Title |
Published |
Tags |
Description |
Number of indicators |
Threat Actors Target the Middle East Using Fake Palo Alto GlobalProtect Tool |
Aug. 30, 2024, 8:16 a.m. |
|
Cybercriminals are employing a sophisticated two-stage malware campaign masquerading as the Palo Alto GlobalProtect tool to infil… |
5 |
Sophisticated Malware Campaign Targets Czech Officials Using NATO-Themed Decoys |
Aug. 28, 2024, 9:27 a.m. |
|
Seqrite Labs APT-Team discovered a sophisticated malware campaign targeting government and military officials in the Czech Republ… |
13 |
Unveiling sedexp: A Stealthy Linux Malware Exploiting udev Rules |
Aug. 23, 2024, 9:39 a.m. |
|
Stroz Friedberg discovered sedexp, a stealthy Linux malware that utilizes udev rules to achieve persistence and evade detection. … |
3 |
Campaign uses infostealers and clippers for financial gain |
Aug. 16, 2024, 8:21 a.m. |
|
Kaspersky has uncovered a complex malware campaign orchestrated by Russian-speaking cybercriminals. The threat actors create sub-… |
68 |
Threat Actors’ Toolkit: Leveraging Sliver, PoshC2 & Batch Scripts |
Aug. 12, 2024, 11:45 a.m. |
|
An investigation by The DFIR report revealed a collection of batch scripts designed for defense evasion and executing command-and… |
32 |
RHADAMANTHYS: In-Depth Analysis of a Sophisticated Stealer Targeting Israeli Users |
Aug. 5, 2024, 8:39 a.m. |
|
This comprehensive technical analysis delves into the intricate workings of an advanced and localized malware campaign employing … |
5 |
Introducing Gh0stGambit: A Dropper for Deploying Gh0st RAT |
July 31, 2024, 10:43 a.m. |
|
This analysis examines a recent malware campaign involving a dropper dubbed Gh0stGambit, which is employed to retrieve and execut… |
6 |
Exploiting CVE-2024-21412: A Stealer Campaign Unleashed |
July 24, 2024, 8:02 a.m. |
|
This report details a malicious campaign exploiting the CVE-2024-21412 vulnerability in Microsoft Windows SmartScreen to bypass s… |
27 |
MoonWalk |
July 12, 2024, 4:11 p.m. |
|
This blog post examines MoonWalk, a new backdoor employed by APT41, a China-based threat actor known for campaigns in Southeast A… |
3 |
DodgeBox: A deep dive into the updated arsenal of APT41 |
July 11, 2024, 12:05 p.m. |
|
This blog post provides an in-depth technical analysis of a newly discovered malware loader called DodgeBox, which is attributed … |
1 |
Turla: A Master of Deception |
July 8, 2024, 10:45 a.m. |
|
This report details a recent campaign by the Turla threat group involving malicious LNK files that deliver a fileless backdoor. T… |
10 |
Dissecting GootLoader With Node.js |
July 4, 2024, 10:30 a.m. |
|
This article demonstrates how to circumvent anti-analysis techniques employed by GootLoader malware while utilizing Node.js debug… |
2 |
Attackers Exploiting Public Cobalt Strike Profiles |
June 26, 2024, 5:26 p.m. |
|
This report discusses recent findings of malicious Cobalt Strike infrastructure and malicious Cobalt Strike samples that leverage… |
6 |
Malware Targets Message Queuing Services Applications |
June 6, 2024, 6:44 p.m. |
|
The report describes a recent campaign targeting Apache RocketMQ platforms, where attackers exploited a known vulnerability (CVE-… |
21 |
Excel File Deploys Cobalt Strike at Ukraine |
June 4, 2024, 5:24 p.m. |
|
A sophisticated multi-stage cyberattack was identified, utilizing an Excel file embedded with a VBA macro designed to deploy a DL… |
10 |
Distribution of Malware Under the Guise of MS Office Cracked Versions (XMRig, OrcusRAT, etc.) |
May 30, 2024, 7:10 a.m. |
|
The report analyzes a campaign where threat actors distribute various malware strains like RATs, coinminers, and loaders disguise… |
11 |
Cyberespionage Group Earth Hundun's Continuous Refinement of Waterbear and Deuterbear |
May 21, 2024, 11:24 a.m. |
|
This comprehensive analysis delves into the continuous evolution and refinement of sophisticated malware entities employed by a p… |
29 |
Distribution of DanaBot Malware via Word Files Detected |
May 14, 2024, 8:16 a.m. |
|
This analysis examines the infection process of the DanaBot malware, distributed through sophisticated spam emails containing mal… |
0 |
Dissecting REMCOS RAT: An in-depth analysis of a widespread 2024 malware, Part Four |
May 9, 2024, 3:14 p.m. |
|
This comprehensive analysis provides a thorough examination of the REMCOS Remote Access Trojan (RAT), a prominent malware threat … |
34 |
HijackLoader Updates |
May 7, 2024, 8:36 a.m. |
|
HijackLoader, also known as IDAT Loader, is a modular malware loader capable of executing multiple payloads. It utilizes a variet… |
11 |
macOS Adload Pivots Just Days After Apple’s XProtect Clampdown |
May 1, 2024, 8 p.m. |
|
The report analyzes a new variant of the Adload adware that evades Apple's recent XProtect malware signature updates. Despite App… |
11 |