations due to war in Ukraine/
|
— |
|
|
|
2022-03-25 - Rafel Rat GitHub repository/
|
— |
|
|
|
2022-03-25 - XLSB Files- Because Binary is Stealthier Than XML/
|
— |
|
|
|
2022-03-26 - An AgentTesla Sample Using VBA Macros and Certutil/
|
— |
|
|
|
2022-03-26 - Analysis of a Caddy Wiper Sample Targeting Ukraine/
|
— |
|
|
|
2022-03-27 - A Case of Vidar Infostealer - Part 1 (Unpacking)/
|
— |
|
|
|
2022-03-27 - Conti ransomware source code investigation - part 1/
|
— |
|
|
|
2022-03-27 - Hive ransomware ports its Linux VMware ESXi encryptor to Rust/
|
— |
|
|
|
2022-03-28 - 'Purple Fox' Hackers Spotted Using New Variant of FatalRAT in Recent Malware Attacks/
|
— |
|
|
|
2022-03-28 - A Step-by-Step Analysis of the Russian APT Turla Backdoor called TinyTurla/
|
— |
|
|
|
2022-03-28 - Avast Finds Compromised Philippine Navy Certificate Used in Remote Access Tool/
|
— |
|
|
|
2022-03-28 - Betabot in the Rearview Mirror/
|
— |
|
|
|
2022-03-28 - Cyberattack on state bodies of Ukraine using PseudoSteel malware/
|
— |
|
|
|
2022-03-28 - Emotet is Back/
|
— |
|
|
|
2022-03-28 - Malicious Macros and Zone Identifier Alternate Data Stream Information Bypass/
|
— |
|
|
|
2022-03-28 - Microsoft Exchange targeted for IcedID reply-chain hijacking attacks/
|
— |
|
|
|
2022-03-28 - New Conversation Hijacking Campaign Delivering IcedID/
|
— |
|
|
|
2022-03-28 - New documents for the Okta breach/
|
— |
|
|
|
2022-03-28 - New UAC-0056 activity Theres a Go Elephant in the room/
|
— |
|
|
|
2022-03-28 - PlugX- A Talisman to Behold/
|
— |
|
|
|
2022-03-28 - Pwning Microsoft Azure Defender for IoT - Multiple Flaws Allow Remote Code Execution for All/
|
— |
|
|
|
2022-03-28 - Spoofed Invoice Used to Drop IcedID/
|
— |
|
|
|
2022-03-28 - Staatstrojaner-Hersteller FinFisher „ist geschlossen und bleibt es auch“/
|
— |
|
|
|
2022-03-28 - SunCrypt Ransomware Gains New Capabilities in 2022/
|
— |
|
|
|
2022-03-28 - SunCrypt ransomware is still alive and kicking in 2022/
|
— |
|
|
|
2022-03-28 - Threat Update DoubleZero Destructor/
|
— |
|
|
|
2022-03-28 - Under the hood of Wslink’s multilayered virtual machine/
|
— |
|
|
|
2022-03-28 - VBS Script Disguised as PDF File Being Distributed (Kimsuky)/
|
— |
|
|
|
2022-03-29 - A Large-Scale Supply Chain Attack Distributed Over 800 Malicious NPM Packages/
|
— |
|
|
|
2022-03-29 - APT attack disguised as North Korean defector resume format VBS script/
|
— |
|
|
|
2022-03-29 - APT Attack Impersonating Defector Resume Form (VBS SCRIPT)/
|
— |
|
|
|
2022-03-29 - Exchange Servers Speared in IcedID Phishing Campaign/
|
— |
|
|
|
2022-03-29 - Exclusive Threat Research- Mars (Stealer) Attacks!/
|
— |
|
|
|
2022-03-29 - From the Front Lines - Hive Ransomware Deploys Novel IPfuscation Technique To Avoid Detection/
|
— |
|
|
|
2022-03-29 - Hackers use modified MFA tool against Indian govt employees/
|
— |
|
|
|
2022-03-29 - Intrusion Truth - Five Years of Naming and Shaming China’s Spies/
|
— |
|
|
|
2022-03-29 - New spear phishing campaign targets Russian dissidents/
|
— |
|
|
|
2022-03-29 - PlugX A Talisman to Behold/
|
— |
|
|
|
2022-03-29 - Putin’s hackers gained full access to Hungary’s foreign ministry networks, the Orbán government has been unable to stop them/
|
— |
|
|
|
2022-03-29 - Threat Alert- First Python Ransomware Attack Targeting Jupyter Notebooks/
|
— |
|
|
|
2022-03-29 - Transparent Tribe campaign uses new bespoke malware to target Indian government officials/
|
— |
|
|
|
2022-03-29 - Unmasking China’s State Hackers/
|
— |
|
|
|
2022-03-29 - Verblecon- Sophisticated New Loader Used in Low-level Attacks/
|
— |
|
|
|
2022-03-29 - Woche 12- Schadsoftware «FluBot» in der Schweiz wieder aktiv und Web-Administratoren erhalten Drohmails von angeblich ukrainischen Hackern/
|
— |
|
|
|
2022-03-30 - Analysis of BlackGuard - a new info stealer malware being sold in a Russian hacking forum/
|
— |
|
|
|
2022-03-30 - Cloud Atlas Maldoc/
|
— |
|
|
|
2022-03-30 - Detecting COM Object Tasks by DarkHotel/
|
— |
|
|
|
2022-03-30 - Hive ransomware uses new 'IPfuscation' trick to hide payload/
|
— |
|
|
|
2022-03-30 - Malicious Word File Targeting Corporate Users Being Distributed/
|
— |
|
|
|
2022-03-30 - Mass spread of MarsStealer malicious program among citizens of Ukraine and domestic organizations/
|
— |
|
|
|
2022-03-30 - New Milestones for Deep Panda Log4Shell and Digitally Signed Fire Chili Rootkits/
|
— |
|
|
|
2022-03-30 - New Milestones for Deep Panda- Log4Shell and Digitally Signed Fire Chili Rootkits/
|
— |
|
|
|
2022-03-30 - New TACTICAL#OCTOPUS Attack Campaign Targets US Entities with Malware Bundled in Tax-Themed Documents/
|
— |
|
|
|
2022-03-30 - New TACTICAL-OCTOPUS Attack Campaign Targets US Entities with Malware Bundled in Tax-Themed Documents/
|
— |
|
|
|
2022-03-30 - New Wave Of Remcos RAT Phishing Campaign/
|
— |
|
|
|
2022-03-30 - Phishing campaign targets Russian govt dissidents with Cobalt Strike/
|
— |
|
|
|
2022-03-30 - Social Engineering Remains Key Tradecraft for Iranian APTs/
|
— |
|
|
|
2022-03-30 - This new ransomware targets data visualization tool Jupyter Notebook/
|
— |
|
|
|
2022-03-30 - Tracking cyber activity in Eastern Europe/
|
— |
|
|
|
2022-03-30 - VajraEleph from South Asia - Cyber espionage against Pakistani military personnel revealed/
|
— |
|
|
|
2022-03-30 - Who is EMBER BEAR-/
|
— |
|
|
|
2022-03-31 - AcidRain - A Modem Wiper Rains Down on Europe/
|
— |
|
|
|
2022-03-31 - AcidRain A Modem Wiper Rains Down on Europe/
|
— |
|
|
|
2022-03-31 - China-Linked Group TAG-28 Targets India’s “The Times Group” and UIDAI (Aadhaar) Government Agency With Winnti Malware/
|
— |
|
|
|
2022-03-31 - Cloudy with a Chance of Unclear Mailbox Sync- CrowdStrike Services Identifies Logging Inconsistencies in Microsoft 365/
|
— |
|
|
|
2022-03-31 - Conti Leaks- Examining the Panama Papers of Ransomware/
|
— |
|
|
|
2022-03-31 - Conti-nuation- methods and techniques observed in operations post the leaks/
|
— |
|
|
|
2022-03-31 - CVE-2022-22965- Spring Core Remote Code Execution Vulnerability Exploited In the Wild (SpringShell)/
|
— |
|
|
|
2022-03-31 - Deep Dive Analysis - Borat RAT/
|
— |
|
|
|
2022-03-31 - eSentire Threat Intelligence Malware Analysis- CaddyWiper/
|
— |
|
|
|
2022-03-31 - FORCEDENTRY- Sandbox Escape/
|
— |
|
|
|
2022-03-31 - How to- Detect and prevent common data exfiltration attacks/
|
— |
|
|
|
2022-03-31 - Lazarus Trojanized DeFi app for delivering malware/
|
— |
|
|
|
2022-03-31 - LockBit victim estimates cost of ransomware attack to be $42 million/
|
— |
|
|
|
2022-03-31 - Meet BlackGuard- a new infostealer peddled on Russian hacker forums/
|
— |
|
|
|
2022-03-31 - New BlackGuard password-stealing malware sold on hacker forums/
|
— |
|
|
|
2022-03-31 - New Password-Stealing Malware Sells on Hacking Forum! Chrome, Binance, Outlook, Telegram Users Affected-/
|
— |
|
|
|
2022-03-31 - Novel obfuscation leveraged by Hive ransomware/
|
— |
|
|
|
2022-03-31 - Reversemode - viasat/
|
— |
|
|
|
2022-03-31 - Spring Vulnerability Update - Exploitation Attempts CVE-2022-22965/
|
— |
|
|
|
2022-03-31 - Spring4Shell- Security Analysis of the latest Java RCE '0-day' vulnerabilities in Spring/
|
— |
|
|
|
2022-03-31 - State-sponsored Attack Groups Capitalise on Russia-Ukraine War for Cyber Espionage/
|
— |
|
|
|
2022-03-31 - Suspected AsyncRAT Delivered via ISO Files Using HTML Smuggling Technique/
|
— |
|
|
|
2022-03-31 - Threat Thursday- Malicious Macros Still Causing Chaos/
|
— |
|
|
|
2022-03-31 - Viasat confirms satellite modems were wiped with AcidRain malware/
|
— |
|
|
|
2022-03-31 - VIASAT incident- from speculation to technical details/
|
— |
|
|
|
2022-04-01 - BERT Embeddings- A Modern Machine-learning Approach for Detecting Malware from Command Lines (Part 2 of 2)/
|
— |
|
|
|
2022-04-01 - Chinese Hackers Target VMware Horizon Servers with Log4Shell to Deploy Rootkit/
|
— |
|
|
|
2022-04-01 - Complete dissection of an APK with a suspicious C2 Server/
|
— |
|
|
|
2022-04-01 - Dissecting Blackguard Info Stealer/
|
— |
|
|
|
2022-04-01 - Fresh TOTOLINK Vulnerabilities Picked Up by Beastmode Mirai Campaign/
|
— |
|
|
|
2022-04-01 - New UAC-0056 activity- There’s a Go Elephant in the room/
|
— |
|
|
|
2022-04-01 - Newly found Android malware records audio, tracks your location/
|
— |
|
|
|
2022-04-01 - Rising Stealer in Q1 2022- BlackGuard Stealer/
|
— |
|
|
|
2022-04-01 - Scammers are Exploiting Ukraine Donations/
|
— |
|
|
|
2022-04-01 - The Week in Ransomware - April 1st 2022 - 'I can fight with a keyboard'/
|
— |
|
|
|
2022-04-01 - Threat Update- CaddyWiper/
|
— |
|
|
|
2022-04-01 - What Our Honeypot Sees Just One Day After The Spring4Shell Advisory/
|
— |
|
|
|
2022-04-02 - Cyber Espionage Actor Deploying Malware Using Excel/
|
— |
|
|
|
2022-04-02 - Emotet Analysis Part 1- Unpacking/
|
— |
|
|
|
2022-04-02 - Malware development tricks. Find kernel32.dll base- asm style. C++ example/
|
— |
|
|
|
2022-04-02 - Study of targeted attacks on Russian research institutes/
|
— |
|
|
|
2022-04-03 - New Borat remote access malware is no laughing matter/
|
— |
|
|
|
2022-04-04 - AcidRain Wiper Malware hit Routers and Modems, Haults Communication/
|
— |
|
|
|
2022-04-04 - Confirmation of damage to domestic e-commerce sites, actual situation of Web skimming attacks and examples of countermeasures that Rack thinks (Water Pamola)/
|
— |
|
|
|
2022-04-04 - Cyber attack by UAC-0010 (Armageddon) on state institutions of the European Union/
|
— |
|
|
|
2022-04-04 - Cyber attack of UAC-0010 group (Armageddon) on state organizations of Ukraine/
|
— |
|
|
|
2022-04-04 - Detailed Analysis of LAPSUS$ Cybercriminal Group that has Compromised Nvidia, Microsoft, Okta, and Globant/
|
— |
|
|
|
2022-04-04 - Elephant Framework Delivered in Phishing Attacks Against Ukrainian Organizations/
|
— |
|
|
|
2022-04-04 - Experts Shed Light on BlackGuard Infostealer Malware Sold on Russian Hacking Forums/
|
— |
|
|
|
2022-04-04 - FIN7 Power Hour Adversary Archaeology and the Evolution of FIN7/
|
— |
|
|
|
2022-04-04 - FIN7 Power Hour- Adversary Archaeology and the Evolution of FIN7/
|
— |
|
|
|
2022-04-04 - Ransomware Spotlight- AvosLocker/
|
— |
|
|
|
2022-04-04 - Sharing is Caring- Abusing Shared Sections for Code Injection/
|
— |
|
|
|
2022-04-04 - Spring4Shell (CVE-2022-22965)- details and mitigations/
|
— |
|
|
|
2022-04-04 - Stolen Images Campaign Ends in Conti Ransomware/
|
— |
|
|
|
2022-04-04 - The Ransomware Files, Episode 6- Kaseya and REvil/
|
— |
|
|
|
2022-04-05 - A New Info Stealer Targeting Over 30 Browsers/
|
— |
|
|
|
2022-04-05 - Azure Active Directory Exposes Internal Information/
|
— |
|
|
|
2022-04-05 - Chinese hackers abuse VLC Media Player to launch malware loader/
|
— |
|
|
|
2022-04-05 - Cicada - Chinese APT Group Widens Targeting in Recent Espionage Activity/
|
— |
|
|
|
2022-04-05 - Cicada Chinese APT Group Widens Targeting in Recent Espionage Activity/
|
— |
|
|
|
2022-04-05 - Cicada- Chinese APT Group Widens Targeting in Recent Espionage Activity/
|
— |
|
|
|
2022-04-05 - Colibri Loader combines Task Scheduler and PowerShell in clever persistence technique/
|
— |
|
|
|
2022-04-05 - eSentire Threat Intelligence Malware Analysis- DoubleZero/
|
— |
|
|
|
2022-04-05 - eSentire Threat Intelligence Malware Analysis- HeaderTip/
|
— |
|
|
|
2022-04-05 - Incident report- From CLI to console, chasing an attacker in AWS/
|
— |
|
|
|
2022-04-05 - Justice Department Investigation Leads to Shutdown of Largest Online Darknet Marketplace/
|
— |
|
|
|
2022-04-05 - Malicious Word Documents Using MS Media Player (Impersonating AhnLab)/
|
— |
|
|
|
2022-04-05 - Move fast and commit crimes Contis development teams mirror corporate tech/
|
— |
|
|
|
2022-04-05 - New Analysis- The CaddyWiper Malware Attacking Ukraine/
|
— |
|
|
|
2022-04-05 - Peace through Pegasus Jordanian Human Rights Defenders and Journalists Hacked with Pegasus Spyware/
|
— |
|
|
|
2022-04-05 - RTF template injection sample targeting Malaysia/
|
— |
|
|
|
2022-04-05 - Russia's FSB malign activity- factsheet/
|
— |
|
|
|
2022-04-05 - Threat Spotlight- AsyncRAT campaigns feature new version of 3LOSH crypter/
|
— |
|
|
|
2022-04-05 - Thwarting Loaders- From SocGholish to BLISTER’s LockBit Payload (IoCs)/
|
— |
|
|
|
2022-04-05 - Thwarting Loaders- From SocGholish to BLISTER’s LockBit Payload/
|
— |
|
|
|
2022-04-06 - Anonymous Affiliate NB65 Breach State-Run Russian Broadcaster; Leak 786GB of Data/
|
— |
|
|
|
2022-04-06 - Attorney General Merrick B. Garland Announces Enforcement Actions to Disrupt and Prosecute Russian Criminal Activity (video)/
|
— |
|
|
|
2022-04-06 - Cado Discovers Denonia- The First Malware Specifically Targeting Lambda/
|
— |
|
|
|
2022-04-06 - Continued Targeting of Indian Power Grid Assets by Chinese State-Sponsored Activity Group/
|
— |
|
|
|
2022-04-06 - Fake e‑shops on the prowl for banking credentials using Android malware/
|
— |
|
|
|
2022-04-06 - Justice Department Announces Court-Authorized Disruption of Botnet Controlled by the Russian Federation’s Main Intelligence Directorate (GRU)/
|
— |
|
|
|
2022-04-06 - Karakurt Hacking Team Indicators of Compromise (IOC)/
|
— |
|
|
|
2022-04-06 - Lockbit 3.0- Another Upgrade to World’s Most Active Ransomware/
|
— |
|
|
|
2022-04-06 - Operation Bearded Barbie APT-C-23 Campaign Targeting Israeli Officials/
|
— |
|
|
|
2022-04-06 - Operation Bearded Barbie- APT-C-23 Campaign Targeting Israeli Officials/
|
— |
|
|
|
2022-04-06 - Tax Return Customer Campaign Attempts to Infect Victims with Sorillus RAT/
|
— |
|
|
|
2022-04-06 - The Latest Remcos RAT Driven By Phishing Campaign/
|
— |
|
|
|
2022-04-06 - TRM Analysis Corroborates Suspected Ties Between Conti and Ryuk Ransomware Groups and Wizard Spider/
|
— |
|
|
|
2022-04-06 - UpdateAgent macOS Malware/
|
— |
|
|
|
2022-04-06 - US disrupts Russian Cyclops Blink botnet before being used in attacks/
|
— |
|
|
|
2022-04-06 - WannaHusky Malware Analysis w- YARA + TTPs/
|
— |
|
|
|
2022-04-06 - Windows MetaStealer Malware/
|
— |
|
|
|
2022-04-06 - Yanluowang Ransomware Analysis/
|
— |
|
|
|
2022-04-07 - A Bad Luck BlackCat/
|
— |
|
|
|
2022-04-07 - Adversarial Threat Report/
|
— |
|
|
|
2022-04-07 - Bypass Multi Factor Authentication (MFA) of OUTLOOK/
|
— |
|
|
|
2022-04-07 - Cyber attack of UAC-0010 group (Armageddon) on state organizations of Ukraine/
|
— |
|
|
|
2022-04-07 - Denys Iarmak, Member of hacking group (FIN7) sentenced for scheme that compromised tens of millions of debit and credit cards/
|
— |
|
|
|
2022-04-07 - Disrupting cyberattacks targeting Ukraine (APT28)/
|
— |
|
|
|
2022-04-07 - First Malware Targeting AWS Lambda Serverless Platform Discovered/
|
— |
|
|
|
2022-04-07 - Google is on guard- sharks shall not pass!/
|
— |
|
|
|
2022-04-07 - Hamas-linked Hackers Targeting High-Ranking Israelis Using 'Catfish' Lures/
|
— |
|
|
|
2022-04-07 - Looking Inside Pandora’s Box/
|
— |
|
|
|
2022-04-07 - Malicious web redirect service infects 16,500 sites to push malware/
|
— |
|
|
|
2022-04-07 - Malpedia Page for GraphSteel/
|
— |
|
|
|
2022-04-07 - Mars, a red-hot information stealer/
|
— |
|
|
|
2022-04-07 - MoqHao Part 2- Continued European Expansion/
|
— |
|
|
|
2022-04-07 - New Octo Banking Trojan Spreading via Fake Apps on Google Play Store/
|
— |
|
|
|
2022-04-07 - North Korea- Intelligence Assessment 2022/
|
— |
|
|
|
2022-04-07 - office-node (OFFODE) - This is POC of how an attacker automate user's responce and bypass outlook/
|
— |
|
|
|
2022-04-07 - Parrot TDS takes over web servers and threatens millions/
|
— |
|
|
|
2022-04-07 - Revenge RAT Malware is back- From Microsoft Excel macros to Remote Access Trojan/
|
— |
|
|
|
2022-04-07 - SPM55- Ascending the Ranks of Indonesian Phishing As A Service Offerings/
|
— |
|
|
|
2022-04-07 - Threat Thursday- AvosLocker Prompts Advisory from FBI and FinCEN/
|
— |
|
|
|
2022-04-07 - Ukraine CyberWar Overview/
|
— |
|
|
|
2022-04-07 - You Bet Your Lsass- Hunting LSASS Access/
|
— |
|
|
|
2022-04-08 - China accused of cyberattacks on Indian power grid/
|
— |
|
|
|
2022-04-08 - ConversingLabs Ep. 2- Conti pivots as ransomware as a service struggles/
|
— |
|
|
|
2022-04-08 - CVE-2022-22965- Analyzing the Exploitation of Spring4Shell Vulnerability in Weaponizing and Executing the Mirai Botnet Malware/
|
— |
|
|
|
2022-04-08 - East Tennessee Children’s Hospital updates information on ransomware incident/
|
— |
|
|
|
2022-04-08 - Hackers Exploiting Spring4Shell Vulnerability to Deploy Mirai Botnet Malware/
|
— |
|
|
|
2022-04-08 - Look out for Octo's tentacles! A new on-device fraud Android Banking Trojan with a rich legacy/
|
— |
|
|
|
2022-04-08 - Microsoft Obtains Court Order to Take Down Domains Used to Target Ukraine/
|
— |
|
|
|
2022-04-08 - New SolarMarker (Jupyter) Campaign Demonstrates the Malware’s Changing Attack Patterns/
|
— |
|
|
|
2022-04-08 - Researchers Connect BlackCat Ransomware with Past BlackMatter Malware Activity/
|
— |
|
|
|
2022-04-08 - Scammers make off with $1.6 million in crypto Fake giveaways hit bitcoiners again. Now on YouTube/
|
— |
|
|
|
2022-04-09 - Hackers use Conti's leaked ransomware to attack Russian companies/
|
— |
|
|
|
2022-04-09 - Method of analyzing and unpacking compressed PE (Portable Executable) files/
|
— |
|
|
|
2022-04-09 - New Android banking malware remotely takes control of your device/
|
— |
|
|
|
2022-04-09 - Two men arrested for impersonating DHS employees. Lets unravel some infrastructure/
|
— |
|
|
|
2022-04-10 - New Meta information stealer distributed in malspam campaign/
|
— |
|
|
|
2022-04-10 - Qakbot Series- String Obfuscation/
|
— |
|
|
|
2022-04-10 - Threatening Redirect Web Service Instills Malicious Campaigns In Over 16,500 Websites/
|
— |
|
|
|
2022-04-10 - Zebrocy Malware Technical Analysis Report/
|
— |
|
|
|
2022-04-11 - Analysis of the SunnyDay ransomware/
|
— |
|
|
|
2022-04-11 - CISA warns orgs of WatchGuard bug exploited by Russian state hackers/
|
— |
|
|
|
2022-04-11 - Conti ransomware source code investigation - part 2/
|
— |
|
|
|
2022-04-11 - DPRK-Nexus Adversary Targets South-Korean Individuals In A New Chapter of Kitty Phishing Operation/
|
— |
|
|
|
2022-04-11 - Fake Chrome Setup Leads to NetSupportManager RAT and Mars Stealer/
|
— |
|
|
|
2022-04-11 - Fakecalls- a talking Trojan/
|
— |
|
|
|
2022-04-11 - IRQLs Close Encounters of the Rootkit Kind/
|
— |
|
|
|
2022-04-11 - Leaked Conti Ransomware Used to Target Russia/
|
— |
|
|
|
2022-04-11 - Obfuscated obfuscation/
|
— |
|
|
|
2022-04-11 - Process Injection using CreateRemoteThread API/
|
— |
|
|
|
2022-04-11 - Qbot malware switches to new Windows Installer infection vector/
|
— |
|
|
|
2022-04-11 - Researchers warn of FFDroider and Lightning info-stealers targeting users in the wild/
|
— |
|
|
|
2022-04-11 - Snow Abuse- Analysis of the Suspected Lazarus Attack Activities against South Korean Companies/
