Gorgon Group

Practical Queries for Malware Infrastructure - Part 3 (Advanced Examples)

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Practical Queries for Malware Infrastructure - Part 3 (Advanced Examples)

Remcos (Malware Family)

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Remcos (Malware Family)

NjRAT (Malware Family)

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor NjRAT (Malware Family)

Quasar RAT (Malware Family)

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Quasar RAT (Malware Family)

Decrypting NanoCore config and dump all plugins

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Decrypting NanoCore config and dump all plugins

Threat Intelligence Query Examples - Real World Queries for Identifying Malware Infrastructure

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Threat Intelligence Query Examples - Real World Queries for Identifying Malware Infrastructure

Remcos RAT Operations: How Attackers Gain and Maintain Control

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Remcos RAT Operations: How Attackers Gain and Maintain Control

njRAT runs MassLogger

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor njRAT runs MassLogger

SHADOW#REACTOR – Text-Only Staging, .NET Reactor, and In-Memory Remcos RAT Deployment

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor SHADOW#REACTOR – Text-Only Staging, .NET Reactor, and In-Memory Remcos RAT Deployment

Stealth in Layers: Unmasking the Loader used in Targeted Email Campaigns

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Stealth in Layers: Unmasking the Loader used in Targeted Email Campaigns

Acronis TRU Alliance {Hunt.io}: Hunting DPRK threats - New Global Lazarus & Kimsuky campaigns

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Acronis TRU Alliance {Hunt.io}: Hunting DPRK threats - New Global Lazarus & Kimsuky campaigns

INTRINSEC-2025-Threat-Report-Trouble_in_the_air.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor INTRINSEC-2025-Threat-Report-Trouble_in_the_air.pdf

State-Sponsored Remote Wipe Tactics Targeting Android Devices

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor State-Sponsored Remote Wipe Tactics Targeting Android Devices

Mysterious Elephant: a growing threat

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Mysterious Elephant: a growing threat

TAG-144’s Persistent Grip on South American Organizations

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TAG-144’s Persistent Grip on South American Organizations

Cyber%20Threat%20Intelligence%20Report%202025.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cyber%20Threat%20Intelligence%20Report%202025.pdf

Remcos RAT: Network Artifacts, C2 Command Analysis & SASE Mitigation | Aryaka Threat Research

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Remcos RAT: Network Artifacts, C2 Command Analysis & SASE Mitigation | Aryaka Threat Research

Around the World in 90 Days: State-Sponsored Actors Try ClickFix | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Around the World in 90 Days: State-Sponsored Actors Try ClickFix | Proofpoint US

Threat actors leverage tax season to deploy tax-themed phishing campaigns | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat actors leverage tax season to deploy tax-themed phishing campaigns | Microsoft Security Blog

TLP-CLEAR-From-espionage-to-PsyOps-Tracking-operations-and-infrastructure-of-UACs-in-2025-EN-1.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TLP-CLEAR-From-espionage-to-PsyOps-Tracking-operations-and-infrastructure-of-UACs-in-2025-EN-1.pdf

Gamaredon campaign abuses LNK files to distribute Remcos backdoor

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Gamaredon campaign abuses LNK files to distribute Remcos backdoor

Analyzing OBSCURE#BAT: Threat Actors Lure Victims into Executing Malicious Batch Scripts to Deploy Stealthy Rootkits

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Analyzing OBSCURE#BAT: Threat Actors Lure Victims into Executing Malicious Batch Scripts to Deploy Stealthy Rootkits

Blind Eagle Hacks Colombian Institutions Using NTLM Flaw, RATs and GitHub-Based Attacks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Blind Eagle Hacks Colombian Institutions Using NTLM Flaw, RATs and GitHub-Based Attacks

Blind Eagle: …And Justice for All - Check Point Research

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Blind Eagle: …And Justice for All - Check Point Research

비상계엄 테마 APT 공격과 Kimsuky 그룹 연관성 분석

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 비상계엄 테마 APT 공격과 Kimsuky 그룹 연관성 분석

Malware Analysis - NanoCore

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware Analysis - NanoCore

The GitVenom campaign: cryptocurrency theft using GitHub

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The GitVenom campaign: cryptocurrency theft using GitHub

Remcos RAT Targets Europe: New AMSI and ETW Evasion Tactics Uncovered

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Remcos RAT Targets Europe: New AMSI and ETW Evasion Tactics Uncovered

Defying tunneling: A Wicked approach to detecting malicious network traffic

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Defying tunneling: A Wicked approach to detecting malicious network traffic

Tracing the Path From SmartApeSG to NetSupport RAT

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Tracing the Path From SmartApeSG to NetSupport RAT

TAG-124’s Multi-Layered TDS Infrastructure and Extensive User Base

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TAG-124’s Multi-Layered TDS Infrastructure and Extensive User Base

Jul-Dec%202024%20Botnet%20Threat%20Update.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Jul-Dec%202024%20Botnet%20Threat%20Update.pdf

Analysis of Cyber Anarchy Squad attacks targeting Russian and Belarusian organizations

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Analysis of Cyber Anarchy Squad attacks targeting Russian and Belarusian organizations

Under the SADBRIDGE with GOSAR: QUASAR Gets a Golang Rewrite

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Under the SADBRIDGE with GOSAR: QUASAR Gets a Golang Rewrite

Malware Analysis - LokiBot

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware Analysis - LokiBot

New Campaign Uses Remcos RAT to Exploit Victims | FortiGuard Labs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor New Campaign Uses Remcos RAT to Exploit Victims | FortiGuard Labs

Hiding in Plain Sight: The Subtle Art of Loki Malware’s Obfuscation

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Hiding in Plain Sight: The Subtle Art of Loki Malware’s Obfuscation

BlindEagle Leveraging BlotchyQuasar | ThreatLabz

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlindEagle Leveraging BlotchyQuasar | ThreatLabz

AZORult Malware: Technical Analysis

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor AZORult Malware: Technical Analysis

Advanced Cyberchef Techniques - Defeating Nanocore Obfuscation With Math and Flow Control

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Advanced Cyberchef Techniques - Defeating Nanocore Obfuscation With Math and Flow Control

https://breachnova.com/blog.php?id=27

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor https://breachnova.com/blog.php?id=27

Blue Screen Mayhem: When CrowdStrike's Glitch Became Threat Actor's Playground

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Blue Screen Mayhem: When CrowdStrike's Glitch Became Threat Actor's Playground

Jan-Jun%202024%20Botnet%20Threat%20Update.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Jan-Jun%202024%20Botnet%20Threat%20Update.pdf

Malware Analysis - RemcosRAT

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware Analysis - RemcosRAT

Foxit PDF “Flawed Design” Exploitation - Check Point Research

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Foxit PDF “Flawed Design” Exploitation - Check Point Research

