Indrik Spider

SocGholish Malware: A Real Threat from a Fake Update | Proofpoint US

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor SocGholish Malware: A Real Threat from a Fake Update | Proofpoint US

Mandiant: “No evidence” we were hacked by LockBit ransomware

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Mandiant: “No evidence” we were hacked by LockBit ransomware

Blog: Stay Ahead of Cyber Threats

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Blog: Stay Ahead of Cyber Threats

Tracking a P2P network related to TA505

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Tracking a P2P network related to TA505

Notorious Cybercriminals Evil Corp Actually Russian Spies? - Trulysuper

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Notorious Cybercriminals Evil Corp Actually Russian Spies? - Trulysuper

Dridex - Red Canary Threat Detection Report

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Dridex - Red Canary Threat Detection Report

Darktrace: Investigation found no evidence of LockBit breach

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Darktrace: Investigation found no evidence of LockBit breach

Meterpreter (Malware Family)

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Meterpreter (Malware Family)

Microsoft links Raspberry Robin malware to Evil Corp attacks

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Microsoft links Raspberry Robin malware to Evil Corp attacks

Babuk (Malware Family)

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Babuk (Malware Family)

Dridex (Malware Family)

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Dridex (Malware Family)

Dridex malware trolls employees with fake job termination emails

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Dridex malware trolls employees with fake job termination emails

Zeus (Malware Family)

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Zeus (Malware Family)

WastedLocker (Malware Family)

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor WastedLocker (Malware Family)

CDW data to be leaked next week after negotiations with LockBit break down

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor CDW data to be leaked next week after negotiations with LockBit break down

MimiKatz (Malware Family)

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor MimiKatz (Malware Family)

Ransomware gang threatens to wipe decryption key if negotiator hired

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Ransomware gang threatens to wipe decryption key if negotiator hired

Ransomware as a service: Understanding the cybercrime gig economy and how to protect yourself | Microsoft Security Blog

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Ransomware as a service: Understanding the cybercrime gig economy and how to protect yourself | Microsoft Security Blog

LockBit explained: How it has become the most popular ransomware

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor LockBit explained: How it has become the most popular ransomware

FiveHands (Malware Family)

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor FiveHands (Malware Family)

TA505, Graceful Spider, Gold Evergreen

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor TA505, Graceful Spider, Gold Evergreen

Dridex Malware | CISA

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Dridex Malware | CISA

Worldwide Web: An Analysis of Tactics and Techniques Attributed to Scattered Spider

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Worldwide Web: An Analysis of Tactics and Techniques Attributed to Scattered Spider

Cobalt Strike (Malware Family)

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Cobalt Strike (Malware Family)

LockBit ransomware gang now also claims City of Oakland breach

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor LockBit ransomware gang now also claims City of Oakland breach

artik.blue is for sale! Check it out on ExpiredDomains.com

date ORKL added it fromORKL

The original link failed its last check. Original publisher Detailsfor artik.blue is for sale! Check it out on ExpiredDomains.com

US govt offers $10 million bounty for info on Clop ransomware

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor US govt offers $10 million bounty for info on Clop ransomware

To HADES and Back: UNC2165 Shifts to LOCKBIT to Evade Sanctions | Mandiant

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor To HADES and Back: UNC2165 Shifts to LOCKBIT to Evade Sanctions | Mandiant

WastedLocker explained: How this targeted ransomware extorts millions from victims

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor WastedLocker explained: How this targeted ransomware extorts millions from victims

Moldova arrests suspect linked to DoppelPaymer ransomware attacks

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Moldova arrests suspect linked to DoppelPaymer ransomware attacks

Doppel Spider - Threat Group Cards: A Threat Actor Encyclopedia

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Doppel Spider - Threat Group Cards: A Threat Actor Encyclopedia

Karakurt extortion group: Threat profile

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Karakurt extortion group: Threat profile

Treasury Sanctions Members of the Russia-Based Cybercriminal Group Evil Corp in Tri-Lateral Action with the United Kingdom and Australia