|
— |
|
|
|
2022-04-12 - Attackers linger on government agency computers before deploying Lockbit ransomware/
|
— |
|
|
|
2022-04-12 - Cyberattack by Sandworm Group (UAC-0082) on energy facilities of Ukraine using malicious programs INDUSTROYER2 and CADDYWIPER/
|
— |
|
|
|
2022-04-12 - Enemybot- A Look into Keksec's Latest DDoS Botnet/
|
— |
|
|
|
2022-04-12 - Ghidra script to handle stack strings/
|
— |
|
|
|
2022-04-12 - Industroyer2- Industroyer reloaded/
|
— |
|
|
|
2022-04-12 - Malware Campaigns Targeting African Banking Sector/
|
— |
|
|
|
2022-04-12 - March 2022’s Most Wanted Malware- Easter Phishing Scams Help Emotet Assert its Dominance/
|
— |
|
|
|
2022-04-12 - Qbot Botnet Deploys Malware Payloads Through Malicious Windows Installers/
|
— |
|
|
|
2022-04-12 - Recent attacks by Bahamut group revealed/
|
— |
|
|
|
2022-04-12 - SystemBC Being Used by Various Attackers/
|
— |
|
|
|
2022-04-12 - Tarrask malware uses scheduled tasks for defense evasion/
|
— |
|
|
|
2022-04-12 - The State of Stalkerware in 2021/
|
— |
|
|
|
2022-04-12 - Threat Profile- Avaddon/
|
— |
|
|
|
2022-04-12 - Threat Profile- Conti/
|
— |
|
|
|
2022-04-12 - Threat Profile- Hive/
|
— |
|
|
|
2022-04-12 - Threat Profile- LockBit/
|
— |
|
|
|
2022-04-12 - Threat Profile- REvil/
|
— |
|
|
|
2022-04-13 - Alert (AA22-103A) APT Cyber Tools Targeting ICS-SCADA Devices/
|
— |
|
|
|
2022-04-13 - Court order for taking down Zloader Infrastructure/
|
— |
|
|
|
2022-04-13 - Dismantling ZLoader- How malicious ads led to disabled security tools and ransomware/
|
— |
|
|
|
2022-04-13 - Emotet modules and recent attacks/
|
— |
|
|
|
2022-04-13 - ESET takes part in global operation to disrupt Zloader botnets/
|
— |
|
|
|
2022-04-13 - Fodcha, a new DDos botnet/
|
— |
|
|
|
2022-04-13 - INCONTROLLER New State-Sponsored Cyber Attack Tools Target Multiple Industrial Control Systems/
|
— |
|
|
|
2022-04-13 - INCONTROLLER- New State-Sponsored Cyber Attack Tools Target Multiple Industrial Control Systems/
|
— |
|
|
|
2022-04-13 - New Threat- The Muffled Fodcha Botnet/
|
— |
|
|
|
2022-04-13 - Notorious cybercrime gang’s botnet disrupted/
|
— |
|
|
|
2022-04-13 - Qakbot Series- Configuration Extraction/
|
— |
|
|
|
2022-04-13 - What is going on with Lapsus$-/
|
— |
|
|
|
2022-04-13 - Zhadnost strikes again… this time in Finland/
|
— |
|
|
|
2022-04-14 - -Haskers Gang- Introduces New ZingoStealer/
|
— |
|
|
|
2022-04-14 - Blinding Snort- Breaking The Modbus OT Preprocessor/
|
— |
|
|
|
2022-04-14 - BlueHornet – One APT to Terrorize Them All/
|
— |
|
|
|
2022-04-14 - Cyberattack on state organizations of Ukraine using the malicious program IcedID/
|
— |
|
|
|
2022-04-14 - Cyberattack on Ukrainian government organizations using exploits for XSS vulnerabilities in Zimbra Collaboration Suite/
|
— |
|
|
|
2022-04-14 - Hackers target Ukrainian govt with IcedID malware, Zimbra exploits/
|
— |
|
|
|
2022-04-14 - Hacking activity of SectorB Group in 2021 Chinese government supported hacking group SectorB/
|
— |
|
|
|
2022-04-14 - Lazarus Targets Chemical Sector/
|
— |
|
|
|
2022-04-14 - New ZingoStealer infostealer drops more malware, cryptominers/
|
— |
|
|
|
2022-04-14 - Old Gremlins new methods/
|
— |
|
|
|
2022-04-14 - Old Gremlins, new methods/
|
— |
|
|
|
2022-04-14 - Orion Threat Alert Flight of the BumbleBee/
|
— |
|
|
|
2022-04-14 - Orion Threat Alert- Flight of the BumbleBee/
|
— |
|
|
|
2022-04-14 - Threat Spotlight- -Haskers Gang- Introduces New ZingoStealer/
|
— |
|
|
|
2022-04-14 - Threat Thursday- HeaderTip Backdoor Shows Attackers from China Preying on Ukraine/
|
— |
|
|
|
2022-04-14 - Zloader 2- The Silent Night/
|
— |
|
|
|
2022-04-15 - Karakurt revealed as data extortion arm of Conti cybercrime syndicate/
|
— |
|
|
|
2022-04-15 - Revisiting BatLoader C2 structure/
|
— |
|
|
|
2022-04-15 - STRT-TA03 CPE - Destructive Software/
|
— |
|
|
|
2022-04-15 - The Karakurt Web- Threat Intel and Blockchain Analysis Reveals Extension of Conti Business Model/
|
— |
|
|
|
2022-04-15 - Top 10 Malware March 2022/
|
— |
|
|
|
2022-04-15 - Tough Times for Ukrainian Honeypot-/
|
— |
|
|
|
2022-04-16 - Qakbot Series- Process Injection/
|
— |
|
|
|
2022-04-16 - Snip3 Crypter used with DCRat via VBScript/
|
— |
|
|
|
2022-04-17 - Lessons from the Conti Leaks/
|
— |
|
|
|
2022-04-17 - Qakbot Series- API Hashing/
|
— |
|
|
|
2022-04-17 - Reversing a NSIS dropper using quick and dirty shellcode emulation/
|
— |
|
|
|
2022-04-18 - A blueprint for evading industry leading endpoint protection in 2022/
|
— |
|
|
|
2022-04-18 - A new type of malware from the Lazarus attack group that exploits the INITECH process/
|
— |
|
|
|
2022-04-18 - Alert (AA22-108A)- TraderTraitor- North Korean State-Sponsored APT Targets Blockchain Companies/
|
— |
|
|
|
2022-04-18 - An Investigation of the BlackCat Ransomware via Trend Micro Vision One/
|
— |
|
|
|
2022-04-18 - CatalanGate Extensive Mercenary Spyware Operation against Catalans Using Pegasus and Candiru/
|
— |
|
|
|
2022-04-18 - Conti Group Targets ESXi Hypervisors With its Linux Variant/
|
— |
|
|
|
2022-04-18 - Cyberattack on state organizations of Ukraine using the topic Azovstal and the malicious program Cobalt Strike Beacon/
|
— |
|
|
|
2022-04-18 - Enter KaraKurt- Data Extortion Arm of Prolific Ransomware Group/
|
— |
|
|
|
2022-04-18 - Free decryptor released for Yanluowang ransomware victims/
|
— |
|
|
|
2022-04-18 - From the Front Lines - Peering into A PYSA Ransomware Attack/
|
— |
|
|
|
2022-04-18 - How to recover files encrypted by Yanlouwang/
|
— |
|
|
|
2022-04-18 - New BotenaGo Variant Discovered by Nozomi Networks Labs/
|
— |
|
|
|
2022-04-18 - Nobelium - Israeli Embassy Maldoc/
|
— |
|
|
|
2022-04-18 - TraderTraitor North Korean State-Sponsored APT Targets Blockchain Companies/
|
— |
|
|
|
2022-04-18 - Trends in the Recent Emotet Maldoc Outbreak/
|
— |
|
|
|
2022-04-18 - Under The Lens- Eagle Monitor RAT - Upgraded Version Of RAT With New TTPs/
|
— |
|
|
|
2022-04-18 - Unofficial Windows 11 upgrade installs info-stealing malware/
|
— |
|
|
|
2022-04-19 - BAZARLOADER- Unpacking An ISO File Infection/
|
— |
|
|
|
2022-04-19 - Emotet botnet switches to 64-bit modules, increases activity/
|
— |
|
|
|
2022-04-19 - Extracting Cobalt Strike from Windows Error Reporting/
|
— |
|
|
|
2022-04-19 - Fake MetaMask App Steals Cryptocurrency/
|
— |
|
|
|
2022-04-19 - Hive Ransomware Analysis/
|
— |
|
|
|
2022-04-19 - Stop Crypto Kleptos in Their Tracks/
|
— |
|
|
|
2022-04-19 - Using Emulation Against Anti-Reverse Engineering Techniques/
|
— |
|
|
|
2022-04-20 - 'aa' distribution Qakbot (Qbot) infection with DarkVNC traffic/
|
— |
|
|
|
2022-04-20 - Alert (AA22-110A)- Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure/
|
— |
|
|
|
2022-04-20 - Analyzing Attempts to Exploit the Spring4Shell Vulnerability CVE-2022-22965 to Deploy Cryptocurrency Miners/
|
— |
|
|
|
2022-04-20 - Mars Stealer malware analysis/
|
— |
|
|
|
2022-04-20 - Microsoft Exchange servers hacked to deploy Hive ransomware/
|
— |
|
|
|
2022-04-20 - REvil's TOR sites come alive to redirect to new ransomware operation/
|
— |
|
|
|
2022-04-20 - Russian hackers target Czech websites in a series of cyberattacks/
|
— |
|
|
|
2022-04-20 - Shuckworm Espionage Group Continues Intense Campaign Against Ukraine/
|
— |
|
|
|
2022-04-20 - Shuckworm- Espionage Group Continues Intense Campaign Against Ukraine/
|
— |
|
|
|
2022-04-20 - TraderTraitor- North Korean State-Sponsored APT Targets Blockchain Companies/
|
— |
|
|
|
2022-04-21 - Criminals provide Ginzo stealer for free, now it is gaining traction/
|
— |
|
|
|
2022-04-21 - GOLD ULRICK Continues Conti Operations Despite Public Disclosures/
|
— |
|
|
|
2022-04-21 - Hackers Spearphish Corporate Hiring Managers with Poisoned Resumes, Infecting Them with the More_Eggs Malware, Warns eSentire/
|
— |
|
|
|
2022-04-21 - Nokoyawa Ransomware - New Karma-Nemty Variant Wears Thin Disguise/
|
— |
|
|
|
2022-04-21 - Prynt Stealer Spotted In The Wild/
|
— |
|
|
|
2022-04-21 - TeamTNT targeting AWS Alibaba/
|
— |
|
|
|
2022-04-21 - The ink-stained trail of GOLDBACKDOOR/
|
— |
|
|
|
2022-04-21 - Threat Thursday- BlackGuard Infostealer Rises from Russian Underground Markets/
|
— |
|
|
|
2022-04-21 - Understanding Cobalt Strike Profiles - Updated For Cobalt Strike 4.6/
|
— |
|
|
|
2022-04-21 - Warez users fell for Certishell/
|
— |
|
|
|
2022-04-22 - FIN7 Power Hour- Adversary Archaeology and the Evolution of FIN7/
|
— |
|
|
|
2022-04-23 - Cryptojacking on the Fly- TeamTNT Using NVIDIA Drivers to Mine Cryptocurrency/
|
— |
|
|
|
2022-04-23 - Industroyer2 in Perspective/
|
— |
|
|
|
2022-04-24 - Github Repository for Stealerium/
|
— |
|
|
|
2022-04-24 - Shortcut to Emotet, an odd TTP change/
|
— |
|
|
|
2022-04-25 - [RE026] A Deep Dive into Zloader - the Silent Night/
|
— |
|
|
|
2022-04-25 - Choziosi Loader- Multi-platform campaign delivering browser extension malware/
|
— |
|
|
|
2022-04-25 - Deep Dive into the Elephant Framework – A New Cyber Threat in Ukraine/
|
— |
|
|
|
2022-04-25 - Defeating BazarLoader Anti-Analysis Techniques/
|
— |
|
|
|
2022-04-25 - Full RedLine malware analysis - IoCs - Stealing information/
|
— |
|
|
|
2022-04-25 - INDUSTROYER.V2- Old Malware Learns New Tricks/
|
— |
|
|
|
2022-04-25 - Industroyer2 IEC-104 Analysis/
|
— |
|
|
|
2022-04-25 - New Core Impact Backdoor Delivered Via VMware Vulnerability/
|
— |
|
|
|
2022-04-25 - Quantum Ransomware/
|
— |
|
|
|
2022-04-25 - Simple PDF Linking to Malicious Content/
|
— |
|
|
|
2022-04-25 - Static unpacker and decoder for Hello Kitty Packer/
|
— |
|
|
|
2022-04-25 - THREAT ANALYSIS REPORT- SocGholish and Zloader – From Fake Updates and Installers to Owning Your Systems/
|
— |
|
|
|
2022-04-26 - A -Naver--ending game of Lazarus APT/
|
— |
|
|
|
2022-04-26 - American Dental Association hit by new Black Basta ransomware/
|
— |
|
|
|
2022-04-26 - Conti and Emotet A constantly destructive duo/
|
— |
|
|
|
2022-04-26 - Emotet malware now installs via PowerShell in Windows shortcut files/
|
— |
|
|
|
2022-04-26 - Emotet Tests New Delivery Techniques/
|
— |
|
|
|
2022-04-26 - Hive0117 Continues Fileless Malware Delivery in Eastern Europe/
|
— |
|
|
|
2022-04-26 - How Cybercriminals Abuse Cloud Tunneling Services/
|
— |
|
|
|
2022-04-26 - Lazarus Group APT targeting South Korean users/
|
— |
|
|
|
2022-04-26 - New Malware of Lazarus Threat Actor Group Exploiting INITECH Process/
|
— |
|
|
|
2022-04-26 - UAC-0056 cyberattack using GraphSteel and GrimPlant malware and COVID-19/
|
— |
|
|
|
2022-04-27 - A lookback under the TA410 umbrella Its cyberespionage TTPs and activity/
|
— |
|
|
|
2022-04-27 - A lookback under the TA410 umbrella- Its cyberespionage TTPs and activity/
|
— |
|
|
|
2022-04-27 - Alert (AA22-117A) 2021 Top Routinely Exploited Vulnerabilities/
|
— |
|
|
|
2022-04-27 - APT trends report Q1 2022/
|
— |
|
|
|
2022-04-27 - Assembling the Russian Nesting Doll UNC2452 Merged into APT29/
|
— |
|
|
|
2022-04-27 - Assembling the Russian Nesting Doll- UNC2452 Merged into APT29/
|
— |
|
|
|
2022-04-27 - BRONZE PRESIDENT Targets Russian Speakers with Updated PlugX/
|
— |
|
|
|
2022-04-27 - Detecting Ransomware’s Stealthy Boot Configuration Edits/
|
— |
|
|
|
2022-04-27 - Emotet Returns With New TTPs And Delivers .Lnk Files To Its Victims/
|
— |
|
|
|
2022-04-27 - eSentire Threat Intelligence Malware Analysis- SolarMarker/
|
— |
|
|
|
2022-04-27 - Five hacker groups that attack Ukraine the most/
|
— |
|
|
|
2022-04-27 - Industroyer2 - Nozomi Networks Labs Analyzes the IEC 104 Payload/
|
— |
|
|
|
2022-04-27 - Industroyer2- Nozomi Networks Labs Analyzes the IEC 104 Payload/
|
— |
|
|
|
2022-04-27 - IOCs for Earth Berberoka - Linux/
|
— |
|
|
|
2022-04-27 - IOCs for Earth Berberoka - MacOS/
|
— |
|
|
|
2022-04-27 - IOCs for Earth Berberoka - Windows/
|
— |
|
|
|
2022-04-27 - IOCs for Earth Berberoka/
|
— |
|
|
|
2022-04-27 - LockBit Ransomware Side-loads Cobalt Strike Beacon with Legitimate VMware Utility/
|
— |
|
|
|
2022-04-27 - New APT Group Earth Berberoka Targets Gambling Websites With Old and New Malware/
|
— |
|
|
|
2022-04-27 - New APT Group Earth Berberoka Targets/
|
— |
|
|
|
2022-04-27 - New Black Basta ransomware springs into action with a dozen breaches/
|
— |
|
|
|
2022-04-27 - RedLine Stealer Resurfaces in Fresh RIG Exploit Kit Campaign/
|
— |
|
|
|
2022-04-27 - Reverse Engineering PsExec for fun and knowledge/
|
— |
|
|
|
2022-04-27 - Special Report Ukraine/
|
— |
|
|
|
2022-04-27 - Stonefly North Korea-linked Spying Operation Continues to Hit High-value Targets/
|
— |
|
|
|
2022-04-27 - Stonefly- North Korea-linked Spying Operation Continues to Hit High-value Targets/
|
— |
|
|
|
2022-04-27 - Targeted attack on Thailand Pass customers delivers AsyncRAT/
|
— |
|
|
|
2022-04-27 - The chronicles of Bumblebee- The Hook, the Bee, and the Trickbot connection/
|
— |
|
|
|
2022-04-27 - The origin story of APT32 macros - The StrikeSuit Gift that keeps giving/
|
— |
|
|
|
2022-04-28 - An Overview of the Increasing Wiper Malware Threat/
|
— |
|
|
|
2022-04-28 - Chinese APT Bronze President Mounts Spy Campaign on Russian Military/
|
— |
|
|
|
2022-04-28 - Investigation of DDoS attacks as a result of website corruption using malicious JavaScript code BrownFlood/
|
— |
|
|
|
2022-04-28 - LAPSUS$- Recent techniques, tactics and procedures/
|
— |
|
|
|
2022-04-28 - New Bumblebee malware replaces Conti's BazarLoader in cyberattacks/
|
— |
|
|
|
2022-04-28 - Peeking into PrivateLoader/
|
— |
|
|
|
2022-04-28 - Ransomware- How Attackers are Breaching Corporate Networks/
|
— |
|
|
|
2022-04-28 - This isn't Optimus Prime's Bumblebee but it's Still Transforming/
|
— |
|
|
|
2022-04-28 - Threat Thursday- BoratRAT/
|
— |
|
|
|
2022-04-28 - Trello From the Other Side Tracking APT29 Phishing Campaigns/
|
— |
|
|
|
2022-04-28 - Trello From the Other Side- Tracking APT29 Phishing Campaigns/
|
— |
|
|
|
2022-04-29 - Adventures in the land of BumbleBee – a new malicious loader/
|
— |
|
|
|
2022-04-29 - Attack Graph Response to UNC1151 Continued Targeting of Ukraine/
|
— |
|
|
|
2022-04-29 - German wind farm operator confirms cybersecurity incident/
|
— |
|
|
|
2022-04-29 - Sliver Case Study- Assessing Common Offensive Security Tools The Use of the Sliver C2 Framework for Malicious Purposes/
|
— |
|
|
|
2022-04-29 - Stormous- The Pro-Russian, Clout Hungry Ransomware Gang Targets the US and Ukraine/
|
— |
|
|
|
2022-04-29 - THE LOTUS PANDA IS AWAKE AGAIN ANALYSIS OF ITS LAST STRIKE/
|
— |
|
|
|
2022-04-29 - The LOTUS PANDA Is Awake, Again. Analysis Of Its Last Strike/
|
— |
|
|
|
2022-04-29 - Using EPSS to Predict Threats and Secure Your Network/
|
— |
|
|
|
2022-04-29 - Warning- GRIM and Magnus Android Botnets are Underground/
|
— |
|
|
|
2022-04-30 - Fake Windows 10 updates infect you with Magniber ransomware/
|
— |
|
|
|
2022-04-30 - PortDoor- New Chinese APT Backdoor Attack Targets Russian Defense Sector/
|
— |
|
|
|
2022-05-01 - Gamer Cheater Hacker Spy/
|
— |
|
|
|
2022-05-01 - REvil Reborn Ransom Config/
|
— |
|
|
|
2022-05-02 - Analysis on recent wiper attacks- examples and how wiper malware works/
|
— |
|
|
|
2022-05-02 - AsyncRAT Activity/
|
— |
|
|
|
2022-05-02 - Attack Campaigns that Exploit Shortcuts and ISO Files/
|
— |
|
|
|
2022-05-02 - AvosLocker Ransomware Variant Abuses Driver File to Disable Anti-Virus, Scans for Log4shell/
|
— |
|
|
|
2022-05-02 - Detecting Hypervisor-assisted Hooking/
|
— |
|
|
|
2022-05-02 - Moshen Dragons Triad-and-Error Approach Abusing Security Software to Sideload PlugX and ShadowPad/
|
— |
|
|
|
2022-05-02 - Moshen Dragon’s Triad-and-Error Approach - Abusing Security Software to Sideload PlugX and ShadowPad/
|
— |
|
|
|
2022-05-02 - UNC3524- Eye Spy on Your Email/
|
— |
|
|
|
2022-05-03 - A new BluStealer Loader Uses Direct Syscalls to Evade EDRs/
|
— |
|
|
|
2022-05-03 - Analysis of BlackByte Ransomware's Go-Based Variants/
|
— |
|
|
|
2022-05-03 - Conti and Hive ransomware operations- What we learned from these groups' victim chats/
|
— |
|
|
|
2022-05-03 - SOLARDEFLECTION C2 Infrastructure Used by NOBELIUM in Company Brand Misuse/
|
— |
|
|
|
2022-05-03 - Subdomain Takeovers and 1.1 million “dangling” risks/
|
— |
|
|
|
2022-05-03 - The Hermit Kingdom’s Ransomware play/
|
— |
|
|
|
2022-05-03 - The strange link between a destructive malware and a ransomware-gang linked custom loader IsaacWiper/
|
— |
|
|
|
2022-05-03 - The Strange Link Between A Destructive Malware And A Ransomware-Gang Linked Custom Loader- IsaacWiper Vs Vatet/
|
— |
|
|
|
2022-05-03 - Unpacking Python Executables on Windows and Linux/
|
— |
|
|
|
2022-05-03 - Update on cyber activity in Eastern Europe/
|
— |
|
|
|
2022-05-04 - A new secret stash for fileless malware/
|
— |
|
|
|
2022-05-04 - A new secret stash for “fileless” malware/
|
— |
|
|
|
2022-05-04 - Attacking Emotet’s Control Flow Flattening/
|
— |
|
|
|
2022-05-04 - Chinese Naikon Group Back with New Espionage Attack/
|
— |
|
|
|
2022-05-04 - Compromised Docker Honeypots Used for Pro-Ukrainian DoS Attack/
|
— |
|
|
|
2022-05-04 - Fresh Phish- Britain’s National Health Service Infected by Massive Phishing Campaign/
|
— |
|
|
|
2022-05-04 - Old Services, New Tricks- Cloud Metadata Abuse by UNC2903/
|
— |
|
|
|
2022-05-04 - Operation CuckooBees- A Winnti Malware Arsenal Deep-Dive/
|
— |
|
|
|
2022-05-04 - Operation CuckooBees- Deep-Dive into Stealthy Winnti Techniques/
|
— |
|
|
|
2022-05-04 - Scheduled Task Tampering/
|
— |
|
|
|
2022-05-04 - Tips for Automating IOC Extraction from GootLoader, a Changing JavaScript Malware/
|
— |
|
|
|
2022-05-05 - A Sticky Situation Part 1- The Pervasive Nature of Credit Card Skimmers/
|
— |
|
|
|
2022-05-05 - Analysis of MS Word to drop Remcos RAT - VBA extraction and analysis - IoCs/
|
— |
|
|
|
2022-05-05 - BLISTER Loader/
|
— |
|
|
|
2022-05-05 - Cybercrime loves company Conti cooperated with other ransomware gangs/
|
— |
|
|
|
2022-05-05 - FLINT 2022-016 - QNAP worm who benefits from crime/
|
— |
|
|
|
2022-05-05 - Mustang Panda deploys a new wave of malware targeting Europe/
|
— |
|
|
|
2022-05-05 - NetDooka Framework Distributed via PrivateLoader Malware as Part of Pay-Per-Install Service/
|
— |
|
|
|
2022-05-05 - Nigerian Tesla- 419 scammer gone malware distributor unmasked/
|
— |
|
|
|
2022-05-05 - North Korea’s Lazarus- their initial access trade-craft using social media and social engineering/
|
— |
|
|
|
2022-05-05 - Raspberry Robin gets the worm early/
|
— |
|
|
|
2022-05-05 - Studying “Next Generation Malware” - NightHawk’s Attempt At Obfuscate and Sleep/
|
— |
|
|
|
2022-05-05 - The Sample- Beating the Malware Piñata/
|
— |
|
|
|
2022-05-05 - Threat Thursday- ZingoStealer – The Cost of “Free”/
|
— |
|
|
|
2022-05-05 - Tinker Telco Soldier Spy (to be given 2022-06-27)/
|
— |
|
|
|
2022-05-06 - CERT GOV UA-4622 APT28/
|