Dissecting REMCOS RAT: An in-depth analysis of a widespread 2024 malware, Part Four

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Dissecting REMCOS RAT: An in-depth analysis of a widespread 2024 malware, Part Four

Dissecting REMCOS RAT: An in-depth analysis of a widespread 2024 malware, Part Three

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Dissecting REMCOS RAT: An in-depth analysis of a widespread 2024 malware, Part Three

Dissecting REMCOS RAT: An in-depth analysis of a widespread 2024 malware, Part Two

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Dissecting REMCOS RAT: An in-depth analysis of a widespread 2024 malware, Part Two

Dissecting REMCOS RAT: An in-depth analysis of a widespread 2024 malware, Part One

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Dissecting REMCOS RAT: An in-depth analysis of a widespread 2024 malware, Part One

SteganoAmor campaign: TA558 mass-attacking companies and public institutions all around the world

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor SteganoAmor campaign: TA558 mass-attacking companies and public institutions all around the world

GitHub - jeFF0Falltrades/rat_king_parser: A robust, multiprocessing-capable, multi-family RAT config parser/config extractor for AsyncRAT, DcRAT, VenomRAT, QuasarRAT, XWorm, Xeno RAT, and cloned/derivative RAT families.

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor GitHub - jeFF0Falltrades/rat_king_parser: A robust, multiprocessing-capable, multi-family RAT config parser/config extractor for AsyncRAT, DcRAT, VenomRAT, QuasarRAT, XWorm, Xeno RAT, and cloned/derivative RAT families.

Unknown TTPs of Remcos RAT

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Unknown TTPs of Remcos RAT

Malware Analysis — njRAT

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware Analysis — njRAT

logpoint-etpr-a-comprehensive-overview-on-stealer-malware-families.pdf

file creation date fromORKL

The original link failed its last check. Original publisher Detailsfor logpoint-etpr-a-comprehensive-overview-on-stealer-malware-families.pdf

logpoint-etpr-a-comprehensive-overview-on-stealer-malware-families-1.pdf?hsLang=en

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor logpoint-etpr-a-comprehensive-overview-on-stealer-malware-families-1.pdf?hsLang=en

Spam trends campaigns senior superlatives 2023

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Spam trends campaigns senior superlatives 2023

Unveiling UAC-0184: The Steganography Saga of the IDAT Loader Delivering Remcos RAT to a Ukraine Entity in Finland

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Unveiling UAC-0184: The Steganography Saga of the IDAT Loader Delivering Remcos RAT to a Ukraine Entity in Finland

Malware Analysis — Remcos RAT

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware Analysis — Remcos RAT

Threat Intelligence of Abused Public Post-Exploitation Frameworks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat Intelligence of Abused Public Post-Exploitation Frameworks

Hunting AsyncRAT & QuasarRAT

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Hunting AsyncRAT & QuasarRAT

Sneaky Azorult Back In Action And Goes Undetected - Cyble

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Sneaky Azorult Back In Action And Goes Undetected - Cyble

Q4%202023%20Botnet%20Threat%20Update.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Q4%202023%20Botnet%20Threat%20Update.pdf

CERT-UA

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERT-UA

UAC-0050 Remcos RAT: Pipe Method Used for Evasion in Ukraine Attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor UAC-0050 Remcos RAT: Pipe Method Used for Evasion in Ukraine Attack

CERT-UA

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERT-UA

Unfolding Remcos RAT- 4.9.2 Pro

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Unfolding Remcos RAT- 4.9.2 Pro

Practical Queries for Malware Infrastructure - Part 3 (Advanced Examples)

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Practical Queries for Malware Infrastructure - Part 3 (Advanced Examples)

Unmasking NJRat: A Deep Dive into a Notorious Remote Access Trojan Part1

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Unmasking NJRat: A Deep Dive into a Notorious Remote Access Trojan Part1

Remcos RAT Detection: UAC-0050 Hackers Launch Phishing Attacks Impersonating the Security Service of Ukraine

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Remcos RAT Detection: UAC-0050 Hackers Launch Phishing Attacks Impersonating the Security Service of Ukraine

Remcos Downloader Analysis - Manual Deobfuscation of Visual Basic and Powershell

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Remcos Downloader Analysis - Manual Deobfuscation of Visual Basic and Powershell

Unfolding NJ RAT 0.7NC & 0.6.4

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Unfolding NJ RAT 0.7NC & 0.6.4

2023%20Q3%20Botnet%20Threat%20Update.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 2023%20Q3%20Botnet%20Threat%20Update.pdf

How To Write a Simple Configuration Extractor For .NET Malware - RevengeRAT

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor How To Write a Simple Configuration Extractor For .NET Malware - RevengeRAT

Secrets of commercial RATs! NanoCore dissected

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Secrets of commercial RATs! NanoCore dissected

Unveiling the Shadows: The Dark Alliance between GuLoader and Remcos - Check Point Research

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Unveiling the Shadows: The Dark Alliance between GuLoader and Remcos - Check Point Research

Uncovering DDGroup — A long-time threat actor

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Uncovering DDGroup — A long-time threat actor

LokiBot Campaign Targets Microsoft Office Document Using Vulnerabilities and Macros | FortiGuard Labs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor LokiBot Campaign Targets Microsoft Office Document Using Vulnerabilities and Macros | FortiGuard Labs

2023%20Q2%20Botnet%20Threat%20Update.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 2023%20Q2%20Botnet%20Threat%20Update.pdf

CloudEyE — From .lnk to Shellcode

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CloudEyE — From .lnk to Shellcode

Threat Intelligence Query Examples - Real World Queries for Identifying Malware Infrastructure

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat Intelligence Query Examples - Real World Queries for Identifying Malware Infrastructure

Remcos RAT - Malware Analysis Lab

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Remcos RAT - Malware Analysis Lab

How To Track Quasar Rat C2 Infrastructure Using TLS Certificates

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor How To Track Quasar Rat C2 Infrastructure Using TLS Certificates

Botconf2022-19-FaouCoteCyr.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Botconf2022-19-FaouCoteCyr.pdf

Threat actors strive to cause Tax Day headaches

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat actors strive to cause Tax Day headaches

2023%20Q1%20Botnet%20Threat%20Update.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 2023%20Q1%20Botnet%20Threat%20Update.pdf

March 2023’s Most Wanted Malware: New Emotet Campaign Bypasses Microsoft Blocks to Distribute Malicious OneNote Files

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor March 2023’s Most Wanted Malware: New Emotet Campaign Bypasses Microsoft Blocks to Distribute Malicious OneNote Files

Research As A Service | Loginsoft

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Research As A Service | Loginsoft

DBatLoader | ThreatLabz

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor DBatLoader | ThreatLabz

IPFS: A New Data Frontier or a New Cybercriminal Hideout?