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Treasury Sanctions Members of the Russia-Based Cybercriminal Group Evil Corp in Tri-Lateral Action with the United Kingdom and Australia

SocGholish | Red Canary Threat Detection Report

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor SocGholish | Red Canary Threat Detection Report

Russian RomCom Utilizing SocGholish to Deliver Mythic Agent to U.S. Companies Supporting Ukraine - Arctic Wolf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Russian RomCom Utilizing SocGholish to Deliver Mythic Agent to U.S. Companies Supporting Ukraine - Arctic Wolf

Unmasking SocGholish: Silent Push Untangles the Malware Web Behind the “Pioneer of Fake Updates” and Its Operator, TA569

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Unmasking SocGholish: Silent Push Untangles the Malware Web Behind the “Pioneer of Fake Updates” and Its Operator, TA569

TLP-CLEAR-31072025-ShadowSyndicate-infrastructure-illumination-EN.pdf

Malpedia library date Julien DUGAY fromORKL

Archived copy on ORKL Detailsfor TLP-CLEAR-31072025-ShadowSyndicate-infrastructure-illumination-EN.pdf

m-trends-2025-en.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor m-trends-2025-en.pdf

Tracking Adversaries: EvilCorp, the RansomHub affiliate

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Tracking Adversaries: EvilCorp, the RansomHub affiliate

Threat hunting case study: SocGholish

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat hunting case study: SocGholish

threat_horizons_report_h1_2025.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor threat_horizons_report_h1_2025.pdf

Untitled

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Untitled

Ransomware operators exploit ESXi hypervisor vulnerability for mass encryption | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware operators exploit ESXi hypervisor vulnerability for mass encryption | Microsoft Security Blog

Darktrace's Investigation of Raspberry Robin Worm

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Darktrace's Investigation of Raspberry Robin Worm

Unveiling custom packers: A comprehensive guide

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Unveiling custom packers: A comprehensive guide

Popping Blisters for research: An overview of past payloads and exploring recent developments

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Popping Blisters for research: An overview of past payloads and exploring recent developments

Final-CRWD-2023-Threat-Hunting-Report.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Final-CRWD-2023-Threat-Hunting-Report.pdf

Ransomware Diaries V. 3: LockBit's Secrets

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Diaries V. 3: LockBit's Secrets

Carbon Black’s TrueBot Detection

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Carbon Black’s TrueBot Detection

m_trends_2023_report.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor m_trends_2023_report.pdf

1%20-Microsoft%20Cobalt%20Strike%20-%20Complaint(907040021.9).pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 1%20-Microsoft%20Cobalt%20Strike%20-%20Complaint(907040021.9).pdf

PwC Cyber Threats 2022: A Year in Retrospect.pdf

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor PwC Cyber Threats 2022: A Year in Retrospect.pdf

Schlag gegen international agierendes Netzwerk von Cyber-Kriminellen

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Schlag gegen international agierendes Netzwerk von Cyber-Kriminellen

Schlag gegen international agierendes Netzwerk von Cyber-Kriminellen

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Schlag gegen international agierendes Netzwerk von Cyber-Kriminellen

RIG___TLP_CLEAR-1.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor RIG___TLP_CLEAR-1.pdf

TA569 Threat Actor Overview: SocGholish & Beyond | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TA569 Threat Actor Overview: SocGholish & Beyond | Proofpoint US

Ransomware Diaries: Volume 1 | Analyst1

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Diaries: Volume 1 | Analyst1

Breaking the silence - Recent Truebot activity

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Breaking the silence - Recent Truebot activity

Breaking the silence - Recent Truebot activity

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Breaking the silence - Recent Truebot activity

SocGholish Diversifies and Expands Its Malware Staging Infrastructure to Counter Defenders

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor SocGholish Diversifies and Expands Its Malware Staging Infrastructure to Counter Defenders

Banking Trojan Techniques: How Financially Motivated Malware Became Infrastructure

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Banking Trojan Techniques: How Financially Motivated Malware Became Infrastructure