— |
|
|
|
2022-05-06 - Cobalt Strike Analysis and Tutorial- CS Metadata Encoding and Decoding/
|
— |
|
|
|
2022-05-06 - Emotet- New Delivery Mechanism to Bypass VBA Protection/
|
— |
|
|
|
2022-05-06 - Github Repository for Mineping/
|
— |
|
|
|
2022-05-06 - macOS Malware Is More Reality Than Myth- Popular Threats and Challenges in Analysis/
|
— |
|
|
|
2022-05-06 - Mobile subscription Trojans and their little tricks/
|
— |
|
|
|
2022-05-06 - OFAC Sanctions Virtual Asset Mixer For the First Time to Combat North Korea’s Lazarus Group/
|
— |
|
|
|
2022-05-06 - Ransomware- LockBit 3.0 Starts Using in Cyberattacks/
|
— |
|
|
|
2022-05-06 - Rebranded Babuk Ransomware In Action- DarkAngels Ransomware Performs Targeted Attack/
|
— |
|
|
|
2022-05-06 - This New Fileless Malware Hides Shellcode in Windows Event Logs/
|
— |
|
|
|
2022-05-07 - BPFDoor - an active Chinese global surveillance tool/
|
— |
|
|
|
2022-05-07 - CERT GOV - UA-4625 - JesterStealer/
|
— |
|
|
|
2022-05-08 - Bzz.. Bzz.. Bumblebee loader/
|
— |
|
|
|
2022-05-08 - Tracking Cobalt Strike Servers Used in Cyberattacks on Ukraine/
|
— |
|
|
|
2022-05-08 - Ursnif Malware Banks on News Events for Phishing Attacks/
|
— |
|
|
|
2022-05-09 - Cybereason vs. Quantum Locker Ransomware/
|
— |
|
|
|
2022-05-09 - Dirty Deeds Done Dirt Cheap- Russian RAT Offers Backdoor Bargains/
|
— |
|
|
|
2022-05-09 - Emotet C2 and Spam Traffic Video/
|
— |
|
|
|
2022-05-09 - Examining the Black Basta Ransomware’s Infection Routine/
|
— |
|
|
|
2022-05-09 - From The DPRK With Love - analyzing a recent north korean macOS backdoor/
|
— |
|
|
|
2022-05-09 - From the Front Lines - Unsigned macOS oRAT Malware Gambles For The Win/
|
— |
|
|
|
2022-05-09 - Hiding in Plain Sight- Obscuring C2s by Abusing CDN Services/
|
— |
|
|
|
2022-05-09 - Octopus Backdoor is Back with a New Embedded Obfuscated Bat File/
|
— |
|
|
|
2022-05-09 - Ransomware-as-a-service- Understanding the cybercrime gig economy and how to protect yourself/
|
— |
|
|
|
2022-05-09 - REvil Development Adds Confidence About GOLD SOUTHFIELD Reemergence/
|
— |
|
|
|
2022-05-09 - SEO Poisoning – A Gootloader Story/
|
— |
|
|
|
2022-05-09 - XenArmor - Windows Security & Password Recovery Software/
|
— |
|
|
|
2022-05-10 - A Malware Analysis in RU-AU conflict/
|
— |
|
|
|
2022-05-10 - A Tale of Two Markets - Investigating the Ransomware Payments Economy/
|
— |
|
|
|
2022-05-10 - APT34 targets Jordan Government using new Saitama backdoor/
|
— |
|
|
|
2022-05-10 - Info-stealer Campaign targets German Car Dealerships and Manufacturers/
|
— |
|
|
|
2022-05-10 - Malicious PDF Document Analysis - Lazyscripter/
|
— |
|
|
|
2022-05-10 - Redline Stealer Masquerades as Photo Editing Software/
|
— |
|
|
|
2022-05-11 - Analysis of an Iranian APTs E400 PowGoop Variant Reveals Dozens of Control Servers Dating Back to 202/
|
— |
|
|
|
2022-05-11 - Bitter APT adds Bangladesh to their targets/
|
— |
|
|
|
2022-05-11 - Bitter APT Hackers Add Bangladesh to Their List of Targets in South Asia/
|
— |
|
|
|
2022-05-11 - BPFDoor - An Evasive Linux Backdoor Technical Analysis/
|
— |
|
|
|
2022-05-11 - Detecting a MUMMY SPIDER campaign and Emotet infection/
|
— |
|
|
|
2022-05-11 - Nerbian RAT Using COVID-19 Themes Features Sophisticated Evasion Techniques/
|
— |
|
|
|
2022-05-11 - New ransomware trends in 2022/
|
— |
|
|
|
2022-05-11 - Operation RestyLink- Targeted attack campaign targeting Japanese companies/
|
— |
|
|
|
2022-05-11 - Please Confirm You Received Our APT/
|
— |
|
|
|
2022-05-11 - Proactive Threat Hunting Bears Fruit- Falcon OverWatch Detects Novel IceApple Post-Exploitation Framework/
|
— |
|
|
|
2022-05-11 - TA578 using thread-hijacked emails to push ISO files for Bumblebee malware/
|
— |
|
|
|
2022-05-11 - Transparent Tribe Targets Educational Institution/
|
— |
|
|
|
2022-05-12 - A Closer Look At Eternity Malware- Threat Actors Leveraging Telegram To Build Malware/
|
— |
|
|
|
2022-05-12 - A closer look at Eternity Malware/
|
— |
|
|
|
2022-05-12 - COBALT MIRAGE Conducts Ransomware Operations in U.S/
|
— |
|
|
|
2022-05-12 - COBALT MIRAGE Conducts Ransomware Operations in US/
|
— |
|
|
|
2022-05-12 - ESET Mozilla Lazurus/
|
— |
|
|
|
2022-05-12 - Eternity malware kit offers stealer miner worm ransomware tools/
|
— |
|
|
|
2022-05-12 - Eternity malware kit offers stealer, miner, worm, ransomware tools/
|
— |
|
|
|
2022-05-12 - Github Repository for NetSpy/
|
— |
|
|
|
2022-05-12 - Harmful Help- Analyzing a Malicious Compiled HTML Help File Delivering Agent Tesla/
|
— |
|
|
|
2022-05-12 - KurayStealer- A Bandit Using Discord Webhooks/
|
— |
|
|
|
2022-05-12 - Malware targeting latest F5 vulnerability/
|
— |
|
|
|
2022-05-12 - Network Footprints of Gamaredon Group/
|
— |
|
|
|
2022-05-12 - New SYK Crypter Distributed Via Discord/
|
— |
|
|
|
2022-05-12 - Phishing Campaign Delivering Three Fileless Malware- AveMariaRAT - BitRAT - PandoraHVNC – Part I/
|
— |
|
|
|
2022-05-12 - RedLine Stealer Campaign Using Binance Mystery Box Videos to Spread GitHub-Hosted Payload/
|
— |
|
|
|
2022-05-12 - Reversing an Android sample which uses Flutter/
|
— |
|
|
|
2022-05-12 - Suspicious DLL- Raspberry Robin-/
|
— |
|
|
|
2022-05-12 - Taking a look at Bumblebee loader/
|
— |
|
|
|
2022-05-12 - Technical Analysis of Emerging, Sophisticated Pandora Ransomware Group/
|
— |
|
|
|
2022-05-12 - The Goot cause- Detecting Gootloader and its follow-on activity/
|
— |
|
|
|
2022-05-12 - Threat Thursday- Malware Rebooted - How Industroyer2 Takes Aim at Ukraine Infrastructure/
|
— |
|
|
|
2022-05-12 - What malware to look for if you want to prevent a ransomware attack/
|
— |
|
|
|
2022-05-13 - Analyzing a Pirrit adware installer/
|
— |
|
|
|
2022-05-13 - Cozy Smuggled Into The Box- APT29 Abusing Legitimate Software For Targeted Operations In Europe/
|
— |
|
|
|
2022-05-13 - Teabot/
|
— |
|
|
|
2022-05-15 - Fake Pixelmon NFT site infects you with password-stealing malware/
|
— |
|
|
|
2022-05-16 - Analysis of HUI Loader/
|
— |
|
|
|
2022-05-16 - Apollo on Github/
|
— |
|
|
|
2022-05-16 - Custom PowerShell RAT targets Germans seeking information about the Ukraine crisis/
|
— |
|
|
|
2022-05-16 - Fake Mobile Apps Steal Facebook Credentials, Cryptocurrency-Related Keys/
|
— |
|
|
|
2022-05-16 - HTML attachments in phishing e-mails/
|
— |
|
|
|
2022-05-16 - New Ransomware Group- RansomHouse – Is it Real or Fake-/
|
— |
|
|
|
2022-05-16 - Operation Dragon Breath (APT-Q-27) Dimensionality Reduction Strike for the Gaming Industry/
|
— |
|
|
|
2022-05-16 - Ukraine supporters in Germany targeted with PowerShell RAT malware/
|
— |
|
|
|
2022-05-16 - UpdateAgent Adapts Again/
|
— |
|
|
|
2022-05-16 - Wizard Spider In-Depth Analysis/
|
— |
|
|
|
2022-05-17 - A peek behind the BPFDoor/
|
— |
|
|
|
2022-05-17 - Chaos Ransomware Variant Sides with Russia/
|
— |
|
|
|
2022-05-17 - Emotet Summary- November 2021 Through January 2022/
|
— |
|
|
|
2022-05-17 - EternityTeam- a new prominent threat group on underground forums/
|
— |
|
|
|
2022-05-17 - Hydra with Three Heads- BlackByte & The Future of Ransomware Subsidiary Groups/
|
— |
|
|
|
2022-05-17 - In hot pursuit of cryware Defending hot wallets from attacks/
|
— |
|
|
|
2022-05-17 - In hot pursuit of ‘cryware’- Defending hot wallets from attacks/
|
— |
|
|
|
2022-05-17 - Ransomware Spotlight RansomEXX - Security News/
|
— |
|
|
|
2022-05-17 - Space Pirates analyzing the tools and connections of a new hacker group/
|
— |
|
|
|
2022-05-17 - X-Cart Skimmer with DOM-based Obfuscation/
|
— |
|
|
|
2022-05-18 - A Case of Vidar Infostealer - Part 2/
|
— |
|
|
|
2022-05-18 - A deep dive into Eternity Group- A new emerging Cyber Threat/
|
— |
|
|
|
2022-05-18 - eSentire Threat Intelligence Malware Analysis- Mars Stealer/
|
— |
|
|
|
2022-05-18 - Steer Clear of Instant Loan Apps/
|
— |
|
|
|
2022-05-18 - The BlackByte ransomware group is striking users all over the globe/
|
— |
|
|
|
2022-05-18 - Uncovering a Kingminer Botnet Attack Using Trend Micro Managed XDR/
|
— |
|
|
|
2022-05-19 - .NET Stubs- Sowing the Seeds of Discord (PureCrypter)/
|
— |
|
|
|
2022-05-19 - .NET Stubs- Sowing the Seeds of Discord (PureCryter)/
|
— |
|
|
|
2022-05-19 - .NET Stubs- Sowing the Seeds of Discord/
|
— |
|
|
|
2022-05-19 - Bruised but Not Broken The Resurgence of the Emotet Botnet Malware/
|
— |
|
|
|
2022-05-19 - Bumblebee Malware from TransferXL URLs/
|
— |
|
|
|
2022-05-19 - CrateDepression - Rust Supply-Chain Attack Infects Cloud CI Pipelines with Go Malware/
|
— |
|
|
|
2022-05-19 - Interactive Phishing- Using Chatbot-like Web Applications to Harvest Information/
|
— |
|
|
|
2022-05-19 - ITG23 Crypters Highlight Cooperation Between Cybercriminal Groups/
|
— |
|
|
|
2022-05-19 - Major Cyber Organizations of the Russian Intelligence Services/
|
— |
|
|
|
2022-05-19 - Microsoft Windows 11 help Files have Vidar Spyware/
|
— |
|
|
|
2022-05-19 - Rise in XorDdos- A deeper look at the stealthy DDoS malware targeting Linux devices/
|
— |
|
|
|
2022-05-19 - Scam and Malicious APK targeting Malaysian- MyMaidKL Technical Analysis/
|
— |
|
|
|
2022-05-19 - The IO Offensive Information Operations Surrounding the Russian Invasion of Ukraine/
|
— |
|
|
|
2022-05-19 - Threat Update- AcidRain Wiper/
|
— |
|
|
|
2022-05-19 - Twisted Panda Chinese APT espionage operation against Russian’s state-owned defense institutes/
|
— |
|
|
|
2022-05-19 - Vidar distributed through backdoored Windows 11 downloads and abusing Telegram/
|
— |
|
|
|
2022-05-19 - Weaponization of Excel Add-Ins Part 2- Dridex Infection Chain Case Studies/
|
— |
|
|
|
2022-05-20 - [RE027] China-based APT Mustang Panda might have still continued their attack activities against organizations in Vietnam/
|
— |
|
|
|
2022-05-20 - Bumblebee Malware from TransferXL URLs/
|
— |
|
|
|
2022-05-20 - Cytrox's Predator Spyware Targeted Android Users with Zero-Day Exploits/
|
— |
|
|
|
2022-05-20 - DisCONTInued The End of Contis Brand Marks New Chapter For Cybercrime Landscape/
|
— |
|
|
|
2022-05-20 - ESET Research - Arguepatch/
|
— |
|
|
|
2022-05-20 - Malware Campaign Targets InfoSec Community- Threat Actor Uses Fake Proof Of Concept To Deliver Cobalt-Strike Beacon/
|
— |
|
|
|
2022-05-20 - Metastealer – filling the Racoon void/
|
— |
|
|
|
2022-05-20 - Mirai Malware for Linux Double Down on Stronger Chips/
|
— |
|
|
|
2022-05-20 - Mirai Malware Variants for Linux Double Down on Stronger Chips in Q1 2022/
|
— |
|
|
|
2022-05-20 - New 'pymafka' malicious package drops Cobalt Strike on macOS, Windows, Linux/
|
— |
|
|
|
2022-05-20 - PDF Malware Is Not Yet Dead/
|
— |
|
|
|
2022-05-20 - RE027 China-based APT Mustang Panda might have still continued their attack activities against organizations/
|
— |
|
|
|
2022-05-20 - Threat Brief- VMware Vulnerabilities Exploited in the Wild (CVE-2022-22954 and Others)/
|
— |
|
|
|
2022-05-21 - Deep Analysis of Mars Stealer/
|
— |
|
|
|
2022-05-22 - Google- Predator spyware infected Android devices using zero-days/
|
— |
|
|
|
2022-05-22 - Introduction of a PE file extractor for various situations/
|
— |
|
|
|
2022-05-22 - Malware development trick - part 29- Store binary data in registry. Simple C++ example/
|
— |
|
|
|
2022-05-22 - PDF smuggles Microsoft Word doc to drop Snake Keylogger malware/
|
— |
|
|
|
2022-05-23 - Fake Trading Apps/
|
— |
|
|
|
2022-05-23 - LockBit, Conti, and BlackCat Lead Pack Amid Rise in Active RaaS and Extortion Groups- Ransomware in Q1 2022/
|
— |
|
|
|
2022-05-24 - Blame the Messenger- 4 Types of Dropper Malware in Microsoft Office & How to Detect Them/
|
— |
|
|
|
2022-05-24 - Emotet Botnet Rises Again/
|
— |
|
|
|
2022-05-24 - Gamaredon Group Understanding the Russian APT/
|
— |
|
|
|
2022-05-24 - Gamaredon Group- Understanding the Russian APT/
|
— |
|
|
|
2022-05-24 - Janicab Series- First Steps in the Infection Chain/
|
— |
|
|
|
2022-05-24 - Malware Analysis- Trickbot/
|
— |
|
|
|
2022-05-24 - Twisted Panda- Chinese APT Launch Spy Operation Against Russian Defence Institutes/
|
— |
|
|
|
2022-05-24 - Unknown APT group has targeted Russia repeatedly since Ukraine invasion/
|
— |
|
|
|
2022-05-24 - Yashma Ransomware, Tracing the Chaos Family Tree/
|
— |
|
|
|
2022-05-25 - Bablosoft; Lowering the Barrier of Entry for Malicious Actors/
|
— |
|
|
|
2022-05-25 - ChromeLoader- a pushy malvertiser/
|
— |
|
|
|
2022-05-25 - ERMAC Back In Action- Latest Version Of Android Banking Trojan Targets Over 400 Applications/
|
— |
|
|
|
2022-05-25 - Hunting a Global Telecommunications Threat- DecisiveArchitect and Its Custom Implant JustForFun/
|
— |
|
|
|
2022-05-25 - New Linux-Based Ransomware Cheerscrypt Targets ESXi Devices/
|
— |
|
|
|
2022-05-25 - SocGholish Campaigns and Initial Access Kit/
|
— |
|
|
|
2022-05-26 - Black Basta Besting Your Network-/
|
— |
|
|
|
2022-05-26 - Grandoreiro Banking Malware Resurfaces for Tax Season/
|
— |
|
|
|
2022-05-26 - Janicab Series- Further Steps in the Infection Chain/
|
— |
|
|
|
2022-05-26 - Rapidly evolving IoT malware EnemyBot now targeting Content Management System servers and Android devices/
|
— |
|
|
|
2022-05-26 - Worm-like propagation of Sysrv-hello crypto-jacking botnet- Network traffic analysis and latest TTPs/
|
— |
|
|
|
2022-05-27 - BAZARLOADER- Analysing The Main Loader/
|
— |
|
|
|
2022-05-27 - Emotet Analysis- New LNKs in the Infection Chain – The Monitor, Issue 20/
|
— |
|
|
|
2022-05-27 - How bootkits are implemented in modern firmware and how UEFI differs from Legacy BIOS/
|
— |
|
|
|
2022-05-27 - Janicab Series- The Core Artifact/
|
— |
|
|
|
2022-05-28 - A Case of Vidar Infostealer - Part 2/
|
— |
|
|
|
2022-05-28 - Clop ransomware gang is back, hits 21 victims in a single month/
|
— |
|
|
|
2022-05-29 - Full Anubis android malware analysis/
|
— |
|
|
|
2022-05-30 - Automatically Unpacking IcedID Stage 1 with Angr/
|
— |
|
|
|
2022-05-30 - Operation DarkCasino- In-Depth Analysis of Recent Attacks by APT Group EVILNUM/
|
— |
|
|
|
2022-05-31 - Janicab Series- Attibution and IoCs/
|
— |
|
|
|
2022-05-31 - Operation DarkCasino In-depth analysis of recent attacks by APT group Evilnum/
|
— |
|
|
|
2022-05-31 - WarzoneRAT Can Now Evade Detection With Process Hollowing/
|
— |
|
|
|
2022-05-31 - XLoader Botnet- Find Me If You Can/
|
— |
|
|
|
2022-05-31 - Yashma Ransomware Report/
|
— |
|
|
|
2022-06-01 - Alert (AA22-152A)- Karakurt Data Extortion Group/
|
— |
|
|
|
2022-06-01 - An In-Depth Look At Black Basta Ransomware/
|
— |
|
|
|
2022-06-01 - Analysis of the attack activities of the Maha grass group using the documents of relevant government agencies in Pakistan as bait/
|
— |
|
|
|
2022-06-01 - Analyzing AsyncRAT distributed in Colombia/
|
— |
|
|
|
2022-06-01 - CUBA Ransomware Campaign Analysis/
|
— |
|
|
|
2022-06-01 - CUBA Ransomware Malware Analysis/
|
— |
|
|
|
2022-06-01 - CVE-2022-30190- Microsoft Support Diagnostic Tool (MSDT) RCE Vulnerability “Follina”/
|
— |
|
|
|
2022-06-01 - deepinstinct.com-Iranian Threat Actor Continues to Develop Mass Exploitation Tools/
|
— |
|
|
|
2022-06-01 - Hazard Token Grabber- Upgraded Version Of Stealer Targeting Discord Users/
|
— |
|
|
|
2022-06-01 - Iranian Threat Actor Continues to Develop Mass Exploitation Tools/
|
— |
|
|
|
2022-06-01 - SideWinder.AntiBot.Script Analysis of SideWinder's new infrastructure and tool that narrows their reach to Pakistan/
|
— |
|
|
|
2022-06-01 - SideWinder.AntiBot.Script/
|
— |
|
|
|
2022-06-01 - SMSFactory Android Trojan producing high costs for victims/
|
— |
|
|
|
2022-06-02 - A SecPro Super Issue- Understanding LockBit/
|
— |
|
|
|
2022-06-02 - Clipminer Botnet Makes Operators at Least $1.7 Million/
|
— |
|
|
|
2022-06-02 - Complaint filed by Microsoft Digital Crimes Unit against BOHRIUM, a Iranian threat actor/
|
— |
|
|
|
2022-06-02 - Conti Targets Critical Firmware/
|
— |
|
|
|
2022-06-02 - CrowdStrike Uncovers New MacOS Browser Hijacking Campaign/
|
— |
|
|
|
2022-06-02 - CVE-2021-40444 CERT GOV/
|
— |
|
|
|
2022-06-02 - Exposing POLONIUM activity and infrastructure targeting Israeli organizations/
|
— |
|
|
|
2022-06-02 - ModPipe POS Malware- New Hooking Targets Extract Card Data/
|
— |
|
|
|
2022-06-02 - Threat Actors Prey on Eager Travelers/
|
— |
|
|
|
2022-06-02 - To HADES and Back- UNC2165 Shifts to LOCKBIT to Evade Sanctions/
|
— |
|
|
|
2022-06-02 - TRENDING EVIL Q2 2022/
|
— |
|
|
|
2022-06-02 - WinDealer dealing on the side/
|
— |
|
|
|
2022-06-02 - YourCyanide- A CMD-Based Ransomware With Multiple Layers of Obfuscation/
|
— |
|
|
|
2022-06-03 - Attack Graph Response to US CERT AA22-152A- Karakurt Data Extortion Group/
|
— |
|
|
|
2022-06-03 - CVE-2022-30190 aka -Follina- MSDT- Advisory and Technical Analysis/
|
— |
|
|
|
2022-06-03 - Outbreak of Follina in Australia/
|
— |
|
|
|
2022-06-03 - Trustwave's Action Response- Microsoft zero-day CVE-2022-30190 (aka Follina)/
|
— |
|
|
|
2022-06-04 - [QuickNote] CobaltStrike SMB Beacon Analysis/
|
— |
|
|
|
2022-06-04 - The Domain Generation Algorithms of SharkBot/
|
— |
|
|
|
2022-06-05 - Loading GootLoader/
|
— |
|
|
|
2022-06-06 - Closing the Door- DeadBolt Ransomware Locks Out Vendors With Multitiered Extortion Scheme/
|
— |
|
|
|
2022-06-06 - From the Front Lines - Another Rebrand- Mindware and SFile Ransomware Technical Breakdown/
|
— |
|
|
|
2022-06-06 - Growling Bears Make Thunderous Noise/
|
— |
|
|
|
2022-06-06 - Hunting PrivateLoader- Pay-Per-Install Service/
|
— |
|
|
|
2022-06-06 - Shining the Light on Black Basta/
|
— |
|
|
|
2022-06-06 - SVCReady- A New Loader Gets Ready/
|
— |
|
|
|
2022-06-06 - Will the Real Msiexec Please Stand Up- Exploit Leads to Data Exfiltration/
|
— |
|
|
|
2022-06-07 - BlackCat — In a Shifting Threat Landscape, It Helps to Land on Your Feet- Tech Dive/
|
— |
|
|
|
2022-06-07 - Bumblebee Loader on The Rise/
|
— |
|
|
|
2022-06-07 - Kinsing & Dark.IoT botnet among threats targeting CVE-2022-26134/
|
— |
|
|
|
2022-06-07 - Phishing Campaigns featuring Ursnif Trojan on the Rise/
|
— |
|
|
|
2022-06-08 - Attackers Exploit MSDT Follina Bug to Drop RAT, Infostealer/
|
— |
|
|
|
2022-06-08 - Crypto stealing campaign spread via fake cracked software/
|
— |
|
|
|
2022-06-08 - Cuba Ransomware Group’s New Variant Found Using Optimized Infection Techniques/
|
— |
|
|
|
2022-06-08 - MakeMoney malvertising campaign adds fake update template/
|
— |
|
|
|
2022-06-08 - Not all -Internet Connections- are Equal/
|
— |
|
|
|
2022-06-08 - Operation Tejas- A dying elephant curled up in the Kunlun Mountains/
|
— |
|
|
|
2022-06-09 - Aoqin Dragon - Newly-Discovered Chinese-linked APT Has Been Quietly Spying On Organizations For 10 Years/
|
— |
|
|
|
2022-06-09 - Aoqin Dragon Newly-Discovered Chinese-linked APT Has Been Quietly Spying On Organizations For 10 Yea/
|
— |
|
|
|
2022-06-09 - Finding Vulnerabilities with VulFi IDA Plugin/
|
— |
|
|
|
2022-06-09 - LockBit 2.0- How This RaaS Operates and How to Protect Against It/