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor IPFS: A New Data Frontier or a New Cybercriminal Hideout?

APT-C-36: from NjRAT to LimeRAT

Malpedia library date Lab52 fromORKLCCS '25 data

Archived copy on ORKL Detailsfor APT-C-36: from NjRAT to LimeRAT

Snip3 Crypter | ThreatLabz

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Snip3 Crypter | ThreatLabz

New Phishing Attack Detection Attributed to the UAC-0050 and UAC-0096 Groups Spreading Remcos Spyware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor New Phishing Attack Detection Attributed to the UAC-0050 and UAC-0096 Groups Spreading Remcos Spyware

CERT-UA

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERT-UA

CERT-UA

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERT-UA

Threat Actors Abuse AI-Generated Youtube Videos to Spread Stealer Malware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat Actors Abuse AI-Generated Youtube Videos to Spread Stealer Malware

Following the Scent of TrickGate: 6-Year-Old Packer Used to Deploy the Most Wanted Malware - Check Point Research

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Following the Scent of TrickGate: 6-Year-Old Packer Used to Deploy the Most Wanted Malware - Check Point Research

Earth Bogle: Campaigns Target the Middle East with Geopolitical Lures

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Earth Bogle: Campaigns Target the Middle East with Geopolitical Lures

Bluebottle: Campaign Hits Banks in French-speaking Countries in Africa

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Bluebottle: Campaign Hits Banks in French-speaking Countries in Africa

njRAT malware spreading through Discord CDN and Facebook Ads

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor njRAT malware spreading through Discord CDN and Facebook Ads

2022-11-21 Threat Intel Report - Malwarebytes Threat Intelligence Report

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor 2022-11-21 Threat Intel Report - Malwarebytes Threat Intelligence Report

2022%20Q3%20Botnet%20Threat%20Update.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 2022%20Q3%20Botnet%20Threat%20Update.pdf

Watch Out for the New NFT-001

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Watch Out for the New NFT-001

New Wave of Espionage Activity Targets Asian Governments

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor New Wave of Espionage Activity Targets Asian Governments

NanoCore RAT Hunting Guide

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor NanoCore RAT Hunting Guide

Remcos RAT New TTPS – Detection & Response - Security Investigation

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Remcos RAT New TTPS – Detection & Response - Security Investigation

AppLocker Rules as Defense Evasion: Complete Analysis | Splunk

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor AppLocker Rules as Defense Evasion: Complete Analysis | Splunk

FortiMail Workspace Security | Fortinet

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor FortiMail Workspace Security | Fortinet

TA558 Threat Actor Targets Hospitality & Travel | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TA558 Threat Actor Targets Hospitality & Travel | Proofpoint US

Mythic Leopard APT Group - Brandefense

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Mythic Leopard APT Group - Brandefense

An inside view of domain anonymization as-a-service — the BraZZZerSFF infrastructure

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor An inside view of domain anonymization as-a-service — the BraZZZerSFF infrastructure

Resource Center | ConnectWise

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Resource Center | ConnectWise

Initial Access Brokers Are Key to Rise in Ransomware Attacks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Initial Access Brokers Are Key to Rise in Ransomware Attacks

qualys-wp-stealthy-quasar-evolving-to-lead-the-rat-race-v220727.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor qualys-wp-stealthy-quasar-evolving-to-lead-the-rat-race-v220727.pdf

Evolving Info-Stealers: RedLine, Raccoon & New Threats

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Evolving Info-Stealers: RedLine, Raccoon & New Threats

How to expose a potential cybercriminal due to misconfigurations – CYBER GEEKS

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor How to expose a potential cybercriminal due to misconfigurations – CYBER GEEKS

Threat Actors Prey on Eager Travelers | FortiGuard Labs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat Actors Prey on Eager Travelers | FortiGuard Labs

Secure Communications Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Secure Communications Blog

Secure Communications Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Secure Communications Blog

HUI Loaderの分析 - JPCERT/CC Eyes

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor HUI Loaderの分析 - JPCERT/CC Eyes

New SYK Crypter Distributed Via Discord

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor New SYK Crypter Distributed Via Discord

Info-stealer Campaign targets German Car Dealerships and Manufacturers

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Info-stealer Campaign targets German Car Dealerships and Manufacturers

Secure Communications Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Secure Communications Blog

Analysis of MS Word to drop Remcos RAT

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Analysis of MS Word to drop Remcos RAT

yir-cyber-threats-report-download.pdf

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor yir-cyber-threats-report-download.pdf

Botconf2022-40-LunghiHorejsi.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Botconf2022-40-LunghiHorejsi.pdf

https://documents.trendmicro.com/assets/txt/earth-berberoka-windows-iocs-2.txt

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor https://documents.trendmicro.com/assets/txt/earth-berberoka-windows-iocs-2.txt

New APT Group Earth Berberoka Targets Gambling Websites With Old and New Malware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor New APT Group Earth Berberoka Targets Gambling Websites With Old and New Malware

How Cybercriminals Abuse Cloud Tunneling Services

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor How Cybercriminals Abuse Cloud Tunneling Services

Reversing a NSIS dropper using quick and dirty shellcode emulation

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Reversing a NSIS dropper using quick and dirty shellcode emulation

Blog |Top 10 Malware March 2022

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Blog |Top 10 Malware March 2022

Malware Campaigns Targeting African Banking Sector | HP Wolf Security

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware Campaigns Targeting African Banking Sector | HP Wolf Security

FortiMail Workspace Security | Fortinet

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor FortiMail Workspace Security | Fortinet

The Latest Remcos RAT Driven By Phishing Campaign | FortiGuard Labs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Latest Remcos RAT Driven By Phishing Campaign | FortiGuard Labs

New Wave of Remcos RAT Phishing Campaign

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor New Wave of Remcos RAT Phishing Campaign

Malware Analysis [#1]- NanoCore Rat

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware Analysis [#1]- NanoCore Rat

Cyber Attackers Leverage Russia-Ukraine Conflict in Multiple Spam Campaigns | Trustwave

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cyber Attackers Leverage Russia-Ukraine Conflict in Multiple Spam Campaigns | Trustwave

Another cyber espionage campaign in the Russia-Ukrainian ongoing cyber attacks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Another cyber espionage campaign in the Russia-Ukrainian ongoing cyber attacks

Microsoft Word - EC-2022-049_Campañas_de_distribución_Malware_Ecuador_V1.docx

Malpedia library date jfreire fromORKL

Archived copy on ORKL Detailsfor Microsoft Word - EC-2022-049_Campañas_de_distribución_Malware_Ecuador_V1.docx