Microsoft links Raspberry Robin worm to Clop ransomware attacks

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Microsoft links Raspberry Robin worm to Clop ransomware attacks

Raspberry Robin worm part of larger ecosystem facilitating pre-ransomware activity

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Raspberry Robin worm part of larger ecosystem facilitating pre-ransomware activity

Microsoft links Raspberry Robin worm to Clop ransomware attacks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Microsoft links Raspberry Robin worm to Clop ransomware attacks

Raspberry Robin worm part of larger ecosystem facilitating pre-ransomware activity | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Raspberry Robin worm part of larger ecosystem facilitating pre-ransomware activity | Microsoft Security Blog

Chapter 1 — From Gozi to ISFB- The history of a mythical malware family.

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Chapter 1 — From Gozi to ISFB- The history of a mythical malware family.

Chapter 1 — From Gozi to ISFB: The history of a mythical malware family.

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Chapter 1 — From Gozi to ISFB: The history of a mythical malware family.

2022%20Q3%20Botnet%20Threat%20Update.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 2022%20Q3%20Botnet%20Threat%20Update.pdf

Raspberry Robin’s Roshtyak- A Little Lesson in Trickery

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Raspberry Robin’s Roshtyak- A Little Lesson in Trickery

Raspberry Robin’s Roshtyak: A Little Lesson in Trickery

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Raspberry Robin’s Roshtyak: A Little Lesson in Trickery

Raspberry Robin and Dridex- Two Birds of a Feather

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Raspberry Robin and Dridex- Two Birds of a Feather

Hacker Infrastructure Used in Cisco Breach Discovered Attacking a Top Workforce Management Corporation

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Hacker Infrastructure Used in Cisco Breach Discovered Attacking a Top Workforce Management Corporation

202208291500_Evil Corp Threat Profile_TLPWHITE

file creation date fromORKL

Archived copy on ORKL Detailsfor 202208291500_Evil Corp Threat Profile_TLPWHITE

SocGholish Malware: Script Injections, Domain Shadowing, IPs & Obfuscation Techniques

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor SocGholish Malware: Script Injections, Domain Shadowing, IPs & Obfuscation Techniques

Space Invaders- Cyber Threats That Are Out Of This World

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Space Invaders- Cyber Threats That Are Out Of This World

Space Invaders: Cyber Threats That Are Out Of This World

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Space Invaders: Cyber Threats That Are Out Of This World

Microsoft Links Raspberry Robin USB Worm to Russian Evil Corp Hackers

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Microsoft Links Raspberry Robin USB Worm to Russian Evil Corp Hackers

Microsoft Links Raspberry Robin USB Worm to Russian Evil Corp Hackers

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Microsoft Links Raspberry Robin USB Worm to Russian Evil Corp Hackers

Malware analysis with IDA/Radare2 - Basic Unpacking (Dridex first stage)

Malpedia library date fromORKL

The title opens Wayback Machine, not the publisher’s page. Archived copy on ORKL Detailsfor Malware analysis with IDA/Radare2 - Basic Unpacking (Dridex first stage)

Ransomware as a Service- Behind the Scenes

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Ransomware as a Service- Behind the Scenes

To HADES and Back- UNC2165 Shifts to LOCKBIT to Evade Sanctions

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor To HADES and Back- UNC2165 Shifts to LOCKBIT to Evade Sanctions

To HADES and Back: UNC2165 Shifts to LOCKBIT to Evade Sanctions | Mandiant

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor To HADES and Back: UNC2165 Shifts to LOCKBIT to Evade Sanctions | Mandiant

SocGholish Campaigns and Initial Access Kit

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor SocGholish Campaigns and Initial Access Kit

SocGholish Campaigns and Initial Access Kit

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor SocGholish Campaigns and Initial Access Kit

4 Types of Dropper Malware in Microsoft Office & How to Detect Them | Deep Instinct

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 4 Types of Dropper Malware in Microsoft Office & How to Detect Them | Deep Instinct