|
— |
|
|
|
2022-06-09 - Lyceum .NET DNS Backdoor/
|
— |
|
|
|
2022-06-09 - MITRE actor profile for Ember Bear/
|
— |
|
|
|
2022-06-09 - Quick look into a new sample of Android-BianLian/
|
— |
|
|
|
2022-06-09 - Roblox Game Pass store used to sell ransomware decryptor/
|
— |
|
|
|
2022-06-09 - Swiss Army Knife Phishing Group-IB identifies massive campaign capable of targeting clients of major Vietnamese banks/
|
— |
|
|
|
2022-06-09 - Symbiote A New Nearly-Impossible-to-Detect Linux Threat/
|
— |
|
|
|
2022-06-09 - Symbiote- A New, Nearly-Impossible-to-Detect Linux Threat/
|
— |
|
|
|
2022-06-09 - TA570 Qakbot (Qbot) tries CVE-2022-30190 (Follina) exploit (ms-msdt)/
|
— |
|
|
|
2022-06-09 - Yara- In Search Of Regular Expressions/
|
— |
|
|
|
2022-06-10 - Exposing HelloXD Ransomware and x4k/
|
— |
|
|
|
2022-06-10 - Lyceum .NET DNS Backdoor/
|
— |
|
|
|
2022-06-10 - New SVCReady malware loads from Word doc properties – Detection & Response/
|
— |
|
|
|
2022-06-10 - Russia Ukraine Crisis Overview/
|
— |
|
|
|
2022-06-12 - How SeaFlower 藏海花 installs backdoors in iOS-Android web3 wallets to steal your seed phrase/
|
— |
|
|
|
2022-06-13 - A Detailed Analysis Of The Last Version Of REvil Ransomware (Download PDF)/
|
— |
|
|
|
2022-06-13 - BumbleBee- a new trendy loader for Initial Access Brokers/
|
— |
|
|
|
2022-06-13 - GALLIUM Expands Targeting Across Telecommunications, Government and Finance Sectors With New PingPull Tool/
|
— |
|
|
|
2022-06-13 - Hydra Android Malware Distributed Via Play Store/
|
— |
|
|
|
2022-06-13 - Linux Threat Hunting- ‘Syslogk’ a kernel rootkit found under development in the wild/
|
— |
|
|
|
2022-06-13 - Risky Biz News- Google shuts down YouTube Russian propaganda channels/
|
— |
|
|
|
2022-06-13 - Robin Hood Ransomware ‘GOODWILL’ Forces Victim For Charity/
|
— |
|
|
|
2022-06-13 - Technical Analysis of PureCrypter- A Fully-Functional Loader Distributing Remote Access Trojans and Information Stealers/
|
— |
|
|
|
2022-06-13 - The many lives of BlackCat ransomware/
|
— |
|
|
|
2022-06-13 - Translating Saitama's DNS tunneling messages/
|
— |
|
|
|
2022-06-14 - Iranian Spear-Phishing Operation Targets Former Israeli and US High-Ranking Officials/
|
— |
|
|
|
2022-06-15 - Attack Graph Emulating the Conti Ransomware Team’s Behaviors/
|
— |
|
|
|
2022-06-15 - DriftingCloud- Zero-Day Sophos Firewall Exploitation and an Insidious Breach/
|
— |
|
|
|
2022-06-15 - F5 Labs Investigates MaliBot/
|
— |
|
|
|
2022-06-15 - First Conti, then Hive- Costa Rica gets hit with ransomware again/
|
— |
|
|
|
2022-06-15 - New IceXLoader 3.0 – Developers Warm Up to Nim/
|
— |
|
|
|
2022-06-15 - Sophos uncovers how APT groups carried out highly targeted attack/
|
— |
|
|
|
2022-06-16 - Confluence exploits used to drop ransomware on vulnerable servers/
|
— |
|
|
|
2022-06-16 - Houdini is Back Delivered Through a JavaScript Dropper/
|
— |
|
|
|
2022-06-16 - How Emotet is changing tactics in response to Microsoft’s tightening of Office macro security/
|
— |
|
|
|
2022-06-16 - Lookout Uncovers Android Spyware Deployed in Kazakhstan/
|
— |
|
|
|
2022-06-16 - Raccoon Stealer is Back with a New Version/
|
— |
|
|
|
2022-06-16 - Thousands of IDs exposed in yet another data breach in Brazil/
|
— |
|
|
|
2022-06-16 - Threat Thursday- Unique Delivery Method for Snake Keylogger/
|
— |
|
|
|
2022-06-17 - BRATA is evolving into an Advanced Persistent Threat/
|
— |
|
|
|
2022-06-17 - Malspam pushes Matanbuchus malware, leads to Cobalt Strike/
|
— |
|
|
|
2022-06-17 - Resurgence of Voicemail-themed phishing attacks targeting key industry verticals in the US/
|
— |
|
|
|
2022-06-17 - sRDI - Shellcode Reflective DLL Injection/
|
— |
|
|
|
2022-06-17 - Unpacking Kovter malware/
|
— |
|
|
|
2022-06-18 - Using dotnetfile to get a Sunburst timeline for intelligence gathering/
|
— |
|
|
|
2022-06-19 - Matanbuchus Triage Notes/
|
— |
|
|
|
2022-06-20 - Charming Kitten (APT35)/
|
— |
|
|
|
2022-06-20 - Tracking Android-Joker payloads with Medusa, static analysis (and patience)/
|
— |
|
|
|
2022-06-21 - APT ToddyCat- Unveiling an unknown APT actor attacking high-profile entities in Europe and Asia/
|
— |
|
|
|
2022-06-21 - APT ToddyCat/
|
— |
|
|
|
2022-06-21 - Avos ransomware group expands with new attack arsenal/
|
— |
|
|
|
2022-06-21 - HTML Application Files are being used to distribute Smoke Loader Malware/
|
— |
|
|
|
2022-06-21 - Microsoft Exchange servers hacked by new ToddyCat APT gang/
|
— |
|
|
|
2022-06-21 - MuddyWaters light first-stager targetting Middle East/
|
— |
|
|
|
2022-06-21 - MuddyWater’s “light” first-stager targetting Middle East/
|
— |
|
|
|
2022-06-21 - Qvoid-Token-Grabber/
|
— |
|
|
|
2022-06-21 - Rise of LNK (Shortcut files) Malware/
|
— |
|
|
|
2022-06-21 - Russias APT28 uses fear of nuclear war to spread Follina docs in Ukraine/
|
— |
|
|
|
2022-06-21 - Russia’s APT28 uses fear of nuclear war to spread Follina docs in Ukraine/
|
— |
|
|
|
2022-06-22 - Chinese actor takes aim, armed with Nim Language and Bizarro AES/
|
— |
|
|
|
2022-06-23 - BRONZE STARLIGHT Ransomware Operations Use HUI Loader/
|
— |
|
|
|
2022-06-23 - Follina, the Latest in a Long Chain of Microsoft Office Exploits/
|
— |
|
|
|
2022-06-23 - Matanbuchus Loader Resurfaces/
|
— |
|
|
|
2022-06-23 - Spyware vendor targets users in Italy and Kazakhstan/
|
— |
|
|
|
2022-06-23 - The Call Is Coming from Inside the House- CrowdStrike Identifies Novel Exploit in VOIP Appliance (CVE-2022-29499)/
|
— |
|
|
|
2022-06-23 - The curious tale of a fake Carrier.app/
|
— |
|
|
|
2022-06-23 - The hateful eight- Kaspersky’s guide to modern ransomware groups’ TTPs (Download Form)/
|
— |
|
|
|
2022-06-23 - Threat Update- Industroyer2/
|
— |
|
|
|
2022-06-24 - APT34 - Saitama Agent/
|
— |
|
|
|
2022-06-24 - Deep Analysis of Snake Keylogger/
|
— |
|
|
|
2022-06-24 - IcedID Banking Trojan returns with new TTPS – Detection & Response/
|
— |
|
|
|
2022-06-24 - LockBit Ransomware Disguised as Copyright Claim E-mail Being Distributed/
|
— |
|
|
|
2022-06-24 - There Is More Than One Way to Sleep- Dive Deep Into the Implementations of API Hammering by Various Malware Families/
|
— |
|
|
|
2022-06-24 - We see you, Gozi Hunting the latest TTPs used for delivering the Trojan/
|
— |
|
|
|
2022-06-24 - “We need to talk about subdomain takeovers…”/
|
— |
|
|
|
2022-06-26 - Overview of Russian GRU and SVR Cyberespionage Campaigns 1H 2022/
|
— |
|
|
|
2022-06-27 - Attacks on industrial control systems using ShadowPad/
|
— |
|
|
|
2022-06-27 - Dark Web Cyber Group Spotlight- SiegedSec/
|
— |
|
|
|
2022-06-27 - Emotet- Still Abusing Microsoft Office Macros/
|
— |
|
|
|
2022-06-27 - Exclusive- Hacktivists Attack Anti-Abortion U.S. States/
|
— |
|
|
|
2022-06-27 - GlowSand/
|
— |
|
|
|
2022-06-27 - Inside Matanbuchus- A Quirky Loader/
|
— |
|
|
|
2022-06-27 - Return of the Evilnum APT with updated TTPs and new targets/
|
— |
|
|
|
2022-06-27 - Return of the Evilnum APT with updated TTPs and newtargets/
|
— |
|
|
|
2022-06-27 - Revive- from spyware to Android banking trojan/
|
— |
|
|
|
2022-06-27 - Threat Spotlight- Eternity Project MaaS Goes On and On/
|
— |
|
|
|
2022-06-27 - Unpacking a JsonPacker-packed sample/
|
— |
|
|
|
2022-06-28 - Black Basta Ransomware Emerging From Underground to Attack Corporate Networks/
|
— |
|
|
|
2022-06-28 - Bumblebee- New Loader Rapidly Assuming Central Position in Cyber-crime Ecosystem/
|
— |
|
|
|
2022-06-28 - Interactive Phishing Mark II- Messenger Chatbot Leveraged in a New Facebook-Themed Spam/
|
— |
|
|
|
2022-06-28 - New Info-stealer Disguised as Crack Being Distributed/
|
— |
|
|
|
2022-06-28 - Pro-PRC DRAGONBRIDGE Influence Campaign Targets Rare Earths Mining Companies in Attempt to Thwart Rivalry to PRC Market Dominance/
|
— |
|
|
|
2022-06-28 - Raccoon Stealer v2 – Part 1- The return of the dead/
|
— |
|
|
|
2022-06-28 - Smash-and-grab- AstraLocker 2.0 pushes ransomware direct from Office docs/
|
— |
|
|
|
2022-06-28 - Steal(Bit) or exfil, what does it (Ex)Matter- Comparative Analysis of Custom Exfiltration Tools/
|
— |
|
|
|
2022-06-28 - The Link Between AWM Proxy & the Glupteba Botnet/
|
— |
|
|
|
2022-06-28 - ZuoRAT Hijacks SOHO Routers To Silently Stalk Networks/
|
— |
|
|
|
2022-06-29 - Bahamut Android Malware Returns With New Spying Capabilities/
|
— |
|
|
|
2022-06-29 - Burrowing your way into VPNs, Proxies, and Tunnels/
|
— |
|
|
|
2022-06-29 - Fat Cats - An analysis of the BlackCat ransomware affiliate program/
|
— |
|
|
|
2022-06-29 - Flubot- the evolution of a notorious Android Banking Malware/
|
— |
|
|
|
2022-06-29 - Raccoon Stealer v2 – Part 2- In-depth analysis/
|
— |
|
|
|
2022-06-29 - Technical Analysis on FOXACID/
|
— |
|
|
|
2022-06-29 - YTStealer Malware- “YouTube Cookies! Om Nom Nom Nom”/
|
— |
|
|
|
2022-06-30 - Black Basta Ransomware Operators Expand Their Attack Arsenal With QakBot Trojan and PrintNightmare Exploit/
|
— |
|
|
|
2022-06-30 - BRIEF- Raccoon Stealer Version 2.0/
|
— |
|
|
|
2022-06-30 - Countering hack-for-hire groups/
|
— |
|
|
|
2022-06-30 - Github Repository with source code for Pandora hVNC/
|
— |
|
|
|
2022-06-30 - How to Expose a Potential Cybercriminal due to Misconfigurations/
|
— |
|
|
|
2022-06-30 - PennyWise Stealer- An Evasive Infostealer Leveraging YouTube To Infect Users/
|
— |
|
|
|
2022-06-30 - The SessionManager IIS backdoor- a possibly overlooked GELSEMIUM artefact/
|
— |
|
|
|
2022-06-30 - The SessionManager IIS backdoor/
|
— |
|
|
|
2022-06-30 - Threat Thursday- China-Based APT Plays Auto-Updater Card to Deliver WinDealer Malware/
|
— |
|
|
|
2022-06-30 - Toll fraud malware- How an Android application can drain your wallet/
|
— |
|
|
|
2022-06-30 - Using process creation properties to catch evasion techniques/
|
— |
|
|
|
2022-07-01 - Alert (AA22-181A)- #StopRansomware- MedusaLocker/
|
— |
|
|
|
2022-07-01 - AstraLocker 2.0 ransomware isn’t going to give you your files back/
|
— |
|
|
|
2022-07-01 - Luna Moth- The Actors Behind the Recent False Subscription Scams/
|
— |
|
|
|
2022-07-01 - Xloader Returns With New Infection Technique/
|
— |
|
|
|
2022-07-02 - Spoofing Email, Message, IP and UserAgent/
|
— |
|
|
|
2022-07-03 - XFiles Stealer Campaign Abusing Follina/
|
— |
|
|
|
2022-07-04 - AstraLocker ransomware shuts down and releases decryptors/
|
— |
|
|
|
2022-07-04 - Making Fun of Your APT Malware - Bitter APT Using ZxxZ Backdoor to Target Pakistan Public Accounts/
|
— |
|
|
|
2022-07-05 - Hive ransomware gets upgrades in Rust/
|
— |
|
|
|
2022-07-05 - Lockbit 3.0 – Ransomware Group Launches New Version/
|
— |
|
|
|
2022-07-05 - New RedAlert Ransomware targets Windows, Linux VMware ESXi servers/
|
— |
|
|
|
2022-07-05 - QBot Spreads via LNK Files – Detection & Response/
|
— |
|
|
|
2022-07-05 - Raccoon Stealer Detection- A Novel Malware Version 2.0 Named RecordBreaker Offers Hackers Advanced Password-Stealing Capabilities/
|
— |
|
|
|
2022-07-05 - Ransomware Spotlight- BlackByte/
|
— |
|
|
|
2022-07-05 - VSingle malware that obtains C2 server information from GitHub/
|
— |
|
|
|
2022-07-05 - Whatever floats your Boat Bitter APT continues to target Bangladesh/
|
— |
|
|
|
2022-07-05 - Whatever floats your Boat – Bitter APT continues to target Bangladesh/
|
— |
|
|
|
2022-07-05 - When Pentest Tools Go Brutal Red-Teaming Tool Being Abused by Malicious Actors/
|
— |
|
|
|
2022-07-05 - When Pentest Tools Go Brutal- Red-Teaming Tool Being Abused by Malicious Actors/
|
— |
|
|
|
2022-07-06 - Alert (AA22-187A)- North Korean State-Sponsored Cyber Actors Use Maui Ransomware to Target the Healthcare and Public Health Sector/
|
— |
|
|
|
2022-07-06 - Brand-New HavanaCrypt Ransomware Poses as Google Software Update App, Uses Microsoft Hosting Service IP Address as C&C Server/
|
— |
|
|
|
2022-07-06 - From Follina to Rozena - Leveraging Discord to Distribute a Backdoor/
|
— |
|
|
|
2022-07-06 - LockBit 3.0- “Making The Ransomware Great Again”/
|
— |
|
|
|
2022-07-06 - OrBit- New Undetected Linux Threat Uses Unique Hijack of Execution Flow/
|
— |
|
|
|
2022-07-06 - 变脸, Teng Snake (a.k.a. Code Core)/
|
— |
|
|
|
2022-07-07 - ABCsoup- The Malicious Adware Extension with 350 Variants/
|
— |
|
|
|
2022-07-07 - AstraLocker decryptor/
|
— |
|
|
|
2022-07-07 - Brute Ratel Utilized By Threat Actors In New Ransomware Operations/
|
— |
|
|
|
2022-07-07 - Emotet infection with Cobalt Strike/
|
— |
|
|
|
2022-07-07 - NoMercy Stealer Adding New Features- New Stealer Rapidly Evolving Into Clipper Malware/
|
— |
|
|
|
2022-07-07 - Notable Droppers Emerge in Recent Threat Campaigns/
|
— |
|
|
|
2022-07-07 - Targets of Interest - Russian Organizations Increasingly Under Attack By Chinese APTs/
|
— |
|
|
|
2022-07-07 - Targets of Interest Russian Organizations Increasingly Under Attack By Chinese APTs/
|
— |
|
|
|
2022-07-07 - THREAT ALERT- Raspberry Robin Worm Abuses Windows Installer and QNAP Devices/
|
— |
|
|
|
2022-07-07 - THREAT ANALYSIS REPORT- LockBit 2.0 - All Paths Lead to Ransom/
|
— |
|
|
|
2022-07-07 - Unprecedented Shift- The Trickbot Group is Systematically Attacking Ukraine/
|
— |
|
|
|
2022-07-07 - YamaBot Malware Used by Lazarus/
|
— |
|
|
|
2022-07-08 - Beware of Root Certs in VPN/
|
— |
|
|
|
2022-07-08 - Cruloader- Zero2auto/
|
— |
|
|
|
2022-07-08 - Il malware EnvyScout (APT29) è stato veicolato anche in Italia/
|
— |
|
|
|
2022-07-08 - Ransomware as a Service- Behind the Scenes/
|
— |
|
|
|
2022-07-08 - Vice Society- a discreet but steady double extortion ransomware group/
|
— |
|
|
|
2022-07-09 - Analyzing a Brute Ratel Badger/
|
— |
|
|
|
2022-07-09 - Malware analysis with IDA-Radare2 - Basic Unpacking (Dridex first stage)/
|
— |
|
|
|
2022-07-10 - Lockbit 3.0 AKA Lockbit Black is here, with a new icon, new ransom note, new wallpaper, but less evasiveness-/
|
— |
|
|
|
2022-07-11 - Anubis Networks is back with new C2 server/
|
— |
|
|
|
2022-07-11 - AppleSeed Disguised as Purchase Order and Request Form Being Distributed/
|
— |
|
|
|
2022-07-11 - Predatory Sparrow- Who are the hackers who say they started a fire in Iran-/
|
— |
|
|
|
2022-07-11 - SELECT XMRig FROM SQLServer/
|
— |
|
|
|
2022-07-11 - Threat Actors Delivers New Rozena backdoor with Follina Bug – Detection & Response/
|
— |
|
|
|
2022-07-12 - An Analysis of Infrastructure linked to the Hagga Threat Actor/
|
— |
|
|
|
2022-07-12 - ChromeLoader- New Stubborn Malware Campaign/
|
— |
|
|
|
2022-07-12 - Example Analysis of Multi-Component Malware/
|
— |
|
|
|
2022-07-12 - From cookie theft to BEC- Attackers use AiTM phishing sites as entry point to further financial fraud/
|
— |
|
|
|
2022-07-12 - Malware analysis with IDA-Radare2 - Multiple unpacking (Ramnit worm)/
|
— |
|
|
|
2022-07-12 - New Ransomware Groups On The Rise- “RedAlert,” LILITH And 0mega Leading A Wave Of Ransomware Campaigns/
|
— |
|
|
|
2022-07-12 - Rise in Qakbot attacks traced to evolving threat techniques/
|
— |
|
|
|
2022-07-12 - Spoofed Saudi Purchase Order Drops GuLoader – Part 2/
|
— |
|
|
|
2022-07-12 - TAG Bulletin- Q2 2022/
|
— |
|
|
|
2022-07-13 - A Hit is made Sidewinder APT successfully cyber attacks Pakistan military focused targets/
|
— |
|
|
|
2022-07-13 - Climbing Mount Everest- Black-Byte Bytes Back-/
|
— |
|
|
|
2022-07-13 - Cobalt Strikes again - UAC-0056 continues to target Ukraine in its latest campaign/
|
— |
|
|
|
2022-07-13 - Confucius - The Angler Hidden Under CloudFlare/
|
— |
|
|
|
2022-07-13 - Go malware on the rise/
|
— |
|
|
|
2022-07-13 - Lockbit 3.0/
|
— |
|
|
|
2022-07-13 - Targeted Attack on Government Agencies/
|
— |
|
|
|
2022-07-13 - The Long Tail of Log4Shell Exploitation/
|
— |
|
|
|
2022-07-13 - The Next Generation of Info Stealers/
|
— |
|
|
|
2022-07-13 - Transparent Tribe begins targeting education sector in latest campaign/
|
— |
|
|
|
2022-07-13 - Uncovering a macOS App Sandbox escape vulnerability- A deep dive into CVE-2022-26706/
|
— |
|
|
|
2022-07-14 - Above the Fold and in Your Inbox Tracing State-Aligned Activity Targeting Journalists Media/
|
— |
|
|
|
2022-07-14 - Above the Fold and in Your Inbox- Tracing State-Aligned Activity Targeting Journalists, Media/
|
— |
|
|
|
2022-07-14 - BlackCat ransomware attacks not merely a byproduct of bad luck/
|
— |
|
|
|
2022-07-14 - Expert doubts Altahrea Team’s claims about Israel power plant fire/
|
— |
|
|
|
2022-07-14 - GootLoader, From SEO Poisoning to Multi-Stage Downloader/
|
— |
|
|
|
2022-07-14 - North Korean threat actor (H0lyGh0st -DEV-0530) targets small and midsize businesses with H0lyGh0st ransomware/
|
— |
|
|
|
2022-07-14 - North Korean threat actor targets small and midsize businesses with H0lyGh0st ransomware/
|
— |
|
|
|
2022-07-14 - Rapid Response- The Ngrok Incident Guide/
|
— |
|
|
|
2022-07-14 - The Trojan Horse Malware & Password “Cracking” Ecosystem Targeting Industrial Operators/
|
— |
|
|
|
2022-07-15 - Stealthy OpenDocument Malware Deployed Against Latin American Hotels/
|
— |
|
|
|
2022-07-15 - The real reason why malware detection is hard—and underestimated/
|
— |
|
|
|
2022-07-17 - Shortcut-Based (LNK) Attacks Delivering Malicious Code On The Rise/
|
— |
|
|
|
2022-07-18 - A Deep Dive Into ALPHV-BlackCat Ransomware/
|
— |
|
|
|
2022-07-18 - From the Front Lines - 8220 Gang Massively Expands Cloud Botnet to 30,000 Infected Hosts/
|
— |
|
|
|
2022-07-18 - Ongoing Roaming Mantis smishing campaign targeting France/
|
— |
|
|
|
2022-07-18 - Ransomware Roundup- Protecting Against New Variants/
|
— |
|
|
|
2022-07-18 - Trident Ursa/
|
— |
|
|
|
2022-07-19 - A look into APT29's new early-stage Google Drive downloader/
|
— |
|
|
|
2022-07-19 - Analysis and technical insights on the Coper malware used to attack mobile devices/
|
— |
|
|
|
2022-07-19 - Continued cyber activity in Eastern Europe observed by TAG/
|
— |
|
|
|
2022-07-19 - Development of UNC1151-Ghostwriter attack techniques/
|
— |
|
|
|
2022-07-19 - I see what you did there Alook at the CloudMensis macOS spyware/
|
— |
|
|
|
2022-07-19 - I see what you did there- A look at the CloudMensis macOS spyware/
|
— |
|
|
|
2022-07-19 - New Variant of QakBot Being Spread by HTML File Attached to Phishing Emails/
|
— |
|
|
|
2022-07-19 - PrestaShop Skimmer Concealed in One Page Checkout Module/
|
— |
|
|
|
2022-07-19 - Russian APT29 Hackers Use Online Storage Services DropBox and Google Drive/
|
— |
|
|
|
2022-07-19 - Russian APT29 Hackers Use Online Storage Services, DropBox and Google Drive/
|
— |
|
|
|
2022-07-19 - Yara vs. HyperScan- Alternative pattern-matching engines/
|
— |
|
|
|
2022-07-20 - Analysis of a trojanized jQuery script- GootLoader unleashed/
|
— |
|
|
|
2022-07-20 - Analyzing Penetration-Testing Tools That Threat Actors Use to Breach Systems and Steal Data/
|
— |
|
|
|
2022-07-20 - Anatomy of Attack- Truth Behind the Costa Rica Government Ransomware 5-Day Intrusion/
|
— |
|
|
|
2022-07-20 - APT41 A CaseSudy/
|