Very very lazy Lazyscripter’s scripts: double compromise in a single obfuscation

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Very very lazy Lazyscripter’s scripts: double compromise in a single obfuscation

今さら聞けない！情報窃取型マルウェアの内部動作とJSOCの検知傾向 | LAC WATCH

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 今さら聞けない！情報窃取型マルウェアの内部動作とJSOCの検知傾向 | LAC WATCH

Distribution of Remcos RAT Disguised as Tax Invoice

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Distribution of Remcos RAT Disguised as Tax Invoice

Malware now using NVIDIA's stolen code signing certificates

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware now using NVIDIA's stolen code signing certificates

Russia-Ukraine war exploited as lure for malware distribution

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Russia-Ukraine war exploited as lure for malware distribution

Bitdefender Labs Sees Increased Malicious and Scam Activity Exploiting the War in Ukraine

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Bitdefender Labs Sees Increased Malicious and Scam Activity Exploiting the War in Ukraine

2021trends.pdf

Malpedia library date fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor 2021trends.pdf

세금계산서로 가장하여 유포되는 Remcos RAT 악성코드

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 세금계산서로 가장하여 유포되는 Remcos RAT 악성코드

APT-C-58 (Gorgon Group) attack warning

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor APT-C-58 (Gorgon Group) attack warning

China Implicated in Prolonged Supply Chain Attack Targeting Taiwan Financial Sector

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor China Implicated in Prolonged Supply Chain Attack Targeting Taiwan Financial Sector

Chinese hackers linked to months-long attack on Taiwanese financial sector

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Chinese hackers linked to months-long attack on Taiwanese financial sector

深度剖析針對臺灣金融業的 Operation Cache Panda 組織型供應鏈攻擊

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 深度剖析針對臺灣金融業的 Operation Cache Panda 組織型供應鏈攻擊

Remcos RAT Delivered Through Double Compressed Archive

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Remcos RAT Delivered Through Double Compressed Archive

Journey%20of%20a%20Crypto%20Scammer%20-%20NFT-001%20%7C%20Morphisec%20%7C%20Threat%20Report.pdf

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Journey%20of%20a%20Crypto%20Scammer%20-%20NFT-001%20%7C%20Morphisec%20%7C%20Threat%20Report.pdf

Threat Roundup for February 4 to February 11

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat Roundup for February 4 to February 11

Distribution of Kimsuky Group’s xRAT (Quasar RAT) Confirmed

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Distribution of Kimsuky Group’s xRAT (Quasar RAT) Confirmed

malware-analysis-writeups/Remcos/Remcos.md at main · itaymigdal/malware-analysis-writeups

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor malware-analysis-writeups/Remcos/Remcos.md at main · itaymigdal/malware-analysis-writeups

PrivateLoader: The first step in many malware schemes

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor PrivateLoader: The first step in many malware schemes

njRAT Installed from a MSI

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor njRAT Installed from a MSI

Remcos RAT

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Remcos RAT

2021 Gorgon Group APT Operation

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor 2021 Gorgon Group APT Operation

Nanocore, Netwire and AsyncRAT spreading campaign uses public cloud infrastructure

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Nanocore, Netwire and AsyncRAT spreading campaign uses public cloud infrastructure

2021 Gorgon Group APT Operation

Malpedia library date Guillaume Orlando fromORKLCCS '25 data

Archived copy on ORKL Detailsfor 2021 Gorgon Group APT Operation

Analysis of njRAT PowerPoint Macros

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Analysis of njRAT PowerPoint Macros

Detecting Malware Script Loaders using Remcos: Threat Research Release December 2021 | Splunk

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Detecting Malware Script Loaders using Remcos: Threat Research Release December 2021 | Splunk

Trojanized dnSpy app drops malware cocktail on researchers, devs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Trojanized dnSpy app drops malware cocktail on researchers, devs

Automating The Analysis Of An AutoIT Script That Wraps A Remcos RAT

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Automating The Analysis Of An AutoIT Script That Wraps A Remcos RAT

Tropic Trooper Targets Transportation and Government Organizations

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Tropic Trooper Targets Transportation and Government Organizations

Magnat campaigns use malvertising to deliver information stealer, backdoor and malicious Chrome extension

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Magnat campaigns use malvertising to deliver information stealer, backdoor and malicious Chrome extension

Just another analysis of the njRAT malware – A step-by-step approach – CYBER GEEKS

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Just another analysis of the njRAT malware – A step-by-step approach – CYBER GEEKS

Campaign Abusing Legitimate Remote Administrator Tools Uses Fake Cryptocurrency Websites

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Campaign Abusing Legitimate Remote Administrator Tools Uses Fake Cryptocurrency Websites

RATDispenser: Stealthy JavaScript Loader Dispensing RATs into the Wild | HP Wolf Security

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor RATDispenser: Stealthy JavaScript Loader Dispensing RATs into the Wild | HP Wolf Security

Babadeda Crypter Targeting Crypto, NFT, and DeFi Communities

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Babadeda Crypter Targeting Crypto, NFT, and DeFi Communities

Malicious Activity Report - Deep Analysis of a Recent Lokibot Attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malicious Activity Report - Deep Analysis of a Recent Lokibot Attack

HTML smuggling surges: Highly evasive loader technique increasingly used in banking malware, targeted attacks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor HTML smuggling surges: Highly evasive loader technique increasingly used in banking malware, targeted attacks

FIN7 Tools Resurface in the Field – Splinter or Copycat? | Splunk

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor FIN7 Tools Resurface in the Field – Splinter or Copycat? | Splunk

TA2722 Spoofs Philippines - Remcos & Nanocore Malware | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TA2722 Spoofs Philippines - Remcos & Nanocore Malware | Proofpoint US

Kaspersky-ICS-CERT-APT-attacks-on-industrial-organizations-in-H1-2021-En.pdf

Malpedia library date Kaspersky fromORKLCCS '25 data

Archived copy on ORKL Detailsfor Kaspersky-ICS-CERT-APT-attacks-on-industrial-organizations-in-H1-2021-En.pdf

Malicious campaign uses a barrage of commodity RATs to target Afghanistan and India

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malicious campaign uses a barrage of commodity RATs to target Afghanistan and India

To the moon and hack: Fake SafeMoon app drops malware to spy on you

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor To the moon and hack: Fake SafeMoon app drops malware to spy on you

HP Wolf Security Threat Insights Report Q3 2021

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor HP Wolf Security Threat Insights Report Q3 2021

Water Basilisk Uses New HCrypt Variant to Flood Victims with RAT Payloads

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Water Basilisk Uses New HCrypt Variant to Flood Victims with RAT Payloads

Operation Layover: How we tracked an attack on the aviation industry to five years of compromise

