2024-11-04 Securonix: CRON#TRAP: Emulated Linux Environments as the Latest Tactic in Malware Staging Attackers distribute a custom QEMU-em...

2024-10-30 EclecticIQ: Inside Intelligence Center: LUNAR SPIDER Enabling Ransomware Attacks on Financial Sector with Brute Ratel C4 and Latr...

  2024-10-23 TALOS Threat Spotlight: WarmCookie/BadSpace Summary: WarmCookie, also known as BadSpace, is a sophisticated malware family that...

2024-10-25 Cyble:  HeptaX: Unauthorized RDP Connections for Cyberespionage Operations Summary: The attack starts with a malicious LNK file d...

2024-10-03 Threatmon: Amnesia Stealer  Amnesia Stealer, a customizable open-source malware, was identified by ThreatMon on September 17, 202...

  2024-09-26 Elastic: Betting on Bots: Investigating Linux malware, crypto mining, and gambling API abuse Elastic Security Labs uncovered a ...

Image courtesy of Palo Alto    2024-09-23 Palo Alto Unit42: Inside SnipBot: The Latest RomCom Malware Variant   This latest version integrat...

  2024-09-19 Mandiant: UNC1860 and the Temple of Oats: Iran’s Hidden Hand in Middle Eastern Networks UNC1860 is an Iranian state-sponsored t...

  2024-09-19 Kaspersky: Exotic SambaSpy is now dancing with Italian users SambaSpy  is a highly obfuscated Java-based RAT, protected by the ...

  Trend Micro - Infection Chain 2024-09-08 TrendMicro Earth Baxia Uses Spear-Phishing and GeoServer Exploit to Target APAC Earth Baxia, a th...

  2024-09-18 Lumen: Derailing the Raptor Train Black Lotus Labs The Raptor Train botnet, discovered in 2023, is a large, multi-tiered networ...

  2024-09-12 Ahnlab: SuperShell malware targeting Linux SSH servers SuperShell is a sophisticated backdoor malware targeting Linux SSH serve...

2024-09-12 0day in {REA_TEAM}: The X-Worm malware is being spread through a phishing email by m4n0w4r More about X-Worm: Malpedia: X-Worm Ma...

2023-11-23 Palo Alto Unit42: Hacking Employers and Seeking Employment: Two Job-Related This is a 2023 article by Unit42 covering two cyber c...

  2024-09-10 Sakai @sakaijjang 김수키(Kimsuky) 에서 만든 악성코드-Terms and conditions(이용 약관).msc(2024.9.6)    - Kimsuky (North Korea) - Terms and Cond...

  2024-09-03 K7 Security Labs: Luxy: A Stealer and a Ransomware in one The sample is a .NET 32-bit executable, enforcing single-instance exe...

2024-09-05 Splunk: ShrinkLocker Malware: Abusing BitLocker to Lock Your Data ShrinkLocker is a newly discovered ransomware strain that explo...

  2024 -08 -30 Truesec : Dissecting the Cicada (Ransomware )  ESXi Ransomware Cicada3301, a ransomware group first detected in June 2024, ap...

2024-09-02 SocRadar: Dark Web Profile: Abyss Ransomware Abyss Ransomware, first identified in 2023, is a sophisticated ransomware strain ta...

2024-08-30 Microsoft: North Korean threat actor Citrine Sleet exploiting Chromium zero-day  2024-03-01 Lazarus group operations — A deep div...

2024 -08 -28 Akamai Beware the Unpatchable : Corona Mirai Botnet Spreads via Zero -Day (CVE -2024 -7029) - command injection vulnerability...

2024 -08 -29 Esentire: Exploring AsyncRAT and Infostealer Plugin Delivery Through Phishing Emails eSentire's Threat Response Unit (TRU...