— |
|
|
|
2022-07-20 - APT41- A Case Sudy/
|
— |
|
|
|
2022-07-20 - Cyber National Mission Force discloses IOCs from Ukrainian networks/
|
— |
|
|
|
2022-07-20 - Evacuation and Humanitarian Documents used to Spear Phish Ukrainian Entities/
|
— |
|
|
|
2022-07-20 - LockBit- Ransomware Puts Servers in the Crosshairs/
|
— |
|
|
|
2022-07-20 - Luna and Black Basta — new ransomware for Windows, Linux and ESXi/
|
— |
|
|
|
2022-07-20 - OODA- X-Ops Takes On Burgeoning SQL Server Attacks/
|
— |
|
|
|
2022-07-20 - Securonix Threat Labs Initial Coverage Advisory STIFFBIZON Detection Using Securonix New Attack Camp/
|
— |
|
|
|
2022-07-20 - STIFF#BIZON Detection Using Securonix – New Attack Campaign Observed Possibly Linked to Konni-APT37 (North Korea) - Securonix/
|
— |
|
|
|
2022-07-20 - STIFF-BIZON Detection Using Securonix – New Attack Campaign Observed Possibly Linked to Konni-APT37 (North Korea) - Securonix/
|
— |
|
|
|
2022-07-20 - The Sidewinder (APT-Q-39) uses Google Play to spread an analysis of malicious Android software/
|
— |
|
|
|
2022-07-21 - Alibaba OSS Buckets Compromised to Distribute Malicious Shell Scripts via Steganography/
|
— |
|
|
|
2022-07-21 - Amadey Bot Being Distributed Through SmokeLoader/
|
— |
|
|
|
2022-07-21 - Attackers target Ukraine using GoMet backdoor/
|
— |
|
|
|
2022-07-21 - Buy Sell Steal EvilNum Targets Cryptocurrency Forex Commodities/
|
— |
|
|
|
2022-07-21 - Buy, Sell, Steal, EvilNum Targets Cryptocurrency, Forex, Commodities/
|
— |
|
|
|
2022-07-21 - Dissemination of AppleSeed to Specific Military Maintenance Companies/
|
— |
|
|
|
2022-07-21 - It’s time to close the door on open directories/
|
— |
|
|
|
2022-07-21 - Lightning Framework- New Undetected “Swiss Army Knife” Linux Malware/
|
— |
|
|
|
2022-07-21 - LockBit 3.0 Update - Unpicking the Ransomware’s Latest Anti-Analysis and Evasion Techniques/
|
— |
|
|
|
2022-07-21 - Malware Being Distributed by Disguising Itself as Icon of V3 Lite/
|
— |
|
|
|
2022-07-21 - Malware development tricks. Run shellcode like a Lazarus Group. C++ example/
|
— |
|
|
|
2022-07-21 - Russian Ransomware C2 Network Discovered in Censys Data/
|
— |
|
|
|
2022-07-21 - Tecniche per semplificare l’analisi del malware GuLoader/
|
— |
|
|
|
2022-07-21 - The 13 Deadly Sins of APT Incident Response — Part 1/
|
— |
|
|
|
2022-07-21 - The old school hackers behindAPT41/
|
— |
|
|
|
2022-07-21 - The Return of Candiru Zero-days in the Middle East/
|
— |
|
|
|
2022-07-21 - The Return of Candiru- Zero-days in the Middle East/
|
— |
|
|
|
2022-07-22 - CALISTO continues its credential harvesting campaign/
|
— |
|
|
|
2022-07-22 - Chengdu 404/
|
— |
|
|
|
2022-07-22 - Old cat new tricks bad habits/
|
— |
|
|
|
2022-07-22 - Old cat, new tricks, bad habits An analysis of Charming Kitten’s new tools and OPSEC errors/
|
— |
|
|
|
2022-07-22 - Recent cyberattacks put Thai citizens’ privacy and data security at greater risk/
|
— |
|
|
|
2022-07-22 - Reverse Engineering a Cobalt Strike Dropper With Binary Ninja/
|
— |
|
|
|
2022-07-22 - The Trash Panda Reemerges From The Dumpster- Raccoon Stealer V2/
|
— |
|
|
|
2022-07-23 - North Korean hackers attack EU targets with Konni RAT malware/
|
— |
|
|
|
2022-07-24 - A DGA Seeded by the Bitcoin Genesis Block/
|
— |
|
|
|
2022-07-24 - Chinese APTs Interlinked networks and sidehustles/
|
— |
|
|
|
2022-07-24 - QBot phishing uses Windows Calculator sideloading to infect devices/
|
— |
|
|
|
2022-07-25 - Burned and Blinded - Escalation Risks of Intelligence Loss from Countercyber Operations in Crisis/
|
— |
|
|
|
2022-07-25 - CosmicStrand the discovery of a sophisticated UEFI firmware rootkit/
|
— |
|
|
|
2022-07-25 - CosmicStrand- the discovery of a sophisticated UEFI firmware rootkit/
|
— |
|
|
|
2022-07-25 - LockBit Ransomware Group Augments Its Latest Variant, LockBit 3.0, With BlackMatter Capabilities/
|
— |
|
|
|
2022-07-25 - PDF Analysis of Lokibot malware/
|
— |
|
|
|
2022-07-26 - CERT GOV - UAC-0010 Armageddon/
|
— |
|
|
|
2022-07-26 - HOW to Analyze Linux Malware - A Case Study of Symbiote/
|
— |
|
|
|
2022-07-26 - How To Analyze Linux Malware – A Case Study Of Symbiote/
|
— |
|
|
|
2022-07-26 - Malicious IIS extensions quietly open persistent backdoors into servers/
|
— |
|
|
|
2022-07-26 - Mandiant Red Team Emulates FIN11 Tactics To Control Operational Technology Servers/
|
— |
|
|
|
2022-07-26 - ML Detection of Risky Command Exploit/
|
— |
|
|
|
2022-07-26 - On the FootSteps of Hive Ransomware/
|
— |
|
|
|
2022-07-26 - Robin Banks might be robbing your bank/
|
— |
|
|
|
2022-07-27 - Exploring the QBOT Attack Pattern/
|
— |
|
|
|
2022-07-27 - Gootkit Loader’s Updated Tactics and Fileless Delivery of Cobalt Strike/
|
— |
|
|
|
2022-07-27 - IcedID (Bokbot) with Dark VNC and Cobalt Strike/
|
— |
|
|
|
2022-07-27 - Iraqi hacker group 'ALtahrea Team' targets Israeli IT, e-commerce companies in major cyber attack- Reports/
|
— |
|
|
|
2022-07-27 - PrivateLoader- Network-Based Indicators of Compromise/
|
— |
|
|
|
2022-07-27 - QBOT Configuration Extractor/
|
— |
|
|
|
2022-07-27 - Targeted Attacks Being Carried Out Via DLL SideLoading/
|
— |
|
|
|
2022-07-27 - Threat analysis- Follina exploit fuels 'live-off-the-land' attacks/
|
— |
|
|
|
2022-07-27 - Untangling KNOTWEED European private-sector offensive actor using 0-day exploits/
|
— |
|
|
|
2022-07-27 - Untangling KNOTWEED- European private-sector offensive actor using 0-day exploits/
|
— |
|
|
|
2022-07-28 - APT trends report Q2 2022/
|
— |
|
|
|
2022-07-28 - Attackers Profiting from Proxyware/
|
— |
|
|
|
2022-07-28 - Auto-launching HiddAd on Google Play Store found in more than 6 million downloads/
|
— |
|
|
|
2022-07-28 - IPFS- The New Hotbed of Phishing/
|
— |
|
|
|
2022-07-28 - Living Off Windows Defender - LockBit Ransomware Sideloads Cobalt Strike Through Microsoft Security Tool/
|
— |
|
|
|
2022-07-28 - LofyLife- malicious npm packages steal Discord tokens and bank card data/
|
— |
|
|
|
2022-07-28 - New HiddenAds malware affects 1M+ users and hides on the Google Play Store/
|
— |
|
|
|
2022-07-28 - SharpTongue Deploys Clever Mail-Stealing Browser Extension SHARPEXT/
|
— |
|
|
|
2022-07-28 - Techniques, Tactics & Procedures (TTPs) Employed by Hacktivist Group DragonForce Malaysia/
|
— |
|
|
|
2022-07-28 - Threats of Commercialized Malware- Knotweed/
|
— |
|
|
|
2022-07-29 - APT trends report Q2 2020/
|
— |
|
|
|
2022-07-29 - ENISA Threat Landscape for Ransomware Attacks/
|
— |
|
|
|
2022-07-29 - Examining New DawDropper Banking Dropper and DaaS on the Dark Web/
|
— |
|
|
|
2022-07-29 - Fake investment scams in Europe How we almost got rich/
|
— |
|
|
|
2022-07-29 - H0lyGh0st - North Korean Threat Group Strikes Back With New Ransomware/
|
— |
|
|
|
2022-07-29 - New Qualys Research Report- Evolution of Quasar RAT/
|
— |
|
|
|
2022-07-29 - Raccoon Stealer v2- The Latest Generation of the Raccoon Family/
|
— |
|
|
|
2022-07-29 - SmokeLoader Malware Used to Augment Amadey Infostealer/
|
— |
|
|
|
2022-07-30 - Microsoft Links Raspberry Robin USB Worm to Russian Evil Corp Hackers/
|
— |
|
|
|
2022-07-31 - Adrastea hackers claim leading European designer and manufacturer of missile systems MBDA hacked/
|
— |
|
|
|
2022-07-31 - Space Invaders- Cyber Threats That Are Out Of This World/
|
— |
|
|
|
2022-07-31 - Thai entities continue to fall prey to cyberattacks and leaks/
|
— |
|
|
|
2022-08-01 - A Detailed Analysis of the RedLine Stealer/
|
— |
|
|
|
2022-08-01 - El Machete APT Group/
|
— |
|
|
|
2022-08-01 - FIN13 (Elephant Beetle) Viva la Threat!/
|
— |
|
|
|
2022-08-01 - Here’s a Simple Script to Detect the Stealthy Nation-State BPFDoor/
|
— |
|
|
|
2022-08-01 - Technical Analysis of Industrial Spy Ransomware/
|
— |
|
|
|
2022-08-02 - Fake Atomic Wallet Website Distributing Mars Stealer/
|
— |
|
|
|
2022-08-02 - Large-Scale AiTM Attack targeting enterprise users of Microsoft email services/
|
— |
|
|
|
2022-08-02 - Manjusaka A Chinese sibling of Sliver and Cobalt Strike/
|
— |
|
|
|
2022-08-02 - Manjusaka- A Chinese sibling of Sliver and Cobalt Strike/
|
— |
|
|
|
2022-08-02 - SolidBit Ransomware Enters the RaaS Scene and Takes Aim at Gamers and Social Media Users With New Variant/
|
— |
|
|
|
2022-08-02 - Word File Provided as External Link When Replying to Attacker’s Email (Kimsuky)/
|
— |
|
|
|
2022-08-03 - DDoS attacks in Q2 2022/
|
— |
|
|
|
2022-08-03 - Environmental hacktivists publish 2 terabytes of mining company emails/
|
— |
|
|
|
2022-08-03 - Flight of the Bumblebee- Email Lures and File Sharing Services Lead to Malware/
|
— |
|
|
|
2022-08-03 - Gwisin Ransomware Targeting Korean Companies/
|
— |
|
|
|
2022-08-03 - Journey to Network Protocol Fuzzing – Dissecting Microsoft IMAP Client Protocol/
|
— |
|
|
|
2022-08-03 - PART 3- How I Met Your Beacon – Brute Ratel/
|
— |
|
|
|
2022-08-03 - Reversing Golang Developed Ransomware- SNAKE/
|
— |
|
|
|
2022-08-03 - So RapperBot, What Ya Bruting For-/
|
— |
|
|
|
2022-08-03 - The Price Cybercriminals Charge for Stolen Data/
|
— |
|
|
|
2022-08-03 - Woody RAT A new feature-rich malware spotted in the wild/
|
— |
|
|
|
2022-08-04 - Advanced Persistent Threats (APTs)/
|
— |
|
|
|
2022-08-04 - Attackers leveraging Dark Utilities -C2aaS- platform in malware campaigns/
|
— |
|
|
|
2022-08-04 - Brata - a tale of three families/
|
— |
|
|
|
2022-08-04 - Flying in the clouds- APT31 renews its attacks on Russian companies through cloud storage/
|
— |
|
|
|
2022-08-04 - Formbook and Remcos Backdoor RAT by ConnectWise CRU/
|
— |
|
|
|
2022-08-04 - GwisinLocker ransomware targets South Korean industrial and pharma firms/
|
— |
|
|
|
2022-08-04 - IcedID leverages PrivateLoader/
|
— |
|
|
|
2022-08-04 - Likely Iranian Threat Actor Conducts Politically Motivated Disruptive Activity Against Albanian Gover/
|
— |
|
|
|
2022-08-04 - Likely Iranian Threat Actor Conducts Politically Motivated Disruptive Activity Against Albanian Government Organizations/
|
— |
|
|
|
2022-08-04 - North Korean H0lyGh0st Ransomware Has Ties to Global Geopolitics/
|
— |
|
|
|
2022-08-04 - Ousaban- LATAM Banking Malware Abusing Cloud Services/
|
— |
|
|
|
2022-08-04 - Pro-PRC “HaiEnergy” Information Operations Campaign Leverages Infrastructure from Public Relations Firm to Disseminate Content on Inauthentic News Sites/
|
— |
|
|
|
2022-08-04 - Quarterly Adversarial Threat Report/
|
— |
|
|
|
2022-08-04 - Ransomware Roundup- Redeemer, Beamed, and More/
|
— |
|
|
|
2022-08-04 - ROADSWEEP Ransomware - Likely Iranian Threat Actor Conducts Politically Motivated Disruptive Activity Against Albanian Government Organizations/
|
— |
|
|
|
2022-08-04 - Technical Analysis of Bumblebee Malware Loader/
|
— |
|
|
|
2022-08-04 - Top of the Pops- Three common ransomware entry techniques/
|
— |
|
|
|
2022-08-04 - X-FILES Stealer Evolution - An Analysis and Comparison Study/
|
— |
|
|
|
2022-08-05 - LokiBot Analysis/
|
— |
|
|
|
2022-08-05 - Say NO to Nopyfy!/
|
— |
|
|
|
2022-08-05 - The DGA family Orchard continues to change, and the new version generates DGA domain names using Bitcoin transaction information/
|
— |
|
|
|
2022-08-06 - A Look Back At Bazarloader’s Dga/
|
— |
|
|
|
2022-08-07 - Analyzing .NET Core Single File Samples (DUCKTAIL Case Study)/
|
— |
|
|
|
2022-08-07 - Config Extractor per DanaBot (PARTE 1)/
|
— |
|
|
|
2022-08-07 - LogoKit Update – The Phishing Kit Leveraging Open Redirect Vulnerabilities/
|
— |
|
|
|
2022-08-07 - Vulnerabilities In E-Commerce Solutions - Hunting On Big Apples/
|
— |
|
|
|
2022-08-08 - An inside view of domain anonymization as-a-service — the BraZZZerSFF infrastructure/
|
— |
|
|
|
2022-08-08 - BumbleBee Roasts Its Way to Domain Admin/
|
— |
|
|
|
2022-08-08 - Dynamite Panda APT Group/
|
— |
|
|
|
2022-08-08 - Life After Death - SmokeLoader Continues to Haunt Using Old Vulnerabilities/
|
— |
|
|
|
2022-08-08 - Malware sandbox evasion in x64 assembly by checking ram size - Part 1/
|
— |
|
|
|
2022-08-08 - Targeted attack on industrial enterprises and public institutions/
|
— |
|
|
|
2022-08-08 - YARA for config extraction/
|
— |
|
|
|
2022-08-09 - AiTM phishing attack targeting enterprise users of Gmail/
|
— |
|
|
|
2022-08-09 - Andariel deploys DTrack and Maui ransomware/
|
— |
|
|
|
2022-08-09 - Bitter APT Group Using “Dracarys” Android Spyware/
|
— |
|
|
|
2022-08-09 - Fake Instagram Verification & Twitter Badge Phishing/
|
— |
|
|
|
2022-08-09 - Pivoting on a SharpExt to profile Kimusky panels for great good/
|
— |
|
|
|
2022-08-09 - Raspberry Robin- Highly Evasive Worm Spreads over External Disks/
|
— |
|
|
|
2022-08-10 - Avast Q2-2022 Threat Report- Farewell to Conti, Zloader, and Maldocs; Hello Resurrection of Raccoon Stealer, and more Ransomware Attacks/
|
— |
|
|
|
2022-08-10 - BlueSky Ransomware- Fast Encryption via Multithreading/
|
— |
|
|
|
2022-08-10 - Cisco Talos shares insights related to recent cyber attack on Cisco/
|
— |
|
|
|
2022-08-10 - Emotet SMB Spreader is Back/
|
— |
|
|
|
2022-08-10 - Indian Power Sector targeted with latest LockBit 3.0 variant/
|
— |
|
|
|
2022-08-10 - Novel News on Cuba Ransomware- Greetings From Tropical Scorpius/
|
— |
|
|
|
2022-08-10 - Operation(верность) mercenary- a torrent of steel trapped in the plains of Eastern Europe/
|
— |
|
|
|
2022-08-10 - spynote/
|
— |
|
|
|
2022-08-10 - The quantum state of Linux kernel garbage collection CVE-2021-0920 (Part I)/
|
— |
|
|
|
2022-08-10 - VileRAT DeathStalkers continuous strike at foreign and cryptocurrency exchanges/
|
— |
|
|
|
2022-08-10 - VileRAT- DeathStalker’s continuous strike at foreign and cryptocurrency exchanges/
|
— |
|
|
|
2022-08-10 - “Pegasus”, the spyware for smartphones. How does it work and how can you protect yourself-/
|
— |
|
|
|
2022-08-11 - Alert (AA22-223A) #StopRansomware- Zeppelin Ransomware/
|
— |
|
|
|
2022-08-11 - APT-C-35 GETS A NEW UPGRADE/
|
— |
|
|
|
2022-08-11 - Challenge accepted Detecting MaliBot, a fresh Android banking trojan, with a Fraud Protection solution/
|
— |
|
|
|
2022-08-11 - CopperStealer Distributes Malicious Chromium-based Browser Extension to Steal Cryptocurrencies/
|
— |
|
|
|
2022-08-11 - How cybercriminals are weaponizing leaked ransomware data for follow-up attacks/
|
— |
|
|
|
2022-08-11 - LNK forensic and config extraction of a cobalt strike beacon/
|
— |
|
|
|
2022-08-11 - MoqHao Android malware analysis and phishing campaign/
|
— |
|
|
|
2022-08-11 - PyPI Package 'secretslib' Drops Fileless Linux Malware to Mine Monero/
|
— |
|
|
|
2022-08-11 - SOVA malware is back and is evolving rapidly/
|
— |
|
|
|
2022-08-11 - State of the Remote Access Tools, Part 1/
|
— |
|
|
|
2022-08-11 - The Increase in Ransomware Attacks on Local Governments/
|
— |
|
|
|
2022-08-11 - “BazarCall” Advisory- Essential Guide to Attack Vector that Revolutionized Data Breaches/
|
— |
|
|
|
2022-08-12 - Iron Tiger Compromises Chat Application Mimi, Targets Windows, Mac, and Linux Users (IOCs)/
|
— |
|
|
|
2022-08-12 - Iron Tiger Compromises Chat Application Mimi, Targets Windows, Mac, and Linux Users/
|
— |
|
|
|
2022-08-12 - LuckyMouse uses a backdoored Electron app to target MacOS/
|
— |
|
|
|
2022-08-12 - Monster Libra (TA551-Shathak) pushes IcedID (Bokbot) with Dark VNC and Cobalt Strike/
|
— |
|
|
|
2022-08-12 - Mythic Leopard APT Group/
|
— |
|
|
|
2022-08-12 - The Anatomy of Wiper Malware, Part 1- Common Techniques/
|
— |
|
|
|
2022-08-12 - The Swan Song for Driver Signature Enforcement Tampering/
|
— |
|
|
|
2022-08-13 - Early Analysis of the Twilio phishing attack-it is the tip of the iceberg/
|
— |
|
|
|
2022-08-13 - Github Repo for Pyramid/
|
— |
|
|
|
2022-08-15 - A Deep Dive Into Black Basta Ransomware/
|
— |
|
|
|
2022-08-15 - Detecting a Rogue Domain Controller – DCShadow Attack/
|
— |
|
|
|
2022-08-15 - Disrupting SEABORGIUMs ongoing phishing operations/
|
— |
|
|
|
2022-08-15 - Disrupting SEABORGIUM’s ongoing phishing operations/
|
— |
|
|
|
2022-08-15 - JSSLoader- the shellcode edition/
|
— |
|
|
|
2022-08-15 - Lazarus APT Group (APT38)/
|
— |
|
|
|
2022-08-15 - Malware sandbox evasion in x64 assembly by checking ram size - Part 2/
|
— |
|
|
|
2022-08-15 - Shuckworm Russia-Linked Group Maintains Ukraine Focus/
|
— |
|
|
|
2022-08-15 - Shuckworm- Russia-Linked Group Maintains Ukraine Focus/
|
— |
|
|
|
2022-08-16 - AsyncRAT C2 Framework- Overview, Technical Analysis & Detection/
|
— |
|
|
|
2022-08-16 - BugDrop- the first malware trying to circumvent Google's security Controls/
|
— |
|
|
|
2022-08-16 - Cleartext Shenanigans- Gifting User Passwords to Adversaries With NPPSPY/
|
— |
|
|
|
2022-08-16 - ESET - Lazarus/
|
— |
|
|
|
2022-08-16 - FluBot Android Malware Analysis/
|
— |
|
|
|
2022-08-16 - RedAlpha Conducts Multi-Year Credential Theft Campaign Targeting Global Humanitarian, Think Tank, and Government Organizations/
|
— |
|
|
|
2022-08-16 - SocGholish- 5+ Years of Massive Website Infections/
|
— |
|
|
|
2022-08-16 - Threat in your browser- what dangers innocent-looking extensions hold for users/
|
— |
|
|
|
2022-08-16 - Two more malicious Python packages in the PyPI/
|
— |
|
|
|
2022-08-17 - APT Lazarus Targets Engineers with macOS Malware/
|
— |
|
|
|
2022-08-17 - Bumblebee Loader – The High Road to Enterprise Domain Control/
|
— |
|
|
|
2022-08-17 - DarkTortilla Malware Analysis/
|
— |
|
|
|
2022-08-17 - Hunting Follina/
|
— |
|
|
|
2022-08-17 - IRATA/
|
— |
|
|
|
2022-08-17 - Kasablanka organizes attacks against political groups and non-profit organizations in the Middle East/
|
— |
|
|
|
2022-08-17 - Suspected Iranian Actor Targeting Israeli Shipping Healthcare Government and Energy Sectors/
|
— |
|
|
|
2022-08-17 - Suspected Iranian Actor Targeting Israeli Shipping, Healthcare, Government and Energy Sectors/
|
— |
|
|
|
2022-08-17 - Switching side jobs Links between ATMZOW JS-sniffer and Hancitor/
|
— |
|
|
|
2022-08-18 - A Sticky Situation Part 2/
|
— |
|
|
|
2022-08-18 - APT33 Threat Actors/
|
— |
|
|
|
2022-08-18 - APT41 World Tour 2021 on a tight schedule/
|
— |
|
|
|
2022-08-18 - BianLian- New Ransomware Variant On The Rise/
|
— |
|
|
|
2022-08-18 - Cookie stealing- the new perimeter bypass/
|
— |
|
|
|
2022-08-18 - From Ramnit To Bumblebee (via NeverQuest)- Similarities and Code Overlap Shed Light On Relationships Between Malware Developers/
|
— |
|
|
|
2022-08-18 - Grandoreiro Banking Trojan with New TTPs Targeting Various Industry Verticals/
|
— |
|
|
|
2022-08-18 - Hardware-based threat defense against increasingly complex cryptojackers/
|
— |
|
|
|
2022-08-18 - Luca Stealer Targets Password Managers and Cryptocurrency Wallets/
|
— |
|
|
|
2022-08-18 - New APT group MurenShark investigative report Torpedoes hit Turkish Navy/
|
— |
|
|
|
2022-08-18 - New APT group MURENSHARK investigative report- Torpedoes hit Turkish Navy/
|
— |
|
|
|
2022-08-18 - Overview of the Cyber Weapons Used in the Ukraine - Russia War/
|
— |
|
|
|