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Operation Layover: How we tracked an attack on the aviation industry to five years of compromise

https://www.trendmicro.com/content/dam/trendmicro/global/en/research/21/i/apt-c-36-updates-its-long-term-spam-campaign-against-south-american-entities-with-commodity-rats/BlindEagleIOCList.txt

Malpedia library date Trend Micro fromORKLCCS '25 data

Archived copy on ORKL Detailsfor https://www.trendmicro.com/content/dam/trendmicro/global/en/research/21/i/apt-c-36-updates-its-long-term-spam-campaign-against-south-american-entities-with-commodity-rats/BlindEagleIOCList.txt

APT-C-36 Updates Its Long-term Spam Campaign Against South American Entities With Commodity RATs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor APT-C-36 Updates Its Long-term Spam Campaign Against South American Entities With Commodity RATs

AV engines evasion for C++ simple malware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor AV engines evasion for C++ simple malware

The State of SSL/TLS Certificate Usage in Malware C&C Communications

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The State of SSL/TLS Certificate Usage in Malware C&C Communications

APT-C-56 (Transparent Tribe) Latest Attack Analysis and Associated Suspected Gorgon Group Attack Analysis Alert

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor APT-C-56 (Transparent Tribe) Latest Attack Analysis and Associated Suspected Gorgon Group Attack Analysis Alert

New Campaign Sees LokiBot Delivered Via Multiple Methods

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor New Campaign Sees LokiBot Delivered Via Multiple Methods

Malicious Campaign Targets Latin America: The seller, The operator and a curious link

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malicious Campaign Targets Latin America: The seller, The operator and a curious link

Infostealer Malware Azorult Being Distributed Through Spam Mails

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Infostealer Malware Azorult Being Distributed Through Spam Mails

Statically unpacking a simple .NET dropper

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Statically unpacking a simple .NET dropper

S/W 다운로드 위장, 다양한 종류의 악성코드 유포

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor S/W 다운로드 위장, 다양한 종류의 악성코드 유포

ISOMorph Infection: In-Depth Analysis of a New HTML Smuggling Campaign

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor ISOMorph Infection: In-Depth Analysis of a New HTML Smuggling Campaign

report-old-dogs-new-tricks.pdf

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor report-old-dogs-new-tricks.pdf

Remcos RAT delivered via Visual Basic

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Remcos RAT delivered via Visual Basic

Automation to Combat Evolving Obfuscation – Cipher Tech Solutions, Inc.

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Automation to Combat Evolving Obfuscation – Cipher Tech Solutions, Inc.

SQ_WhitepaperOperation SideCopy_072021

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor SQ_WhitepaperOperation SideCopy_072021

InSideCopy: How this APT continues to evolve its arsenal

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor InSideCopy: How this APT continues to evolve its arsenal

InSideCopy: How this APT continues to evolve its arsenal

Malpedia library date Talos fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor InSideCopy: How this APT continues to evolve its arsenal

The -WayBack” Campaign- a Large Scale Operation Hiding in Plain Sight

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor The -WayBack” Campaign- a Large Scale Operation Hiding in Plain Sight

AHK RAT Loader Used in Unique Delivery Campaigns

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor AHK RAT Loader Used in Unique Delivery Campaigns

Threat Actors Use MSBuild to Deliver RATs Filelessly

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat Actors Use MSBuild to Deliver RATs Filelessly

Revealing the Snip3 Crypter, a Highly Evasive RAT Loader

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Revealing the Snip3 Crypter, a Highly Evasive RAT Loader

Catching RATs Over Custom Protocols Analysis of top non-HTTP-S threats

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Catching RATs Over Custom Protocols Analysis of top non-HTTP-S threats

Analysis of top non-HTTP/S threats | Zscaler Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Analysis of top non-HTTP/S threats | Zscaler Blog

APT trends report Q1 2021

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor APT trends report Q1 2021

A year of Fajan evolution and Bloomberg themed campaigns

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor A year of Fajan evolution and Bloomberg themed campaigns

Taking Action Against Hackers in Palestine

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Taking Action Against Hackers in Palestine

HydroJiin Malware Campaign | ThreatLabZ | Zscaler Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor HydroJiin Malware Campaign | ThreatLabZ | Zscaler Blog

Dissecting the Design and Vulnerabilities in AZORult C&C Panels

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Dissecting the Design and Vulnerabilities in AZORult C&C Panels

Malspam with Lokibot vs. Outlook and RFCs - SANS ISC

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malspam with Lokibot vs. Outlook and RFCs - SANS ISC

MalSpam Campaigns Download njRAT from Paste Sites

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor MalSpam Campaigns Download njRAT from Paste Sites

report-bb-2021-threat-report.pdf

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor report-bb-2021-threat-report.pdf

Cybereason Exposes Campaign Targeting US Taxpayers with NetWire and Remcos Malware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cybereason Exposes Campaign Targeting US Taxpayers with NetWire and Remcos Malware

Tracking HCrypt: An Active Crypter as a Service

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Tracking HCrypt: An Active Crypter as a Service

RL Blog | ReversingLabs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor RL Blog | ReversingLabs

https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/image-file-trickery-part-ii-fake-icon-delivers-nanocore/

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/image-file-trickery-part-ii-fake-icon-delivers-nanocore/

Intezer-2020-Go-Malware-Round-Up.pdf

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Intezer-2020-Go-Malware-Round-Up.pdf

Report2021GTR.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Report2021GTR.pdf

https---www.ptsecurity.com-ww-en-analytics-antisandbox-techniques-

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor https---www.ptsecurity.com-ww-en-analytics-antisandbox-techniques-

Analytics

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Analytics

Operation SyncTrek

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Operation SyncTrek

Decrypting AzoRult traffic for fun and profit

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Decrypting AzoRult traffic for fun and profit

CinaRAT Resurfaces With New Evasive Techniques

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CinaRAT Resurfaces With New Evasive Techniques

W1 Feb| EN | Story of the week: Stealers on the Darkweb

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor W1 Feb| EN | Story of the week: Stealers on the Darkweb

Macintosh HD:Users:Shared:dd:4work:Bitdefender-PR-Whitepaper-Remcos-creat5080-en_EN:Bitdefender-PR-Whitepaper-Remcos-creat5080-en_EN.indd

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Macintosh HD:Users:Shared:dd:4work:Bitdefender-PR-Whitepaper-Remcos-creat5080-en_EN:Bitdefender-PR-Whitepaper-Remcos-creat5080-en_EN.indd

Operation Spalax: Targeted malware attacks in Colombia

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Operation Spalax: Targeted malware attacks in Colombia

A Deep Dive into Lokibot Infection Chain

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor A Deep Dive into Lokibot Infection Chain

来自Mustang Panda的攻击? 我兔又背锅了！

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 来自Mustang Panda的攻击? 我兔又背锅了！

Revenge RAT Targeting Users in South America

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Revenge RAT Targeting Users in South America

“灵猫”组织针对中东地区的攻击活动分析报告

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor “灵猫”组织针对中东地区的攻击活动分析报告

2020: The year in malware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 2020: The year in malware

Using Qiling Framework to Unpack TA505 packed samples

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Using Qiling Framework to Unpack TA505 packed samples

Cyber Actors Target K-12 Distance Learning Education to Cause Disruptions and Steal Data | CISA

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cyber Actors Target K-12 Distance Learning Education to Cause Disruptions and Steal Data | CISA

Attack Activities by Quasar Family - JPCERT/CC Eyes

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Attack Activities by Quasar Family - JPCERT/CC Eyes

No pandas, just people: The current state of China’s cybercrime underground

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor No pandas, just people: The current state of China’s cybercrime underground

njRAT Spreading Through Active Pastebin Command and Control Tunnel

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor njRAT Spreading Through Active Pastebin Command and Control Tunnel

New Malware Arsenal Abusing Cloud Platforms in Middle East Espionage Campaign

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor New Malware Arsenal Abusing Cloud Platforms in Middle East Espionage Campaign

Molerats-in-the-Cloud-New-Malware-Arsenal-Abuses-Cloud-Platforms-in-Middle-East-Espionage-Campaign.pdf

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Molerats-in-the-Cloud-New-Malware-Arsenal-Abuses-Cloud-Platforms-in-Middle-East-Espionage-Campaign.pdf

Commodity .NET Packers Uses Steganography Payloads | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Commodity .NET Packers Uses Steganography Payloads | Proofpoint US

WHO Spoofing Campaign: Infra Investigation

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor WHO Spoofing Campaign: Infra Investigation

npm Malware: Bladabindi Trojan in Typosquatting Packages

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor npm Malware: Bladabindi Trojan in Typosquatting Packages

Group-IB_Hi-Tech_Crime_Trends_2020-2021_en

file creation date fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Group-IB_Hi-Tech_Crime_Trends_2020-2021_en

APT Exploits Microsoft Zerologon Bug: Targets Japanese Companies

Malpedia library date Threatpost fromORKLCCS '25 data

Archived copy on ORKL Detailsfor APT Exploits Microsoft Zerologon Bug: Targets Japanese Companies

COVID19 pandemic is a field day for cybercriminals

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor COVID19 pandemic is a field day for cybercriminals

AZORult Delivered by GuLoader | Malware Analysis Spotlight | VMRay

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor AZORult Delivered by GuLoader | Malware Analysis Spotlight | VMRay

Japan-Linked Organizations Targeted in Long-Running and Sophisticated Attack Campaign

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Japan-Linked Organizations Targeted in Long-Running and Sophisticated Attack Campaign

Fake Microsoft Teams updates lead to Cobalt Strike deployment

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Fake Microsoft Teams updates lead to Cobalt Strike deployment

Evasive URLs in Spam: Part 2 | Trustwave

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Evasive URLs in Spam: Part 2 | Trustwave

Oil and Gas Industries in Middle East Targeted | blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Oil and Gas Industries in Middle East Targeted | blog

Cybercriminals Distribute Backdoor With VPN Installer

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cybercriminals Distribute Backdoor With VPN Installer

Latest U.S. Indictments Target Iranian Espionage Actors

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Latest U.S. Indictments Target Iranian Espionage Actors

200917-1.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 200917-1.pdf

Decrypting NanoCore config and dump all plugins

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Decrypting NanoCore config and dump all plugins

Cybersquatting: Attackers Mimicking Domains of Major Brands Including Facebook, Apple, Amazon and Netflix to Scam Consumers

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cybersquatting: Attackers Mimicking Domains of Major Brands Including Facebook, Apple, Amazon and Netflix to Scam Consumers

Epic Manchego – atypical maldoc delivery brings flurry of infostealers

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Epic Manchego – atypical maldoc delivery brings flurry of infostealers

Threat Actor Profile: TA2719 Uses Colorful Lures to Deliver RATs in Local Languages | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat Actor Profile: TA2719 Uses Colorful Lures to Deliver RATs in Local Languages | Proofpoint US

A twisted malware infection chain

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor A twisted malware infection chain

국내 유명 웹하드를 통해 유포되는 njRAT 악성코드

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 국내 유명 웹하드를 통해 유포되는 njRAT 악성코드

Gorgon APT targeting MSME sector in India

date in the CCS '25 data Quick Heal fromORKLCCS '25 data

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Gorgon APT targeting MSME sector in India

Gorgon APT targeting MSME sector in India

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Gorgon APT targeting MSME sector in India

Gorgon APT targeting MSME sector in India

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Gorgon APT targeting MSME sector in India

2020-q2-spamhaus-botnet-threat-report.pdf

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor 2020-q2-spamhaus-botnet-threat-report.pdf

ESET_Threat_Report_Q22020.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor ESET_Threat_Report_Q22020.pdf

analyses/RemcosDocDropper.MD at master · 1d8/analyses

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor analyses/RemcosDocDropper.MD at master · 1d8/analyses

njRAT Malware Analysis

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor njRAT Malware Analysis

VenomRAT - new, hackforums grade, reincarnation of QuasarRAT

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor VenomRAT - new, hackforums grade, reincarnation of QuasarRAT

Tor2Mine is up to their old tricks — and adds a few new ones

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Tor2Mine is up to their old tricks — and adds a few new ones

Affordable Malware RE Training | 0ffset Training Solutions

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Affordable Malware RE Training | 0ffset Training Solutions

New RAT in Macro-Based Docs Using AppLocker Bypass | blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor New RAT in Macro-Based Docs Using AppLocker Bypass | blog

Weaponized Disk Image Files: Analysis, Trends and Remediation

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Weaponized Disk Image Files: Analysis, Trends and Remediation

CTNT_Q1_2020_COVID-Report_Final.pdf

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor CTNT_Q1_2020_COVID-Report_Final.pdf

Latest Amadey Uses Screen Capture, Pushes Remcos RAT | Blog

Malpedia library date Zscaler fromORKLCCS '25 data

Archived copy on ORKL Detailsfor Latest Amadey Uses Screen Capture, Pushes Remcos RAT | Blog

The energy reserves in the Eastern Mediterranean Sea and a malicious campaign of APT10 against Turkey

Malpedia library date Lab52 fromORKLCCS '25 data

Archived copy on ORKL Detailsfor The energy reserves in the Eastern Mediterranean Sea and a malicious campaign of APT10 against Turkey