2022-08-18 - Raccoon Infostealer Malware Returns with New TTPS – Detection & Response/
|
— |
|
|
|
2022-08-18 - Ransomware Roundup- Gwisin, Kriptor, Cuba, and More/
|
— |
|
|
|
2022-08-18 - RAT tool disguised as a solution file (.sln) on GitHub/
|
— |
|
|
|
2022-08-18 - Reservations Requested TA558 Targets Hospitality and Travel/
|
— |
|
|
|
2022-08-18 - Reservations Requested- TA558 Targets Hospitality and Travel/
|
— |
|
|
|
2022-08-18 - You Cant Audit Me APT29 Continues Targeting Microsoft 365/
|
— |
|
|
|
2022-08-18 - You Can’t Audit Me- APT29 Continues Targeting Microsoft 365/
|
— |
|
|
|
2022-08-19 - Analyzing Attack Data and Trends Targeting Ukrainian Domains/
|
— |
|
|
|
2022-08-19 - Back in Black- Unlocking a LockBit 3.0 Ransomware Attack/
|
— |
|
|
|
2022-08-19 - Brazil malspam pushes Astaroth (Guildma) malware/
|
— |
|
|
|
2022-08-19 - Cybercriminals Are Targeting Law Enforcement Agencies Worldwide/
|
— |
|
|
|
2022-08-19 - EvilCoder Project Selling Multiple Dangerous Tools Online/
|
— |
|
|
|
2022-08-19 - IOCs for Manjusaka/
|
— |
|
|
|
2022-08-19 - Is Tox The New C&C Method For Coinminers-/
|
— |
|
|
|
2022-08-19 - Moisha Ransomware/
|
— |
|
|
|
2022-08-19 - THREAT ALERT- Inside the Redeemer 2.0 Ransomware/
|
— |
|
|
|
2022-08-21 - Behind the Attack- Remcos RAT/
|
— |
|
|
|
2022-08-21 - Escanor Malware Delivered In Weaponized Microsoft Office Documents/
|
— |
|
|
|
2022-08-22 - A Cyber Threat Intelligence Self-Study Plan- Part 2/
|
— |
|
|
|
2022-08-22 - A Tale of PivNoxy and Chinoxy Puppeteer/
|
— |
|
|
|
2022-08-22 - Meow Ransomware/
|
— |
|
|
|
2022-08-22 - Ocean Lotus APT Group/
|
— |
|
|
|
2022-08-23 - Emotet Resurgence- Cross-Industry Campaign Analysis/
|
— |
|
|
|
2022-08-23 - Legitimate SaaS Platforms Being Used to Host Phishing Attacks/
|
— |
|
|
|
2022-08-23 - Making victims pay, infostealer malwares mimick pirated-software download sites/
|
— |
|
|
|
2022-08-23 - New Iranian APT data extraction tool/
|
— |
|
|
|
2022-08-24 - Demystifying Qbot Malware/
|
— |
|
|
|
2022-08-24 - Looking for the ‘Sliver’ lining- Hunting for emerging command-and-control frameworks/
|
— |
|
|
|
2022-08-24 - Looking into the Void - Targeting Bulletproof Hosts to Block Attacks Early in the Kill Chain/
|
— |
|
|
|
2022-08-24 - MagicWeb NOBELIUMs post-compromise trick to authenticate as anyone/
|
— |
|
|
|
2022-08-24 - MagicWeb- NOBELIUM’s post-compromise trick to authenticate as anyone/
|
— |
|
|
|
2022-08-24 - QBOT Malware Analysis/
|
— |
|
|
|
2022-08-24 - Ransomware Actor Abuses Genshin Impact Anti-Cheat Driver to Kill Antivirus (IoCs)/
|
— |
|
|
|
2022-08-24 - Ransomware Actor Abuses Genshin Impact Anti-Cheat Driver to Kill Antivirus/
|
— |
|
|
|
2022-08-24 - The Anatomy of Wiper Malware, Part 2- Third-Party Drivers/
|
— |
|
|
|
2022-08-24 - The Dark Side of Bumblebee Malware Loader/
|
— |
|
|
|
2022-08-24 - Virustotal Page for the sample/
|
— |
|
|
|
2022-08-25 - AppLocker Rules as Defense Evasion- Complete Analysis/
|
— |
|
|
|
2022-08-25 - BleachGap Revamped/
|
— |
|
|
|
2022-08-25 - BlueSky Ransomware - AD Lateral Movement, Evasion and Fast Encryption Put Threat on the Radar/
|
— |
|
|
|
2022-08-25 - COVID-19 Data Put For Sale In Dark Web/
|
— |
|
|
|
2022-08-25 - Detecting the Unknown- Revealing Uncategorized Ransomware Using Darktrace/
|
— |
|
|
|
2022-08-25 - Kimsukys GoldDragon cluster and its C2 operations/
|
— |
|
|
|
2022-08-25 - Kimsuky’s GoldDragon cluster and its C2 operations/
|
— |
|
|
|
2022-08-25 - Major Indonesia tollroad operator hacked by DESORDEN (Updated)/
|
— |
|
|
|
2022-08-25 - MERCURY leveraging Log4j 2 vulnerabilities in unpatched systems to target Israeli organizations/
|
— |
|
|
|
2022-08-25 - MORE_EGGS and Some LinkedIn Resumé Spearphishing/
|
— |
|
|
|
2022-08-25 - New Golang Ransomware Agenda Customizes Attacks (IoCs)/
|
— |
|
|
|
2022-08-25 - New Golang Ransomware Agenda Customizes Attacks/
|
— |
|
|
|
2022-08-25 - Roasting 0ktapus- The phishing campaign going after Okta identity credentials/
|
— |
|
|
|
2022-08-25 - SmokeLoader Triage Taking a look how Smoke Loader works/
|
— |
|
|
|
2022-08-25 - Technical analysis of IRATA android malware/
|
— |
|
|
|
2022-08-25 - Threat Assessment- Black Basta Ransomware/
|
— |
|
|
|
2022-08-28 - LockBit ransomware gang gets aggressive with triple-extortion tactic/
|
— |
|
|
|
2022-08-28 - Revealing Europe's NSO/
|
— |
|
|
|
2022-08-29 - A Technical Analysis of Pegasus for Android – Part 1/
|
— |
|
|
|
2022-08-29 - AsyncRAT- Using Fully Undetected Downloader/
|
— |
|
|
|
2022-08-29 - Check Point Research detects Crypto Miner malware disguised as Google translate desktop and other legitimate applications/
|
— |
|
|
|
2022-08-29 - CosmicDuke Malware Analysis Report/
|
— |
|
|
|
2022-08-29 - Crypto miners’ latest techniques/
|
— |
|
|
|
2022-08-29 - Malicious Cookie Stuffing Chrome Extensions with 1.4 Million Users/
|
— |
|
|
|
2022-08-29 - Mini Stealer- Possible Predecessor Of Parrot Stealer/
|
— |
|
|
|
2022-08-29 - New Golang Attack Campaign GO-WEBBFUSCATOR Leverages Office Macros and James Webb Images to Infect Systems/
|
— |
|
|
|
2022-08-29 - Office Files, RTF files, Shellcode and more shenanigans/
|
— |
|
|
|
2022-08-29 - PureCrypter is busy pumping out various malicious malware families/
|
— |
|
|
|
2022-08-29 - PureCrypter Loader continues to be active and has spread to more than 10 other families/
|
— |
|
|
|
2022-08-29 - Remcos RAT New TTPS - Detection & Response/
|
— |
|
|
|
2022-08-29 - Securonix Threat Labs Security Advisory- New Golang Attack Campaign GO#WEBBFUSCATOR Leverages Office Macros and James Webb Images to Infect Systems/
|
— |
|
|
|
2022-08-29 - Securonix Threat Labs Security AdvisoryNew Golang Attack Campaign GOWEBBFUSCATOR Leverages Office Mac/
|
— |
|
|
|
2022-08-29 - Tor 101- How Tor Works and its Risks to the Enterprise/
|
— |
|
|
|
2022-08-29 - Traffers- a deep dive into the information stealer ecosystem/
|
— |
|
|
|
2022-08-30 - Brute Force Attempts May Have Preceded Ransomware Attack on School District/
|
— |
|
|
|
2022-08-30 - ChromeLoader Browser Hijacker/
|
— |
|
|
|
2022-08-30 - Hacker Infrastructure Used in Cisco Breach Discovered Attacking a Top Workforce Management Corporation & an Affiliate of Russia’s Evil Corp Gang Suspected, Reports eSentire/
|
— |
|
|
|
2022-08-30 - ModernLoader delivers multiple stealers, cryptominers and RATs/
|
— |
|
|
|
2022-08-30 - NanoCore RAT Hunting Guide/
|
— |
|
|
|
2022-08-30 - Raccoon Stealer 2.0 Malware analysis/
|
— |
|
|
|
2022-08-30 - Rising Tide Chasing the Currents of Espionage in the South China Sea/
|
— |
|
|
|
2022-08-30 - Rising Tide- Chasing the Currents of Espionage in the South China Sea/
|
— |
|
|
|
2022-08-30 - SmokeLoader - Quick-Analysis/
|
— |
|
|
|
2022-08-31 - Analysis of APT35 Infrastructure Reveals Interest in Egyptian Shipping Companies/
|
— |
|
|
|
2022-08-31 - Asbit- An Emerging Remote Desktop Trojan/
|
— |
|
|
|
2022-08-31 - Deep Dive into a Corporate Espionage Operation/
|
— |
|
|
|
2022-08-31 - ERMAC 2.0- Perfecting the Account Takeover/
|
— |
|
|
|
2022-08-31 - Tracking PrivateLoader- Malware Distribution Service/
|
— |
|
|
|
2022-09-01 - BianLian Ransomware Gang Gives It a Go!/
|
— |
|
|
|
2022-09-01 - No Honor Among Thieves - Prynt Stealer’s Backdoor Exposed/
|
— |
|
|
|
2022-09-01 - PyPI Phishing Campaign - JuiceLedger Threat Actor Pivots From Fake Apps to Supply Chain Attacks/
|
— |
|
|
|
2022-09-01 - PyPI Phishing Campaign JuiceLedger Threat Actor Pivots From Fake Apps to Supply Chain Attacks/
|
— |
|
|
|
2022-09-01 - Ransomware Spotlight Black Basta/
|
— |
|
|
|
2022-09-01 - Raspberry Robin and Dridex Two Birds of a Feather/
|
— |
|
|
|
2022-09-01 - Raspberry Robin and Dridex- Two Birds of a Feather/
|
— |
|
|
|
2022-09-01 - SafeBreach Labs Researchers Uncover New Remote Access Trojan (RAT)/
|
— |
|
|
|
2022-09-01 - Technical analysis of SOVA android malware/
|
— |
|
|
|
2022-09-02 - BianLian Ransomware Expanding C2 Infrastructure and Operational Tempo/
|
— |
|
|
|
2022-09-02 - Buzzing in the Background BumbleBee, a New Modular Backdoor Evolved From BookWorm/
|
— |
|
|
|
2022-09-02 - Buzzing in the Background- BumbleBee, a New Modular Backdoor Evolved From BookWorm/
|
— |
|
|
|
2022-09-02 - Customer data from hundreds of Indonesian and Malaysian restaurants hacked by DESORDEN/
|
— |
|
|
|
2022-09-02 - Sharkbot is back in Google Play/
|
— |
|
|
|
2022-09-02 - What Is Redeemer Ransomware and How Does It Spread- A Technical Analysis/
|
— |
|
|
|
2022-09-03 - PLAY Ransomware/
|
— |
|
|
|
2022-09-05 - Bumblebee Loader Malware Analysis/
|
— |
|
|
|
2022-09-05 - Equation APT Group/
|
— |
|
|
|
2022-09-05 - EvilProxy Phishing-As-A-Service With MFA Bypass Emerged In Dark Web/
|
— |
|
|
|
2022-09-05 - Mythic Case Study- Assessing Common Offensive Security Tools/
|
— |
|
|
|
2022-09-05 - Northwestern Polytechnical University was attacked by the US NSA network attack report (Part 1)/
|
— |
|
|
|
2022-09-05 - Scam Android app steals Bank Credentials and SMS- MyPetronas APK/
|
— |
|
|
|
2022-09-05 - Spyware Campaign Targeting The Uyghur Community/
|
— |
|
|
|
2022-09-06 - Alert (AA22-249A) #StopRansomware- Vice Society/
|
— |
|
|
|
2022-09-06 - An Obfuscated Beacon – Extra XOR Layer/
|
— |
|
|
|
2022-09-06 - DangerousSavanna - Two-year long campaign targets financial institutions in French-speaking Africa/
|
— |
|
|
|
2022-09-06 - DangerousSavanna- Two-year long campaign targets financial institutions in French-speaking Africa/
|
— |
|
|
|
2022-09-06 - Malware development tricks- parent PID spoofing. Simple Cplusplus example/
|
— |
|
|
|
2022-09-06 - Mirai Variant MooBot Targeting D-Link Devices/
|
— |
|
|
|
2022-09-06 - Play Ransomware's Attack Playbook Similar to that of Hive, Nokoyawa/
|
— |
|
|
|
2022-09-06 - Pro-Palestinian Hacking Group Compromises Berghof PLCs in Israel/
|
— |
|
|
|
2022-09-06 - Pro-Russian Group Targeting Ukraine Supporters with DDoS Attacks/
|
— |
|
|
|
2022-09-06 - Shikitega - New stealthy malware targeting Linux/
|
— |
|
|
|
2022-09-06 - TA505 Group's TeslaGun In-Depth Analysis/
|
— |
|
|
|
2022-09-06 - Technical analysis of SharkBot android malware/
|
— |
|
|
|
2022-09-06 - TTPs Associated With a New Version of the BlackCat Ransomware/
|
— |
|
|
|
2022-09-06 - Worok - The big picture/
|
— |
|
|
|
2022-09-06 - Worok- The big picture/
|
— |
|
|
|
2022-09-07 - APT42 - Crooked Charms, Cons and Compromises/
|
— |
|
|
|
2022-09-07 - APT42- Crooked Charms, Cons, and Compromises/
|
— |
|
|
|
2022-09-07 - Bumblebee Returns With New Infection Technique/
|
— |
|
|
|
2022-09-07 - Conti vs. Monti- A Reinvention or Just a Simple Rebranding-/
|
— |
|
|
|
2022-09-07 - Initial access broker repurposing techniques in targeted attacks against Ukraine/
|
— |
|
|
|
2022-09-07 - MagicRAT Lazarus latest gateway into victim networks/
|
— |
|
|
|
2022-09-07 - MagicRAT- Lazarus’ latest gateway into victim networks/
|
— |
|
|
|
2022-09-07 - Profiling DEV-0270 PHOSPHORUS ransomware operations/
|
— |
|
|
|
2022-09-07 - Profiling DEV-0270- PHOSPHORUS’ ransomware operations/
|
— |
|
|
|
2022-09-07 - The Curious Case of “Monti” Ransomware- A Real-World Doppelganger/
|
— |
|
|
|
2022-09-08 - BRONZE PRESIDENT Targets Government Officials/
|
— |
|
|
|
2022-09-08 - Charming Kitten- -Can We Have A Meeting-- Important puzzle pieces of Charming Kitten's cyber espionage operations/
|
— |
|
|
|
2022-09-08 - Crimeware Trends - Ransomware Developers Turn to Intermittent Encryption to Evade Detection/
|
— |
|
|
|
2022-09-08 - How Malicious Actors Abuse Native Linux Tools in Attacks/
|
— |
|
|
|
2022-09-08 - Lazarus and the tale of three RATs/
|
— |
|
|
|
2022-09-08 - Microsoft investigates Iranian attacks against the Albanian government/
|
— |
|
|
|
2022-09-08 - Russian Cyberwarfare- Unpacking the Kremlin’s Capabilities/
|
— |
|
|
|
2022-09-08 - The art and science behind Microsoft threat hunting- Part 1/
|
— |
|
|
|
2022-09-08 - Threat Analysis Report- PlugX RAT Loader Evolution/
|
— |
|
|
|
2022-09-08 - What to Expect When You’re Electing- Preparing for Cyber Threats to the 2022 U.S. Midterm Elections/
|
— |
|
|
|
2022-09-09 - BUGHATCH Malware Analysis/
|
— |
|
|
|
2022-09-09 - Lampion Trojan Utilizes New Delivery through Cloud-Based Sharing/
|
— |
|
|
|
2022-09-09 - US Department of the Treasury/
|
— |
|
|
|
2022-09-10 - Malware development- persistence - part 10. Using Image File Execution Options. Simple C++ example/
|
— |
|
|
|
2022-09-10 - Realizziamo un C&C Server in Python (Bankshot)/
|
— |
|
|
|
2022-09-12 - Chiseling In- Lorenz Ransomware Group Cracks MiVoice And Calls Back For Free/
|
— |
|
|
|
2022-09-12 - Dead or Alive- An Emotet Story/
|
— |
|
|
|
2022-09-12 - Raccoon Stealer V2 in depth Analysis/
|
— |
|
|
|
2022-09-12 - Raccoon Stealer v2 Malware Analysis/
|
— |
|
|
|
2022-09-12 - Security Breaks- TeamTNT’s DockerHub Credentials Leak/
|
— |
|
|
|
2022-09-12 - The evolution of GuLoader/
|
— |
|
|
|
2022-09-13 - AdvIntel's State of Emotet aka -SpmTools- Displays Over Million Compromised Machines Through 2022/
|
— |
|
|
|
2022-09-13 - Back to School- BEC Group Targets Teachers with Payroll Diversion Attacks/
|
— |
|
|
|
2022-09-13 - Bvp47 Version 1.7 Technical Details Report II/
|
— |
|
|
|
2022-09-13 - Look What You Made Me Do TA453 Uses Multi-Persona Impersonation to Capitalize on FOMO/
|
— |
|
|
|
2022-09-13 - Look What You Made Me Do- TA453 Uses Multi-Persona Impersonation to Capitalize on FOMO/
|
— |
|
|
|
2022-09-13 - Magento vendor Fishpig hacked, backdoors added/
|
— |
|
|
|
2022-09-13 - New Wave of Espionage Activity Targets Asian Governments/
|
— |
|
|
|
2022-09-13 - OriginLogger- A Look at Agent Tesla’s Successor/
|
— |
|
|
|
2022-09-13 - Security Announcements/
|
— |
|
|
|
2022-09-13 - Singapore corporations making progress in preventing cyberattacks/
|
— |
|
|
|
2022-09-14 - A Post-exploitation Look at Coinminers Abusing WebLogic Vulnerabilities/
|
— |
|
|
|
2022-09-14 - Alert (AA22-257A)- Iranian Islamic Revolutionary Guard Corps-Affiliated Cyber Actors Exploiting Vulnerabilities for Data Extortion and Disk Encryption for Ransom Operations/
|
— |
|
|
|
2022-09-14 - Dissecting PlugX to Extract Its Crown Jewels/
|
— |
|
|
|
2022-09-14 - Iranian Islamic Revolutionary Guard Corps-Affiliated Cyber Actors Exploiting Vulnerabilities for Data Extortion and Disk Encryption for Ransom Operations/
|
— |
|
|
|
2022-09-14 - It's Time to PuTTY! DPRK Job Opportunity Phishing via WhatsApp/
|
— |
|
|
|
2022-09-14 - Its Time to PuTTY DPRK Job Opportunity Phishing via WhatsApp/
|
— |
|
|
|
2022-09-14 - Opsec Mistakes Reveal COBALT MIRAGE Threat Actors/
|
— |
|
|
|
2022-09-14 - Pro-Russian Hacktivist Groups Target Ukraine Supporters/
|
— |
|
|
|
2022-09-14 - THREAT ANALYSIS REPORT- Abusing Notepad++ Plugins for Evasion and Persistence/
|
— |
|
|
|
2022-09-14 - You never walk alone The SideWalk backdoor gets a Linux variant/
|
— |
|
|
|
2022-09-14 - You never walk alone- The SideWalk backdoor gets a Linux variant/
|
— |
|
|
|
2022-09-15 - Documents For Sale on the Dark Web/
|
— |
|
|
|
2022-09-15 - Erbium InfoStealer Enters the Scene- Characteristics and Origins/
|
— |
|
|
|
2022-09-15 - F5 BIG-IP Vulnerability (CVE-2022-1388) Exploited by BlackTech/
|
— |
|
|
|
2022-09-15 - From the Front Lines - Slam! Anatomy of a Publicly-Available Ransomware Builder/
|
— |
|
|
|
2022-09-15 - Gamaredon APT targets Ukrainian government agencies in new campaign/
|
— |
|
|
|
2022-09-15 - PrivateLoader- the loader of the prevalent ruzki PPI service/
|
— |
|
|
|
2022-09-15 - Self-spreading stealer attacks gamers via YouTube/
|
— |
|
|
|
2022-09-15 - Threat Alert- New Malware in the Cloud By TeamTNT/
|
— |
|
|
|
2022-09-15 - Webworm Espionage Attackers Testing and Using Older Modified RATs/
|
— |
|
|
|
2022-09-15 - Webworm- Espionage Attackers Testing and Using Older Modified RATs/
|
— |
|
|
|
2022-09-16 - Bumblebee Malware Loader- Threat Analysis/
|
— |
|
|
|
2022-09-16 - Deception in Depth - Building Deceptions from Breaches/
|
— |
|
|
|
2022-09-16 - Recordbreaker- The Resurgence of Raccoon/
|
— |
|
|
|
2022-09-16 - Uber hacked, internal systems breached and vulnerability reports stolen/
|
— |
|
|
|
2022-09-16 - Unflattening ConfuserEx Code in IDA/
|
— |
|
|
|
2022-09-16 - Zero-Day Exploit Detection Using Machine Learning/
|
— |
|
|
|
2022-09-18 - Raccoon back with new claws!/
|
— |
|
|
|
2022-09-19 - Excel Document Delivers Multiple Malware By Exploiting CVE-2017-11882 – Part I/
|
— |
|
|
|
2022-09-19 - Hacking group focused on Central America dumps 10 terabytes of military emails, files/
|
— |
|
|
|
2022-09-19 - Russia-Nexus UAC-0113 Emulating Telecommunication Providers in Ukraine/
|
— |
|
|
|
2022-09-20 - Malware development- persistence - part 11. Powershell profile. Simple Cplusplus example/
|
— |
|
|
|
2022-09-21 - Alert (AA22-264A) Iranian State Actors Conduct Cyber Operations Against the Government of Albania/
|
— |
|
|
|
2022-09-21 - Identifying file manipulation in system files/
|
— |
|
|
|
2022-09-21 - Native function and Assembly Code Invocation/
|
— |
|
|
|
2022-09-21 - Rewards plus- Fake mobile banking rewards apps lure users to install info-stealing RAT on Android devices/
|
— |
|
|
|
2022-09-21 - SystemBC- The Multipurpose Proxy Bot Still Breathes/
|
— |
|
|
|
2022-09-21 - Technical Analysis of Crytox Ransomware/
|
— |
|
|
|
2022-09-21 - Technical analysis of Hydra android malware/
|
— |
|
|
|
2022-09-21 - The art and science behind Microsoft threat hunting- Part 2/
|
— |
|
|
|
2022-09-22 - 7 Years of Scarlet Mimic’s Mobile Surveillance Campaign Targeting Uyghurs/
|
— |
|
|
|
2022-09-22 - A Technical Analysis Of The Leaked LOCKBIT 3.0 Builder/
|
— |
|
|
|
2022-09-22 - Alert (AA22-265A) Control System Defense- Know the Opponent/
|
— |
|
|
|
2022-09-22 - ALPHV-BlackCat ransomware family becoming more dangerous/
|
— |
|
|
|
2022-09-22 - APT41 and Recent Activity/
|
— |
|
|
|
2022-09-22 - Chinese State-Sponsored Group TA413 Adopts New Capabilities in Pursuit of Tibetan Targets/
|
— |
|
|
|
2022-09-22 - Malicious OAuth applications used to compromise email servers and spread spam/
|
— |
|
|
|
2022-09-22 - Noberus Ransomware- Darkside and BlackMatter Successor Continues to Evolve its Tactics/
|
— |
|
|
|
2022-09-22 - Quick Overview of Leaked LockBit 3.0 (Black) builder program/
|
— |
|
|
|
2022-09-22 - Raspberry Robins Roshtyak A Little Lesson in Trickery/
|
— |
|
|
|
2022-09-22 - Raspberry Robin’s Roshtyak- A Little Lesson in Trickery/
|
— |
|
|
|
2022-09-22 - Recent Cyber Chaos is a Structural Shift/
|
— |
|
|
|
2022-09-22 - Technical analysis of Ginp android malware/
|
— |
|
|
|
2022-09-22 - THE MYSTERY OF METADOR AN UNATTRIBUTED THREAT HIDING IN TELCOS, ISPS, AND UNIVERSITIES/
|
— |
|
|
|
2022-09-22 - The Mystery of Metador - An Unattributed Threat Hiding in Telcos, ISPs, and Universities/
|
— |
|
|
|
2022-09-22 - Void Balaur - The Sprawling Infrastructure of a Careless Mercenary/
|
— |
|
|
|
2022-09-22 - Void Balaur The Sprawling Infrastructure of a Careless Mercenary/
|
— |
|
|
|
2022-09-22 - Watch Out For The New NFT-001/
|
— |
|
|
|
2022-09-23 - FARGO Ransomware (Mallox) Being Distributed to Unsecured MS-SQL Servers/
|
— |
|
|
|
2022-09-23 - GRU Rise of the Telegram MinIOns/
|
— |
|
|
|
2022-09-23 - GRU- Rise of the (Telegram) MinIOns/
|
— |
|
|
|
2022-09-23 - In the footsteps of the Fancy Bear PowerPointmouse-over event abused to deliver Graphite implants/
|
— |
|
|
|
2022-09-23 - In the footsteps of the Fancy Bear- PowerPoint mouse-over event abused to deliver Graphite implants/
|
— |
|
|
|
2022-09-23 - Mass email campaign with a pinch of targeted spam/
|
— |
|
|
|
2022-09-23 - Poseidon’s Offspring- Charybdis and Scylla/
|
— |
|
|
|
2022-09-24 - So Long (Go)Daddy - Tracking BlackTech Infrastructure/
|
— |
|
|
|
2022-09-25 - APT techniques- Access Token manipulation. Token theft. Simple Cplusplus example/
|
— |
|
|
|
2022-09-25 - Technical analysis of Alien android malware/
|
— |
|
|
|
2022-09-26 - BumbleBee- Round Two/
|
— |
|
|
|
2022-09-26 - DcDcrypt Ransomware Decryptor/
|
— |
|
|
|
2022-09-26 - Hunting for Unsigned DLLs to Find APTs/
|
— |
|
|
|
2022-09-26 - Lazarus ‘Operation In(ter)ception’ Targets macOS Users Dreaming of Jobs in Crypto/
|
— |
|
|
|
2022-09-26 - New Erbium password-stealing malware spreads as game cracks, cheats/
|
— |
|
|
|
2022-09-26 - NullMixer- oodles of Trojans in a single dropper/
|
— |
|
|
|
2022-09-26 - The Anatomy of Wiper Malware, Part 3- Input-Output Controls/
|
— |
|
|
|
2022-09-27 - A Deep Dive Into the APT28’s stealer called CredoMap/
|
— |
|
|
|
2022-09-27 - A technical analysis of Pegasus for Android – Part 2/
|
— |
|
|
|
2022-09-27 - AllcomeClipper samples on MalwareBazaar/
|
— |
|
|
|
2022-09-27 - Chaos Is A Go-Based Swiss Army Knife Of Malware (IOCs)/
|
— |
|
|
|
2022-09-27 - More Than Meets the Eye- Exposing a Polyglot File That Delivers IcedID/
|
— |
|
|
|
2022-09-27 - Securonix Threat Labs Security Advisory Detecting STEEPMAVERICK New Covert Attack Campaign Targeting/
|
— |
|
|
|
2022-09-27 - Solarmarker- The Old is New/
|
— |
|
|
|
2022-09-28 - A Deep Dive Into the APT28’s stealer called CredoMap/
|
— |
|
|
|
2022-09-28 - ArrowRat/
|
— |
|
|
|
2022-09-28 - Chaos Is A Go-Based Swiss Army Knife Of Malware/
|
— |
|
|
|
2022-09-28 - Investigating Web Shells/
|
— |
|
|
|
2022-09-28 - New campaign uses government union-themed lures to deliver Cobalt Strike beacons/
|
— |
|
|
|
2022-09-28 - Prilex- the pricey prickle credit card complex/
|
— |
|
|
|
2022-09-28 - Securonix Threat Labs Security Advisory- Detecting STEEP#MAVERICK- New Covert Attack Campaign Targeting Military Contractors/
|
— |
|
|
|
2022-09-28 - Threat Spotlight- Continuing attacks on Atlassian Confluence zero day/
|
— |
|
|
|
2022-09-29 - America’s Throwaway Spies How the CIA failed Iranian informants in its secret war with Tehran/
|
— |
|
|
|
2022-09-29 - Bad VIB(E)s Part One- Investigating Novel Malware Persistence Within ESXi Hypervisors/
|
— |
|
|
|
2022-09-29 - Bad VIB(E)s Part Two- Detection and Hardening within ESXi Hypervisors/
|
— |
|
|
|
2022-09-29 - Bad VIBEs Part One Investigating Novel Malware Persistence Within ESXi Hypervisors/
|
— |
|
|
|
2022-09-29 - Doenerium- It’s Not a Crime to Steal From Thieves/
|
— |
|
|
|
2022-09-29 - New Royal Ransomware emerges in multi-million dollar attacks/
|
— |
|
|
|
2022-09-29 - Seychelles, Seychelles, on the C(2) Shore- An overview of a bulletproof hosting provider named ELITETEAM/
|
— |
|
|
|
2022-09-29 - Warning Campaign Attack Using Zero Day Vulnerability on Microsoft Exchange Server/
|
— |
|
|
|
2022-09-29 - Witchetty Group Uses Updated Toolset in Attacks on Governments in Middle East/
|
— |
|
|
|
2022-09-29 - Witchetty- Group Uses Updated Toolset in Attacks on Governments in Middle East/
|
— |
|
|
|
2022-09-29 - ZINC weaponizing open-source software/
|
— |
|
|
|
2022-09-30 - A glimpse into the shadowy realm of a Chinese APT detailed analysis of a ShadowPad intrusion/
|
— |
|
|
|
2022-09-30 - A glimpse into the shadowy realm of a Chinese APT- detailed analysis of a ShadowPad intrusion/
|
— |
|
|
|
2022-09-30 - Amazonthemed campaigns of Lazarus in the Netherlands and Belgium/
|
— |
|
|
|
2022-09-30 - Amazon‑themed campaigns of Lazarus in the Netherlands and Belgium/
|
— |
|
|
|
2022-09-30 - Diavol resurfaces/
|
— |
|
|
|
2022-09-30 - Dissecting BlueSky Ransomware Payload/
|
— |
|
|
|
2022-09-30 - Malware development- persistence - part 12. Accessibility Features. Simple C++ example/
|
— |
|
|
|
2022-09-30 - Technical Analysis of MedusaLocker Ransomware/
|
— |
|
|
|
2022-10-01 - Analysis-Mexico data hack exposes government cybersecurity vulnerability/
|
— |
|
|
|
2022-10-01 - DarkCloud Stealer Triage/
|
— |
|
|
|
2022-10-01 - Ladon hacking framework/
|
— |
|
|
|
2022-10-02 - Thailand’s THE ICON GROUP hacked by DESORDEN/
|
— |
|
|
|
2022-10-03 - 3rd October – Threat Intelligence Report/
|
— |
|
|
|
2022-10-03 - Bumblebee- increasing its capacity and evolving its TTPs/
|
— |
|
|
|
2022-10-03 - DeftTorero tactics techniques and procedures of intrusions revealed/
|
— |
|
|
|
2022-10-03 - DeftTorero- tactics, techniques and procedures of intrusions revealed/
|
— |
|
|
|
2022-10-03 - Revealing Emperor Dragonfly Night Sky and Cheerscrypt - A Single Ransomware Group/
|
— |
|
|
|
2022-10-03 - Some Notes on VIRTUALGATE/
|
— |
|
|
|
2022-10-03 - Water Labbu Abuses Malicious DApps to Steal Cryptocurrency/
|
— |
|
|
|
2022-10-04 - Alert (AA22-277A) Impacket and Exfiltration Tool Used to Steal Sensitive Information from Defense Industrial Base Organization/
|
— |
|
|
|
2022-10-04 - Deliver a Strike by Reversing a Badger- Brute Ratel Detection and Analysis/
|
— |
|
|
|
2022-10-04 - Impacket and Exfiltration Tool Used to Steal Sensitive Information from Defense Industrial Base Organization/
|
— |
|
|
|
2022-10-04 - MSSQL, meet Maggie/
|
— |
|
|
|
2022-10-04 - Remove All The Callbacks – BlackByte Ransomware Disables EDR Via RTCore64.sys Abuse/
|
— |
|
|
|
2022-10-04 - Rewterz Threat Alert – KONNI APT Group – Active IOCs/
|
— |
|
|
|
2022-10-04 - The Rise of Earth Aughisky Tracking the Campaigns Taidoor Started/
|
— |
|
|
|
2022-10-04 - Witchetty APT Group/
|
— |
|
|
|
2022-10-05 - Analysis of LilithBot Malware and Eternity Threat Group/
|
— |
|
|
|
2022-10-05 - Detecting and preventing LSASS credential dumping attacks/
|
— |
|
|
|
2022-10-05 - Excel Document Delivers Multiple Malware by Exploiting CVE-2017-11882 – Part II/
|
— |
|
|
|
2022-10-05 - Sinkholing PseudoManuscrypt- From Zero To 50k Infections - Part 1/
|
— |
|
|
|
2022-10-06 - Alert (AA22-279A) Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors/
|
— |
|
|
|
2022-10-06 - Amazon Web Services- Exploring The Cost Of Exfil/
|
— |
|
|
|
2022-10-06 - Evolution of BazarCall Social Engineering Tactics/
|
— |
|
|
|
2022-10-06 - Mustang Panda Abuses Legitimate Apps to Target Myanmar Based Victims/
|
— |
|
|
|
2022-10-06 - New Spyware RatMilad Targets Middle Eastern Mobile Devices/
|
— |
|
|
|
2022-10-06 - NullMixer Drops Multiple Malware Families/
|
— |
|
|
|
2022-10-06 - Rhadamanthys Stealer Analysis/
|
— |
|
|
|
2022-10-07 - A Visualizza into Recent IcedID Campaigns- Reconstructing Threat Actor Metrics with Pure Signal™ Recon/
|
— |
|
|
|
2022-10-07 - Analysis of CISA releases Advisory on Top CVEs Exploited Chinese State-Sponsored Groups/
|
— |
|
|
|
2022-10-07 - LofyGang – Software Supply Chain Attackers; Organized, Persistent, and Operating for Over a Year/
|
— |
|
|
|
2022-10-07 - Making oRAT - GO!/
|
— |
|
|
|
2022-10-07 - Powershell Backdoor with DGA Capability/
|
— |
|
|
|
2022-10-08 - Nimbo-C2 - A new C2 Framework/
|
— |
|
|
|
2022-10-09 - Johnson Fitness and Wellness hit by DESORDEN Group/
|
— |
|
|
|
2022-10-11 - Hacking group POLONIUM uses ‘Creepy’ malware against Israel/
|
— |
|
|
|
2022-10-11 - POLONIUM targets Israel with Creepy malware/
|
— |
|
|
|
2022-10-11 - The Russian SpyAgent a Decade Later and RAT Tools Remain at Risk/
|
— |
|
|
|
2022-10-11 - The Russian SpyAgent – a Decade Later and RAT Tools Remain at Risk/
|
— |
|
|
|
2022-10-11 - Tracking down Maggie/
|
— |
|
|
|
2022-10-12 - Analysis on Attack Techniques and Cases Using RDP/
|
— |
|
|
|
2022-10-12 - Black Basta Ransomware Gang Infiltrates Networks via QAKBOT, Brute Ratel, and Cobalt Strike/
|
— |
|
|
|
2022-10-12 - Dissecting the new shellcode-based variant of GuLoader (CloudEyE)/
|
— |
|
|
|
2022-10-12 - IcedID BackConnect Protocol/
|
— |
|
|
|
2022-10-12 - Lazarus Group Uses the DLL Side-Loading Technique (mi.dll)/
|
— |
|
|
|
2022-10-12 - TOAD attacks- Vishing combined with Android banking malware now targeting Italian banks/
|
— |
|
|
|
2022-10-12 - Winnti APT group docks in Sri Lanka for new campaign/
|
— |
|
|
|
2022-10-12 - WIP19 Espionage - New Chinese APT Targets IT Service Providers and Telcos With Signed Malware/
|
— |
|
|
|
2022-10-12 - WIP19 Espionage New Chinese APT Targets IT Service Providers and Telcos With Signed Malware/
|
— |
|
|
|
2022-10-13 - Alchimist A new attack framework in Chinese for Mac Linux and Windows/
|
— |
|
|
|
2022-10-13 - BianLian Ransomware Encrypts Files in the Blink of an Eye/
|
— |
|
|
|
2022-10-13 - Chinese-linked hackers targeted U.S. state legislature, researchers say/
|
— |
|
|
|
2022-10-13 - Magniber Ransomware Adopts JavaScript, Targeting Home Users with Fake Software Updates/
|
— |
|
|
|
2022-10-13 - QAKBOT BB Configuration and C2 IPs List/
|
— |
|
|
|
2022-10-13 - Ransomware Roundup- Royal Ransomware/
|
— |
|
|
|
2022-10-13 - Trend Micro warns of actively exploited Apex One RCE vulnerability (CVE-2022-40139)/
|
— |
|
|
|
2022-10-14 - New Prestige ransomware impacts organizations in Ukraine and Poland/
|
— |
|
|
|
2022-10-14 - New “Prestige” ransomware impacts organizations in Ukraine and Poland/
|
— |
|
|
|
2022-10-14 - Technical Analysis of BlueSky Ransomware/
|
— |
|
|
|
2022-10-17 - Amadey Bot Disguised as a Famous Korean Messenger Program Being Distributed/
|
— |
|
|
|
2022-10-17 - China’s surveillance ecosystem and the global spread of its tools/
|
— |
|
|
|
2022-10-17 - DiceyF deploys GamePlayerFramework in online casino development studio/
|
— |
|
|
|
2022-10-17 - I Don’t Like Big Gateways (and I Cannot Lie) - How IP Reputation Gets Large Gateways Wrong/
|
— |
|
|
|
2022-10-17 - Stack String Decryption with Ghidra Emulator (Orchard)/
|
— |
|
|
|
2022-10-18 - APT27 One Year To Exfiltrate Them All Intrusion In-Depth Analysis/
|
— |
|
|
|
2022-10-18 - APT27 – One Year To Exfiltrate Them All- Intrusion In-Depth Analysis/
|
— |
|
|
|
2022-10-18 - Hunting Lockbit Variation/
|
— |
|
|
|
2022-10-18 - SafeBreach Labs Researchers Uncover New Fully Undetectable Powershell Backdoor/
|
— |
|
|
|
2022-10-18 - Spyder Loader Malware Seen in Recent Campaign Targeting Organizations in Hong Kong/
|
— |
|
|
|
2022-10-19 - From RM3 to LDR4- URSNIF Leaves Banking Fraud Behind/
|
— |
|
|
|
2022-10-20 - Domestic Kitten campaign spying on Iranian citizens with new FurBall malware/
|
— |
|
|
|
2022-10-20 - Hacking group updates Furball Android spyware to evade detection/
|
— |
|
|
|
2022-10-20 - Mirai, RAR1Ransom, and GuardMiner – Multiple Malware Campaigns Target VMware Vulnerability/
|
— |
|
|
|
2022-10-20 - New Temp Stealer Spreading Via Free & Cracked Software/
|
— |
|
|
|
2022-10-21 - Alert (AA22-294A) #StopRansomware- Daixin Team/
|
— |
|
|
|
2022-10-21 - Exbyte- BlackByte Ransomware Attackers Deploy New Exfiltration Tool/
|
— |
|
|
|
2022-10-21 - WarHawk - the New Backdoor in the Arsenal of the SideWinder APT Group/
|
— |
|
|
|
2022-10-21 - WarHawk- the New Backdoor in the Arsenal of the SideWinder APT Group/
|
— |
|
|
|
2022-10-23 - Unattributed RomCom Threat Actor Spoofing Popular Apps Now Hits Ukrainian Militaries/
|
— |
|
|
|
2022-10-24 - Chapter 1 — From Gozi to ISFB- The history of a mythical malware family/
|
— |
|
|
|
2022-10-24 - Malware infection case of Lazarus attack group that neutralizes antivirus program with BYOVD technique/
|
— |
|
|
|
2022-10-24 - Unveil the evolution of Kimsuky targeting Android devices with newly discovered mobile malware/
|
— |
|
|
|
2022-10-25 - Brute Ratel Config Decoding update/
|
— |
|
|
|
2022-10-25 - DEV-0832 (Vice Society) opportunistic ransomware campaigns impacting US education sector/
|
— |
|
|
|
2022-10-25 - Newly Unsealed Indictment Charges Ukrainian National with International Cybercrime Operation/
|
— |
|
|
|
2022-10-26 - CrowdStrike Identifies New Kiss-a-Dog Cryptojacking Campaign Targeting Vulnerable Docker and Kubernetes Infrastructure/
|
— |
|
|
|
2022-10-26 - Pro-Kremlin Hacktivist Groups Seeking Impact By Courting Notoriety/
|
— |
|
|
|
2022-10-26 - Pro-PRC DRAGONBRIDGE Influence Campaign Leverages New TTPs to Aggressively Target U.S. Interests, Including Midterm Elections/
|
— |
|
|
|
2022-10-27 - Fodcha DDoS botnet reaches 1Tbps in power, injects ransoms in packets/
|
— |
|
|
|
2022-10-27 - Microsoft links Raspberry Robin worm to Clop ransomware attacks/
|
— |
|
|
|
2022-10-27 - Raspberry Robin worm part of larger ecosystem facilitating pre-ransomware activity/
|
— |
|
|
|
2022-10-27 - STRRAT- Malware Analysis of a JAR archive/
|
— |
|
|
|
2022-10-27 - Threat Analysis Active C2 Discovery Using Protocol Emulation Part3 ShadowPad/
|
— |
|
|
|
2022-10-27 - Threat Analysis- Active C2 Discovery Using Protocol Emulation Part3 (ShadowPad)/
|
— |
|
|
|
2022-10-28 - APT techniques- Token theft via UpdateProcThreadAttribute. Simple Cplusplus example/
|
— |
|
|
|
2022-10-28 - Cranefly - Threat Actor Uses Previously Unseen Techniques and Tools in Stealthy Campaign/
|
— |
|
|
|
2022-10-28 - EMOTET dynamic config extraction/
|
— |
|
|
|
2022-10-28 - Malware wars- the attack of the droppers/
|
— |
|
|
|
2022-10-28 - Windows.Carving.SystemBC - SystemBC RAT configuration Purser for Velociraptor/
|
— |
|
|
|
2022-10-31 - A Technical Analysis of Pegasus for Android - Part 3/
|
— |
|
|
|
2022-10-31 - APT10 Tracking down LODEINFO 2022 part I/
|
— |
|
|
|
2022-10-31 - APT10- Tracking down LODEINFO 2022, part I/
|
— |
|
|
|
2022-10-31 - APT10- Tracking down LODEINFO 2022, part II/
|
— |
|
|
|
2022-10-31 - Banking Trojan Techniques- How Financially Motivated Malware Became Infrastructure/
|
— |
|
|
|
2022-10-31 - ICEDIDs network infrastructure is alive and well/
|
— |
|
|
|
2022-10-31 - Mondelez and Zurich reach settlement in NotPetya cyberattack insurance suit/
|
— |
|
|
|
2022-10-31 - Orion Threat Alert- Qakbot TTPs Arsenal and the Black Basta Ransomware/
|
— |
|
|
|
2022-10-31 - QakBot CCs prioritization and new record types/
|
— |
|
|
|
2022-11-01 - Analysis of Suspected Lazarus Attacks Against South/
|
— |
|
|
|
2022-11-01 - NCSC Annual Review 2022/
|
— |
|
|
|
2022-11-02 - Appleseed Being Distributed to Nuclear Power Plant-Related Companies/
|
— |
|
|
|
2022-11-02 - BlueFox Stealer- a newcomer designed for traffers teams/
|
— |
|
|
|
2022-11-02 - Could Threat Actors Be Downgrading Their Malware to Evade Detection-/
|
— |
|
|
|
2022-11-02 - Missile Supplier MBDA Breach Disclosed by CloudSEK/
|
— |
|
|
|
2022-11-02 - New Laplas Clipper Distributed via SmokeLoader/
|
— |
|
|
|
2022-11-02 - RomCom Threat Actor Abuses KeePass and SolarWinds to Target Ukraine and Potentially the United Kingdom/
|
— |
|
|
|
2022-11-03 - APT-36 Uses New TTPs and New Tools to Target Indian Governmental Organizations/
|
— |
|
|
|
2022-11-03 - Black Basta Ransomware - Attacks Deploy Custom EDR Evasion Tools Tied to FIN7 Threat Actor/
|
— |
|
|
|
2022-11-03 - Cobalt Strike Analysis and Tutorial- Identifying Beacon Team Servers in the Wild/
|
— |
|
|
|
2022-11-03 - Family Tree- DLL-Sideloading Cases May Be Related/
|
— |
|
|
|
2022-11-03 - GCTI Open Source Detection Signatures/
|
— |
|
|
|
2022-11-03 - Not a dream job Hunting for malicious job offers from an APT/
|
— |
|
|
|
2022-11-03 - OPERA1ER/
|
— |
|
|
|
2022-11-03 - P2P Botnets- Review - Status - Continuous Monitoring/
|
— |
|
|
|
2022-11-03 - Robin Banks still might be robbing your bank (part 2)/
|
— |
|
|
|
2022-11-03 - What is Orcus RAT- Technical Analysis and Malware Configuration/
|
— |
|
|
|
2022-11-04 - Behinder Mem Shell/
|
— |
|
|
|
2022-11-04 - Malaysian online stock brokerage firm victim of cyberattack/
|
— |
|
|
|
2022-11-04 - The Android Malware’s Journey- From Google Play to banking fraud/
|
— |
|
|
|
2022-11-05 - Malware analysis- part 6. Shannon entropy. Simple python script/
|
— |
|
|
|
2022-11-06 - Analysis Of Netwire RAT/
|
— |
|
|
|
2022-11-07 - Arkei Staler Analysis/
|
— |
|
|
|
2022-11-07 - Inside the Yanluowang Leak- Organization, Members, and Tactics/
|
— |
|
|
|
2022-11-07 - Massive Phishing Campaigns Target India Banks’ Clients/
|
— |
|
|
|
2022-11-07 - Sanctioned deals the Irano-Russian connection under Ankaras supervision Analysis of the NPPD leak/
|
— |
|
|
|
2022-11-07 - SocGholish Diversifies and Expands Its Malware Staging Infrastructure to Counter Defenders/
|
— |
|
|
|
2022-11-08 - DeimosC2- What SOC Analysts and Incident Responders Need to Know About This C&C Framework/
|
— |
|
|
|
2022-11-08 - LockBit 3.0 Being Distributed via Amadey Bot/
|
— |
|
|
|
2022-11-08 - Massive YouTube Campaign Targeting Over 100 Applications To Deliver Info Stealer/
|
— |
|
|
|
2022-11-08 - ShortAndMalicious- StrelaStealer aims for mail credentials/
|
— |
|
|
|
2022-11-08 - They See Me Roaming Following APT29 by Taking a Deeper Look at Windows Credential Roaming/
|
— |
|
|
|
2022-11-09 - BlackCat Ransomware- Tactics and Techniques From a Targeted Attack/
|
— |
|
|
|
2022-11-09 - Hack the Real Box APT41s New Subgroup Earth Longzhi/
|
— |
|
|
|
2022-11-09 - Hack the Real Box- APT41’s New Subgroup Earth Longzhi/
|
— |
|
|
|
2022-11-09 - Ransomware-as-a-Service Transforms Gangs Into Businesses/
|
— |
|
|
|
2022-11-09 - Threat Spotlight- Cyber Criminal Adoption of IPFS for Phishing, Malware Campaigns/
|
— |
|
|
|
2022-11-10 - How LNK Files Are Abused by Threat Actors/
|
— |
|
|
|
2022-11-10 - Lookout Discovers Long-running Surveillance Campaigns Targeting Uyghurs/
|
— |
|
|
|
2022-11-10 - Penetration and Distribution Method of Gwisin Attacker/
|
— |
|
|
|
2022-11-10 - PNG Steganography Hides Backdoor/
|
— |
|
|
|
2022-11-10 - Ransomware Roundup- New Inlock and Xorist Variants/
|
— |
|
|
|
2022-11-10 - Rise of Banking Trojan Dropper in Google Play/
|
— |
|
|
|
2022-11-11 - CERT GOV UA 5185/
|
— |
|
|
|
2022-11-11 - GraceWire - FlawedGrace malware adventure/
|
— |
|
|
|
2022-11-11 - Magniber Ransomware Attempts to Bypass MOTW (Mark of the Web)/
|
— |
|
|
|
2022-11-14 - Operation (Đường chín đoạn) typhoon- the cyber sea lotus coveting the nine-dash line in the South China Sea/
|
— |
|
|
|
2022-11-15 - APT Billbug Victimized Asian Certification Authority and Government Agencies/
|
— |
|
|
|