Vendetta-new-threat-actor-from-Europe

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Vendetta-new-threat-actor-from-Europe

Gazorp - Thieving from thieves

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Gazorp - Thieving from thieves

Loki Info Stealer Propagates through LZH Files

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Loki Info Stealer Propagates through LZH Files

Master of RATs - How to create your own Tracker

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Master of RATs - How to create your own Tracker

Multistage Loader used to spread AZORult and NanoCore | blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Multistage Loader used to spread AZORult and NanoCore | blog

Secure Communications Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Secure Communications Blog

Nanocore & CypherIT

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Nanocore & CypherIT

AZORult brings friends to the party

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor AZORult brings friends to the party

Navigating Cybersecurity During a Pandemic: Latest Malware and Threat Actors - Cisco Umbrella

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Navigating Cybersecurity During a Pandemic: Latest Malware and Threat Actors - Cisco Umbrella

LokiBot: Getting Equation Editor Shellcode

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor LokiBot: Getting Equation Editor Shellcode

TA505's Box of Chocolate - On Hidden Gems packed with the TA505 Packer

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor TA505's Box of Chocolate - On Hidden Gems packed with the TA505 Packer

Azorult loader stages

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Azorult loader stages

Azorult loader stages – Max Kersten

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Azorult loader stages – Max Kersten

Bitdefender Labs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Bitdefender Labs

Cyber Crime During the Covid Pandemic | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cyber Crime During the Covid Pandemic | Proofpoint US

using RTF object dimensions to track APT phishing weaponizers

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor using RTF object dimensions to track APT phishing weaponizers

Attribution is in the object- using RTF object dimensions to track APT phishing weaponizers

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Attribution is in the object- using RTF object dimensions to track APT phishing weaponizers

Cyber Threats 2019: A Year in Retrospect

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cyber Threats 2019: A Year in Retrospect

AZORult's End? Chrome Update Cripples Major Infostealer

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor AZORult's End? Chrome Update Cripples Major Infostealer

Exploring the Genesis Supply Chain for Fun and Profit

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Exploring the Genesis Supply Chain for Fun and Profit

dissecting the C&C panel deployments

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor dissecting the C&C panel deployments

Threat actors attempt to capitalize on coronavirus outbreak

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat actors attempt to capitalize on coronavirus outbreak

The Hole in the Bucket: Attackers Abuse Bitbucket to Deliver an Arsenal of Malware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Hole in the Bucket: Attackers Abuse Bitbucket to Deliver an Arsenal of Malware

Analysis of a triple-encrypted AZORult downloader - SANS ISC

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Analysis of a triple-encrypted AZORult downloader - SANS ISC

RL Blog | ReversingLabs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor RL Blog | ReversingLabs

bayworld-event-cyber-attack-against-foreign-trade-industry

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor bayworld-event-cyber-attack-against-foreign-trade-industry

JSAC2020_0_JPCERT_en.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor JSAC2020_0_JPCERT_en.pdf

Microsoft Word - Threat Intelligence and the Limits of Malware Analysis_smc1.docx

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Microsoft Word - Threat Intelligence and the Limits of Malware Analysis_smc1.docx

[CB19] Cyber Threat Landscape in Japan – Revealing Threat in the Shadow by Chi En Shen (Ashley) Oleg Bondarenko

Malpedia library date fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor [CB19] Cyber Threat Landscape in Japan – Revealing Threat in the Shadow by Chi En Shen (Ashley) Oleg Bondarenko

Group-IB_Hi-Tech_Crime_Trends_2019-2020_en

file creation date fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Group-IB_Hi-Tech_Crime_Trends_2019-2020_en

Group-IB_Hi-Tech_Crime_Trends_2019-2020

date in the CCS '25 data Group-IB fromORKLCCS '25 data

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Group-IB_Hi-Tech_Crime_Trends_2019-2020

RevengeHotels: cybercrime targeting hotel front desks worldwide

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor RevengeHotels: cybercrime targeting hotel front desks worldwide

Binary Defense

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Binary Defense

New Variant of Remcos RAT Observed In the Wild

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor New Variant of Remcos RAT Observed In the Wild

New WhiteShadow downloader uses Microsoft SQL to retrieve malware | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor New WhiteShadow downloader uses Microsoft SQL to retrieve malware | Proofpoint US

APT or not APT What's Behind the Aggah Campaign

date in the CCS '25 data Yoroi fromCCS '25 data

Detailsfor APT or not APT What's Behind the Aggah Campaign

Hagga of SectorH01 continues abusing Bitly, Blogger and Pastebin to deliver RevengeRAT and NanoCore – Red Alert

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Hagga of SectorH01 continues abusing Bitly, Blogger and Pastebin to deliver RevengeRAT and NanoCore – Red Alert

Malicious ratatouille ??????

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malicious ratatouille ??????

RAT Ratatouille: Backdooring PCs with leaked RATs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor RAT Ratatouille: Backdooring PCs with leaked RATs

Analysis: New Remcos RAT Arrives Via Phishing Email

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Analysis: New Remcos RAT Arrives Via Phishing Email

SELECT code_execution FROM * USING SQLite;

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor SELECT code_execution FROM * USING SQLite;

APT trends report Q2 2019

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor APT trends report Q2 2019

SWEED: Exposing years of Agent Tesla campaigns

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor SWEED: Exposing years of Agent Tesla campaigns

Recent AZORult activity - SANS Internet Storm Center

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Recent AZORult activity - SANS Internet Storm Center

RATs and stealers rush through “Heaven’s Gate” with new loader

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor RATs and stealers rush through “Heaven’s Gate” with new loader

Check Point’s Threat Emulation Stops Large-Scale Phishing Campaign in Germany

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Check Point’s Threat Emulation Stops Large-Scale Phishing Campaign in Germany

Blog | Arctic Wolf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Blog | Arctic Wolf

Uncovering New Activity By APT10 | FortiGuard Labs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Uncovering New Activity By APT10 | FortiGuard Labs

Explained: Smart Memory Dumping - VMRay

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Explained: Smart Memory Dumping - VMRay

Unpacking NanoCore Sample Using AutoIT

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Unpacking NanoCore Sample Using AutoIT

Aggah Campaign- Bit.ly, BlogSpot, and Pastebin Used for C2 in Large Scale Campaign

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Aggah Campaign- Bit.ly, BlogSpot, and Pastebin Used for C2 in Large Scale Campaign

Aggah Campaign_ Bit.ly, BlogSpot, and Pastebin Used for C2 in Large Scale Campaign

date in the CCS '25 data Palo Alto fromORKLCCS '25 data

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Aggah Campaign_ Bit.ly, BlogSpot, and Pastebin Used for C2 in Large Scale Campaign

Aggah Campaign: Bit.ly, BlogSpot, and Pastebin Used for C2 in Large Scale Campaign

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Aggah Campaign: Bit.ly, BlogSpot, and Pastebin Used for C2 in Large Scale Campaign

https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/spammed-png-file-hides-lokibot/

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/spammed-png-file-hides-lokibot/

mpressioncss_ta_report_2019.pdf

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor mpressioncss_ta_report_2019.pdf

Elfin: Relentless Espionage Group Targets Multiple Organizations in Saudi Arabia and U.S.

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Elfin: Relentless Espionage Group Targets Multiple Organizations in Saudi Arabia and U.S.

Elfin: Relentless Espionage Group Targets Multiple Organizations in Saudi Arabia and U.S.

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Elfin: Relentless Espionage Group Targets Multiple Organizations in Saudi Arabia and U.S.

AZORult++: Rewriting history

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor AZORult++: Rewriting history

Quasar Open-Source Remote Administration Tool | CISA

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Quasar Open-Source Remote Administration Tool | CISA

The Enigmatic “Roma225” Campaign

date in the CCS '25 data Yoroi fromORKLCCS '25 data

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor The Enigmatic “Roma225” Campaign

The Gorgon Group: Slithering Between Nation State and Cybercrime

file creation date fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor The Gorgon Group: Slithering Between Nation State and Cybercrime

Malspam pushing Lokibot malware - SANS Internet Storm Center

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malspam pushing Lokibot malware - SANS Internet Storm Center

The Emergence of the New Azorult 3.3

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Emergence of the New Azorult 3.3

Cyber-Espionage Campaign Targeting the Naval Industry (“MartyMcFly”)

date in the CCS '25 data Yoroi fromORKLCCS '25 data

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Cyber-Espionage Campaign Targeting the Naval Industry (“MartyMcFly”)

Loki Bot: On a hunt for corporate passwords

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Loki Bot: On a hunt for corporate passwords

Picking Apart Remcos Botnet-In-A-Box

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Picking Apart Remcos Botnet-In-A-Box

AZORult Trojan Serving Aurora Ransomware by MalActor Oktropys

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor AZORult Trojan Serving Aurora Ransomware by MalActor Oktropys

The Gorgon Group: Slithering Between Nation State and Cybercrime

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Gorgon Group: Slithering Between Nation State and Cybercrime

The Gorgon Group: Slithering Between Nation State and Cybercrime

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Gorgon Group: Slithering Between Nation State and Cybercrime

The Gorgon Group- Slithering Between Nation State and Cybercrime

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor The Gorgon Group- Slithering Between Nation State and Cybercrime

New version of AZORult stealer improves loading features, spreads alongside ransomware in new campaign | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor New version of AZORult stealer improves loading features, spreads alongside ransomware in new campaign | Proofpoint US

A deep dive down the Vermin RAThole

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor A deep dive down the Vermin RAThole

Patchwork APT Group Targets US Think Tanks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Patchwork APT Group Targets US Think Tanks

Nanocore RAT Author Gets 33 Months in Prison

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Nanocore RAT Author Gets 33 Months in Prison

VERMIN: Quasar RAT and Custom Malware Used In Ukraine

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor VERMIN: Quasar RAT and Custom Malware Used In Ukraine

Microsoft Defender Hotinformation | Microsoft Security

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Microsoft Defender Hotinformation | Microsoft Security

Malware-Traffic-Analysis.net - 2017-12-22 - Remcos RAT infection from RTF using CVE-2017-0199 exploit

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware-Traffic-Analysis.net - 2017-12-22 - Remcos RAT infection from RTF using CVE-2017-0199 exploit

Tracking Subaat Targeted Phishing Attack Leads to Threat Actors Repository

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Tracking Subaat Targeted Phishing Attack Leads to Threat Actors Repository

Tracking Subaat- Targeted Phishing Attack Leads to Threat Actor’s Repository

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Tracking Subaat- Targeted Phishing Attack Leads to Threat Actor’s Repository

Tracking Subaat: Targeted Phishing Attack Leads to Threat Actor's Repository

date in the CCS '25 data Palo Alto Networks fromORKLCCS '25 data

The link to Mirror on Box failed its last check. Mirror on Box Detailsfor Tracking Subaat: Targeted Phishing Attack Leads to Threat Actor's Repository

Tracking Subaat: Targeted Phishing Attack Leads to Threat Actor's Repository

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Tracking Subaat: Targeted Phishing Attack Leads to Threat Actor's Repository

APT33 Targets Aerospace & Energy Sectors | Spear Phishing

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor APT33 Targets Aerospace & Energy Sectors | Spear Phishing

A VBScript with Obfuscated Base64 Data - SANS ISC

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor A VBScript with Obfuscated Base64 Data - SANS ISC

Loki-Bot: Information Stealer, Keylogger, and More!

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Loki-Bot: Information Stealer, Keylogger, and More!

Malware-Traffic-Analysis.net - 2017-06-12 - Lokibot infection

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware-Traffic-Analysis.net - 2017-06-12 - Lokibot infection

New Loki Variant Being Spread via PDF File

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor New Loki Variant Being Spread via PDF File

Loki-Bot: Come out, come out, wherever you are!

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Loki-Bot: Come out, come out, wherever you are!

GitHub - R3MRUM/loki-parse: A python script that can detect and parse loki-bot (malware) related network traffic. This script can be helpful to DFIR analysts and security researchers who want to know what data is being exfiltrated to the C2, bot tracking, etc...

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor GitHub - R3MRUM/loki-parse: A python script that can detect and parse loki-bot (malware) related network traffic. This script can be helpful to DFIR analysts and security researchers who want to know what data is being exfiltrated to the C2, bot tracking, etc...

Nefarious Macro Malware drops “Loki Bot” to steal sensitive information across GCC countries!

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Nefarious Macro Malware drops “Loki Bot” to steal sensitive information across GCC countries!

REMCOS: A New RAT In The Wild

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REMCOS: A New RAT In The Wild

Downeks and Quasar RAT Used in Recent Targeted Attacks Against Governments

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Downeks and Quasar RAT Used in Recent Targeted Attacks Against Governments

Bladabindi Remains A Constant Threat By Using Dynamic DNS Services

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Bladabindi Remains A Constant Threat By Using Dynamic DNS Services

Vectra AI Cybersecurity Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Vectra AI Cybersecurity Blog

Threat Actors Using Legitimate PayPal Accounts To Distribute Chthonic Banking Trojan | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat Actors Using Legitimate PayPal Accounts To Distribute Chthonic Banking Trojan | Proofpoint US

AutoIt-Compiled Worm Sends Fileless BLADABINDI/njRAT

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor AutoIt-Compiled Worm Sends Fileless BLADABINDI/njRAT