2022-11-15 - Billbug - State-sponsored Actor Targets Cert Authority, Government Agencies in Multiple Asian Countries/
|
— |
|
|
|
2022-11-15 - Billbug- State-sponsored Actor Targets Cert Authority, Government Agencies in Multiple Asian Countries/
|
— |
|
|
|
2022-11-15 - Cybercrime is more of a threat than nation-state hackers/
|
— |
|
|
|
2022-11-15 - DTrack activity targeting Europe and Latin America/
|
— |
|
|
|
2022-11-15 - New RapperBot Campaign – We Know What You Bruting for this Time/
|
— |
|
|
|
2022-11-15 - North Korean hackers targeted Ukraine as it fought off Russia’s invasion- Report/
|
— |
|
|
|
2022-11-15 - Somnia Malware Detection- UAC-0118 aka FRwL Launches Cyber Attacks Against Organizations in Ukraine Using Enhanced Malware Strains/
|
— |
|
|
|
2022-11-15 - Top Zeus Botnet Suspect “Tank” Arrested in Geneva/
|
— |
|
|
|
2022-11-15 - Wipermania- An All You Can Wipe Buffet/
|
— |
|
|
|
2022-11-16 - A Comprehensive Look at Emotet Virus’ Fall 2022 Return/
|
— |
|
|
|
2022-11-16 - HZ RAT goes China/
|
— |
|
|
|
2022-11-16 - Inside the Mind of a ‘Rat’ - Agent Tesla Detection and Analysis/
|
— |
|
|
|
2022-11-16 - Malware development- persistence - part 19. Disk Cleanup Utility. Simple Cplusplus example/
|
— |
|
|
|
2022-11-16 - Owner of an Android TV box- May want to check if it's an active botnet member/
|
— |
|
|
|
2022-11-16 - Writing Tiny, Stealthy & Reliable Malware/
|
— |
|
|
|
2022-11-17 - China-based Mustang Panda is a targeted attack with malware -Claimloader-, may affect Japan/
|
— |
|
|
|
2022-11-17 - DEV-0569 finds new ways to deliver Royal ransomware, various payloads/
|
— |
|
|
|
2022-11-17 - Get a Loda This- LodaRAT meets new friends/
|
— |
|
|
|
2022-11-17 - Iranian Government-Sponsored APT Actors Compromise Federal Network, Deploy Crypto Miner, Credential Harvester/
|
— |
|
|
|
2022-11-17 - KromSec outs AnonOpsSE as Iranian regime – Makes statement/
|
— |
|
|
|
2022-11-17 - Mustang Panda based in China has targeted attacks with malware Claimloader, may affect Japan/
|
— |
|
|
|
2022-11-17 - Reconstructing the last activities of Royal Ransomware/
|
— |
|
|
|
2022-11-17 - Trellix Insights- SmokeLoader Exploits Old Vulnerabilities to Drop zgRAT/
|
— |
|
|
|
2022-11-18 - An AI Based Solution to Detecting the DoubleZero .NET Wiper/
|
— |
|
|
|
2022-11-18 - AXLocker, Octocrypt, and Alice- Leading a new wave of Ransomware Campaigns/
|
— |
|
|
|
2022-11-18 - Earth Preta Spear-Phishing Governments Worldwide/
|
— |
|
|
|
2022-11-18 - GRU 26165 - The Russian cyber unit that hacks targets on-site/
|
— |
|
|
|
2022-11-18 - GRU 26165- The Russian cyber unit that hacks targets on-site/
|
— |
|
|
|
2022-11-19 - Malicious Packer pkr_ce1a/
|
— |
|
|
|
2022-11-21 - Aurora- a rising stealer flying under the radar/
|
— |
|
|
|
2022-11-21 - Black Friday Alert- 4 Emerging Skimming Attacks to Watch for This Holiday Season/
|
— |
|
|
|
2022-11-21 - Gamaredon Leverages Microsoft Office Docs to Target Ukraine Government and Military/
|
— |
|
|
|
2022-11-21 - Is Hagga Threat Actor Abusing FSociety Framework -/
|
— |
|
|
|
2022-11-21 - Risky Biz News- Cyber Partisans hack and disrupt Kremlin censor/
|
— |
|
|
|
2022-11-21 - Threat Analysis- Active C2 Discovery Using Protocol Emulation Part4 (Dacls, aka MATA)/
|
— |
|
|
|
2022-11-21 - Threat Assessment- Luna Moth Callback Phishing Campaign/
|
— |
|
|
|
2022-11-21 - Tofsee String Decryption Code/
|
— |
|
|
|
2022-11-21 - ViperSoftX- Hiding in System Logs and Spreading VenomSoftX/
|
— |
|
|
|
2022-11-21 - X-Ray of Malware Evasion Techniques - Analysis, Dissection, Cure-/
|
— |
|
|
|
2022-11-22 - Nighthawk- An Up-and-Coming Pentest Tool Likely to Gain Threat Actor Notice/
|
— |
|
|
|
2022-11-22 - Phishing and Android Malware Campaign Targets Indian Banks/
|
— |
|
|
|
2022-11-22 - RansomExx upgrades to rust/
|
— |
|
|
|
2022-11-22 - The Yanluowang ransomware group in their own words/
|
— |
|
|
|
2022-11-23 - Bahamut cybermercenary group targets Android users with fake VPN apps/
|
— |
|
|
|
2022-11-23 - Detailing Daily Domain Hunting/
|
— |
|
|
|
2022-11-23 - THREAT ALERT- Aggressive Qakbot Campaign and the Black Basta Ransomware Group Targeting U.S. Companies/
|
— |
|
|
|
2022-11-25 - -In The Box- - Mobile Malware Webinjects Marketplace/
|
— |
|
|
|
2022-11-25 - Analysis of APT-C-60 Attack on South Korea/
|
— |
|
|
|
2022-11-25 - Python script to decode NightHawk strings/
|
— |
|
|
|
2022-11-25 - Russian hackers targeting Dutch gas terminal/
|
— |
|
|
|
2022-11-26 - Detecting and Fingerprinting Infostealer Malware-as-a-Service platforms/
|
— |
|
|
|
2022-11-26 - Russia-based RansomBoggs Ransomware Targeted Several Ukrainian Organizations/
|
— |
|
|
|
2022-11-27 - Big Socks to Fill- Tracking the Next 911RE/
|
— |
|
|
|
2022-11-28 - Always Another Secret Lifting the Haze on China-nexus Espionage in Southeast Asia/
|
— |
|
|
|
2022-11-28 - Always Another Secret- Lifting the Haze on China-nexus Espionage in Southeast Asia/
|
— |
|
|
|
2022-11-28 - Emotet Strikes Again – LNK File Leads to Domain Wide Ransomware/
|
— |
|
|
|
2022-11-28 - HiveV5 file decryptor PoC/
|
— |
|
|
|
2022-11-29 - CargoBay BlackHat Backdoor Analysis Report (IRIS-14738)/
|
— |
|
|
|
2022-11-29 - Job hunting trap- Analysis of Lazarus attack activities using recruitment information such as Mizuho Bank of Japan as bait/
|
— |
|
|
|
2022-11-29 - Suspected Iran-Nexus TAG-56 Uses UAE Forum Lure for Credential Theft Against US Think Tank/
|
— |
|
|
|
2022-11-29 - Suspected Russian Activity Targeting Government and Business Entities Around the Globe/
|
— |
|
|
|
2022-11-30 - Analysis of APT29's attack activities against Italy/
|
— |
|
|
|
2022-11-30 - Evolution of the PlugX loader/
|
— |
|
|
|
2022-11-30 - Identifying and Defending Against QakBot's Evolving TTPs/
|
— |
|
|
|
2022-11-30 - LockBit 3.0 ‘Black’ attacks and leaks reveal wormable capabilities and tooling/
|
— |
|
|
|
2022-11-30 - Malware with Sandbox Evasion Techniques Observed Stealing Browser Cached Credentials/
|
— |
|
|
|
2022-11-30 - RansomEXX Ransomware- In-Depth Analysis, Detection, and Mitigation/
|
— |
|
|
|
2022-11-30 - Unpacking Colibri Loader- A Russian APT linked Campaign/
|
— |
|
|
|
2022-11-30 - Whos swimming in South Korean waters Meet ScarCrufts Dolphin/
|
— |
|
|
|
2022-11-30 - Who’s swimming in South Korean waters- Meet ScarCruft’s Dolphin/
|
— |
|
|
|
2022-12-01 - Back in Black... Basta - Technical Analysis of BlackBasta Ransomware 2.0/
|
— |
|
|
|
2022-12-01 - Fake Cryptocurrency Applications Serving as Front for AppleJeus Malware/
|
— |
|
|
|
2022-12-01 - From Macros to No Macros- Continuous Malware Improvements by QakBot/
|
— |
|
|
|
2022-12-01 - Malware Analysis and Triage Report - PirateStealer - Discord_beta.exe/
|
— |
|
|
|
2022-12-01 - New CryWiper data wiper targets Russian courts mayors offices/
|
— |
|
|
|
2022-12-01 - The Mystery of Metador - Unpicking Mafalda’s Anti-Analysis Techniques/
|
— |
|
|
|
2022-12-01 - ZetaNile Open source software trojans from North Korea/
|
— |
|
|
|
2022-12-01 - Новый троянец CryWiper прикидывается шифровальщиком/
|
— |
|
|
|
2022-12-02 - Blowing Cobalt Strike Out of the Water With Memory Analysis/
|
— |
|
|
|
2022-12-02 - Hitching a ride with Mustang Panda/
|
— |
|
|
|
2022-12-02 - KoiVM Loader Resurfaces With a Bang/
|
— |
|
|
|
2022-12-02 - Not a SIMulation- CrowdStrike Investigations Reveal Intrusion Campaign Targeting Telco and BPO Companies/
|
— |
|
|
|
2022-12-02 - The Refinery Files 0x06- Qakbot Decoder/
|
— |
|
|
|
2022-12-03 - Nighthawk DLL Payload Configuration Parser/
|
— |
|
|
|
2022-12-03 - Preparing for a Russian cyber offensive against Ukraine this winter/
|
— |
|
|
|
2022-12-05 - Blue Callisto orbits around US Laboratories in 2022/
|
— |
|
|
|
2022-12-05 - Calisto show interests into entities involved in Ukraine war support/
|
— |
|
|
|
2022-12-05 - Exposing TAG-53’s Credential Harvesting Infrastructure Used for Russia-Aligned Espionage Operations/
|
— |
|
|
|
2022-12-05 - Hackers linked to Chinese government stole millions in Covid benefits Secret Service says/
|
— |
|
|
|
2022-12-05 - Iran State-Backed Hacking of Activists Journalists Politicians/
|
— |
|
|
|
2022-12-05 - Iran- State-Backed Hacking of Activists, Journalists, Politicians/
|
— |
|
|
|
2022-12-05 - Popularity spikes for information stealer malware on the dark web/
|
— |
|
|
|
2022-12-05 - Threat Analysis- MSI - Masquerading as a Software Installer/
|
— |
|
|
|
2022-12-05 - TTPs#9- Analyzing the attack strategy monitoring the daily life of individuals/
|
— |
|
|
|
2022-12-06 - Analysis of suspected APT-C-56 (Transparent Tribe) attacks against terrorism/
|
— |
|
|
|
2022-12-06 - AndroxGh0st – the python malware exploiting your AWS keys/
|
— |
|
|
|
2022-12-06 - Cova and Nosu- a new loader spreads a new stealer/
|
— |
|
|
|
2022-12-06 - Deep Dive Into a BackdoorDiplomacy Attack – A Study of an Attacker’s Toolkit/
|
— |
|
|
|
2022-12-06 - Mustang Panda Uses the Russian-Ukrainian War to Attack Europe and Asia Pacific Targets/
|
— |
|
|
|
2022-12-06 - Technical Analysis of DanaBot Obfuscation Techniques/
|
— |
|
|
|
2022-12-07 - A Closer Look At BlackMagic Ransomware/
|
— |
|
|
|
2022-12-07 - An upsurge of new Android Banking Trojan “Zanubis”/
|
— |
|
|
|
2022-12-07 - Fantasy – a new Agrius wiper deployed through a supply‑chain attack/
|
— |
|
|
|
2022-12-07 - Internet Explorer 0-day exploited by North Korean actor APT37/
|
— |
|
|
|
2022-12-07 - New Babuk Ransomware Found in Major Attack/
|
— |
|
|
|
2022-12-07 - Russian Threat Actor Impersonates Aerospace and Defense Companies/
|
— |
|
|
|
2022-12-08 - Breaking the silence - Recent Truebot activity/
|
— |
|
|
|
2022-12-08 - CERT GOV - UA-5683/
|
— |
|
|
|
2022-12-08 - Compromised Cloud Compute Credentials- Case Studies From the Wild/
|
— |
|
|
|
2022-12-08 - DeathStalker targets legal entities with new Janicab variant/
|
— |
|
|
|
2022-12-08 - Iranian Exploitation Activities Continue as of November 2022/
|
— |
|
|
|
2022-12-08 - Mallox Ransomware showing signs of Increased Activity/
|
— |
|
|
|
2022-12-08 - New MuddyWater Threat Old Kitten New Tricks/
|
— |
|
|
|
2022-12-08 - New MuddyWater Threat- Old Kitten; New Tricks/
|
— |
|
|
|
2022-12-08 - Ransomware Roundup – New Vohuk, ScareCrow, and AERST Variants/
|
— |
|
|
|
2022-12-08 - Trojanized OneNote Document Leads to Formbook Malware/
|
— |
|
|
|
2022-12-08 - Zombinder- new obfuscation service used by Ermac, now distributed next to desktop stealers/
|
— |
|
|
|
2022-12-09 - APT Cloud Atlas Unbroken Threat/
|
— |
|
|
|
2022-12-09 - APT Cloud Atlas- Unbroken Threat/
|
— |
|
|
|
2022-12-09 - Cloud Atlas targets entities in Russia and Belarus amid the ongoing war in Ukraine/
|
— |
|
|
|
2022-12-09 - Drokbk Malware Uses GitHub as Dead Drop Resolver/
|
— |
|
|
|
2022-12-09 - Iranian Exploitation Activities Continue as of November 2022/
|
— |
|
|
|
2022-12-09 - Malware development- persistence - part 20. UserInitMprLogonScript (Logon Script). Simple C++ example/
|
— |
|
|
|
2022-12-12 - Dark Web Profile- APT42 – Iranian Cyber Espionage Group/
|
— |
|
|
|
2022-12-12 - Linux Cryptocurrency Mining Attacks Enhanced via CHAOS RAT/
|
— |
|
|
|
2022-12-12 - North Korean cyber spies deploy new tactic- tricking foreign experts into writing research for them/
|
— |
|
|
|
2022-12-12 - Precious Gemstones- The New Generation of Kerberos Attacks/
|
— |
|
|
|
2022-12-12 - Pulling the Curtains on Azov Ransomware Not a Skidsware but Polymorphic Wiper/
|
— |
|
|
|
2022-12-12 - Pulling the Curtains on Azov Ransomware- Not a Skidsware but Polymorphic Wiper/
|
— |
|
|
|
2022-12-12 - YARA rule for Vohuk ransomware/
|
— |
|
|
|
2022-12-13 - Analyzing Russian SDK Pushwoosh and Russian Code Contributions/
|
— |
|
|
|
2022-12-13 - APT5 - Citrix ADC Threat Hunting Guidance/
|
— |
|
|
|
2022-12-13 - Everything You Need to Know about Royal Ransomware/
|
— |
|
|
|
2022-12-13 - I Solemnly Swear My Driver Is Up to No Good- Hunting for Attestation Signed Malware/
|
— |
|
|
|
2022-12-13 - Signed driver malware moves up the software trust chain/
|
— |
|
|
|
2022-12-13 - Threat Actors use Google Ads to Deploy VIDAR Stealer/
|
— |
|
|
|
2022-12-14 - 50 Domains Worth Blocking- The Evolution of ViperSoftX's Underreported DGA/
|
— |
|
|
|
2022-12-14 - Reassessing cyberwarfare. Lessons learned in 2022/
|
— |
|
|
|
2022-12-14 - Royal Rumble- Analysis of Royal Ransomware/
|
— |
|
|
|
2022-12-14 - Unmasking MirrorFace Operation LiberalFace targeting Japanese political entities/
|
— |
|
|
|
2022-12-14 - Unmasking MirrorFace- Operation LiberalFace targeting Japanese political entities/
|
— |
|
|
|
2022-12-14 - Wouldve Couldve ShouldveDid TA453 Refuses to be Bound by Expectations/
|
— |
|
|
|
2022-12-15 - BrasDex- A new Brazilian ATS Android Banker with ties to Desktop malware/
|
— |
|
|
|
2022-12-15 - Google ads lead to fake software pages pushing IcedID (Bokbot)/
|
— |
|
|
|
2022-12-15 - Tracking Malicious Glupteba Activity Through the Blockchain/
|
— |
|
|
|
2022-12-15 - Trojanized Windows 10 Operating System Installers Targeted Ukrainian Government/
|
— |
|
|
|
2022-12-16 - Agenda Ransomware Uses Rust to Target More Vital Industries/
|
— |
|
|
|
2022-12-16 - Dark Web Profile- Killnet – Russian Hacktivist Group/
|
— |
|
|
|
2022-12-16 - Russia’s Wartime Cyber Operations in Ukraine - Military Impacts, Influences, and Implications/
|
— |
|
|
|
2022-12-16 - Russia’s Wartime Cyber Operations in Ukraine- Military Impacts, Influences, and Implications/
|
— |
|
|
|
2022-12-16 - SCL -1- The Dangerous Side Of Safe Senders/
|
— |
|
|
|
2022-12-16 - SiestaGraph - New implant uncovered in ASEAN member foreign ministry/
|
— |
|
|
|
2022-12-16 - SiestaGraph- New implant uncovered in ASEAN member foreign ministry/
|
— |
|
|
|
2022-12-16 - The DPRK delicate sound of cyber/
|
— |
|
|
|
2022-12-17 - [QuickNote] VidarStealer Analysis/
|
— |
|
|
|
2022-12-18 - CERT GOV - UA-5709/
|
— |
|
|
|
2022-12-18 - Infostealer Malware with Double Extension/
|
— |
|
|
|
2022-12-19 - [Z2A]Bimonthly malware challege – Emotet (Back From the Dead)/
|
— |
|
|
|
2022-12-19 - Malware Analysis- GuLoader Dissection Reveals New Anti-Analysis Techniques and Code Injection Redundancy/
|
— |
|
|
|
2022-12-19 - Ukraine's DELTA military system users targeted by info-stealing malware/
|
— |
|
|
|
2022-12-20 - Analysis of APT-C-60 Attack on South Korea/
|
— |
|
|
|
2022-12-20 - Lazarus APT’s Operation Interception Uses Signed Binary/
|
— |
|
|
|
2022-12-20 - Nokoyawa Ransomware- Rust or Bust/
|
— |
|
|
|
2022-12-20 - Raspberry Robin Malware Targets Telecom Governments/
|
— |
|
|
|
2022-12-20 - Raspberry Robin Malware Targets Telecom, Governments/
|
— |
|
|
|
2022-12-20 - Russian hackers targeted petroleum refining company in NATO state/
|
— |
|
|
|
2022-12-20 - Russias Trident Ursa aka Gamaredon APT Cyber Conflict Operations Unwavering Since Invasion of Ukraine/
|
— |
|
|
|
2022-12-20 - Russia’s Trident Ursa (aka Gamaredon APT) Cyber Conflict Operations Unwavering Since Invasion of Ukraine/
|
— |
|
|
|
2022-12-20 - Threat Spotlight - XLLing in Excel - threat actors using malicious add-ins/
|
— |
|
|
|
2022-12-21 - Conti Team One Splinter Group Resurfaces as Royal Ransomware with Callback Phishing Attacks/
|
— |
|
|
|
2022-12-21 - Godfather- A banking Trojan that is impossible to refuse/
|
— |
|
|
|
2022-12-21 - Inside the IcedID BackConnect Protocol/
|
— |
|
|
|
2022-12-21 - Malicious Macros Adapt to Use Microsoft Publisher to Push Ekipa RAT/
|
— |
|
|
|
2022-12-21 - Microsoft research uncovers new Zerobot capabilities/
|
— |
|
|
|
2022-12-22 - Custom-Branded Ransomware- The Vice Society Group and the Threat of Outsourced Development/
|
— |
|
|
|
2022-12-22 - FIN7 Unveiled - A deep dive into notorious cybercrime gang/
|
— |
|
|
|
2022-12-22 - New RisePro Stealer distributed by the prominent PrivateLoader/
|
— |
|
|
|
2022-12-22 - Nitol DDoS Malware Installing Amadey Bot/
|
— |
|
|
|
2022-12-22 - Qakbot Being Distributed via Virtual Disk Files (.vhd)/
|
— |
|
|
|
2022-12-22 - Ransomware and wiper signed with stolen certificates/
|
— |
|
|
|
2022-12-22 - Ransomware Roundup – Play Ransomware/
|
— |
|
|
|
2022-12-23 - IcedID Botnet Distributors Abuse Google PPC to Distribute Malware/
|
— |
|
|
|
2022-12-23 - New STEPPYKAVACH Attack Campaign Likely Targeting Indian Government Technical Insights and Detection/
|
— |
|
|
|
2022-12-23 - Protect yourself from Vishing Attack!!/
|
— |
|
|
|
2022-12-23 - RedDelta Targets European Government Organizations and Continues to Iterate Custom PlugX Variant/
|
— |
|
|
|
2022-12-24 - APT41 - The spy who failed to encrypt me/
|
— |
|
|
|
2022-12-24 - APT41 — The spy who failed to encrypt me/
|
— |
|
|
|
2022-12-24 - njRAT malware spreading through Discord CDN and Facebook Ads/
|
— |
|
|
|
2022-12-24 - No-limits relationship Chinas state hackers scoop up intelligence on Ukraine and Russia/
|
— |
|
|
|
2022-12-24 - SlowMist Investigation of North Korean APTs Large-Scale Phishing Attack on NFT Users/
|
— |
|
|
|
2022-12-25 - Detect Nokoyawa ransomware With YARA Rule/
|
— |
|
|
|
2022-12-27 - Analysis of recent attack activities of APT-C-36 (Blind Eagle)/
|
— |
|
|
|
2022-12-27 - BlueNoroff introduces new methods bypassing MoTW/
|
— |
|
|
|
2022-12-27 - Diving into a PlugX sample of Mustang Panda group/
|
— |
|
|
|
2022-12-27 - Navigating the Vast Ocean of Sandbox Evasions/
|
— |
|
|
|
2022-12-27 - Pure coder offers multiple malware for sale in Darkweb forums/
|
— |
|
|
|
2022-12-28 - Analysis of APT organization Confuciuss cyber attack against IBO anti-terrorism operations in Pakistan/
|
— |
|
|
|
2022-12-28 - Analysis of Cyber Attacks by APT Organization Confucius Against IBO Anti-Terrorism Operations in Pakistan/
|
— |
|
|
|
2022-12-28 - Hidden Fangs in South Asia—A Briefing on Recent Rattlesnake Attacks/
|
— |
|
|
|
2022-12-28 - HTML Smuggling Detection/
|
— |
|
|
|
2022-12-28 - PLAYing the game/
|
— |
|
|
|
2022-12-28 - The Underground Economist- Volume 2, Issue 24/
|
— |
|
|
|
2022-12-29 - Analysis of the ferry Trojan horse organized by CNC for the military industry and education industry/
|
— |
|
|
|
2022-12-29 - Mars Stealer Analysis/
|
— |
|
|
|
2022-12-29 - New CatB Ransomware Employs 2-Year Old DLL Hijacking Technique To Evade Detection/
|
— |
|
|
|
2022-12-29 - This app will self-destruct- How Belarusian hackers created an alternative Telegram for activists/
|
— |
|
|
|
2022-12-30 - A Quick Look at ELF Bifrose (Part 1)/
|
— |
|
|
|
2022-12-30 - Cyber Threat Report- RambleOn Android Malware - Detailed analysis report of cyber threat targeting journalist in South Korea through APT phishing campaign with malicious APK/
|
— |
|
|
|
2022-12-30 - Russian cyberattacks/
|
— |
|
|
|
2022-12-31 - Analyzing a VIDAR Infostealer Sample/
|
— |
|
|
|
2023-01-10 - Active Exploitation of Two Zero-Day Vulnerabilities in Ivanti Connect Secure VPN/
|
— |
|
|