Weaponization of Excel Add-Ins Part 2: Dridex Infection Chain Case Studies

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Weaponization of Excel Add-Ins Part 2: Dridex Infection Chain Case Studies

Ransomware as a service: Understanding the cybercrime gig economy and how to protect yourself | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware as a service: Understanding the cybercrime gig economy and how to protect yourself | Microsoft Security Blog

Ransomware-as-a-service- Understanding the cybercrime gig economy and how to protect yourself

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Ransomware-as-a-service- Understanding the cybercrime gig economy and how to protect yourself

yir-cyber-threats-report-download.pdf

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor yir-cyber-threats-report-download.pdf

20220427_NP_TLPWHITE_ANSSI_FIN7.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 20220427_NP_TLPWHITE_ANSSI_FIN7.pdf

2022_ThreatDetectionReport_RedCanary.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 2022_ThreatDetectionReport_RedCanary.pdf

The Ransomware Threat Landscape: What to Expect in 2022

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor The Ransomware Threat Landscape: What to Expect in 2022

Cutting corners against a Dridex downloader

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cutting corners against a Dridex downloader

2021trends.pdf

Malpedia library date fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor 2021trends.pdf

Dridex bots deliver Entropy ransomware in recent attacks

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Dridex bots deliver Entropy ransomware in recent attacks

Sanctions Be Damned - From Dridex to Macaw, The Evolution of Evil Corp

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Sanctions Be Damned - From Dridex to Macaw, The Evolution of Evil Corp

Sanctions Be Damned | From Dridex to Macaw, The Evolution of Evil Corp

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Sanctions Be Damned | From Dridex to Macaw, The Evolution of Evil Corp

Ransomware Becomes Deadlier, Conti Makes the Most Money

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Ransomware Becomes Deadlier, Conti Makes the Most Money

eset_threat_report_t32021.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor eset_threat_report_t32021.pdf

PrivateLoader: The first step in many malware schemes

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor PrivateLoader: The first step in many malware schemes

eset_threat_report_t32021

file creation date fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor eset_threat_report_t32021

S1_-SentinelLabs_SanctionsBeDamned_final_02.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor S1_-SentinelLabs_SanctionsBeDamned_final_02.pdf

WastedLocker malware analysis

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor WastedLocker malware analysis

2021 Adversary Infrastructure Report

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 2021 Adversary Infrastructure Report

Malware Headliners- Dridex

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Malware Headliners- Dridex

Log4j Vulnerabilities: Attack Insights

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Log4j Vulnerabilities: Attack Insights

Log4j vulnerability now used to install Dridex banking malware

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Log4j vulnerability now used to install Dridex banking malware

Log4j vulnerability now used to install Dridex banking malware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Log4j vulnerability now used to install Dridex banking malware

Advanced Network Detection & Response - MetaDefender NDR - OPSWAT

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Advanced Network Detection & Response - MetaDefender NDR - OPSWAT

Tracking a P2P network related to TA505

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Tracking a P2P network related to TA505

Dridex Trojan

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Dridex Trojan

Evil Corp- 'My hunt for the world's most wanted hackers'

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Evil Corp- 'My hunt for the world's most wanted hackers'

Evil Corp: 'My hunt for the world's most wanted hackers'

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Evil Corp: 'My hunt for the world's most wanted hackers'

The Business of Fraud: Botnet Malware Dissemination

Malpedia library date Insikt Group® fromORKL

Archived copy on ORKL Detailsfor The Business of Fraud: Botnet Malware Dissemination

Diving into double extortion campaigns

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Diving into double extortion campaigns

Raspberry Robin’s Roshtyak: A Little Lesson in Trickery

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Raspberry Robin’s Roshtyak: A Little Lesson in Trickery

Advanced IP Scanner: the preferred scanner in the A(P)T toolbox

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Advanced IP Scanner: the preferred scanner in the A(P)T toolbox

Evil Corp demands $40 million in new Macaw ransomware attacks

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Evil Corp demands $40 million in new Macaw ransomware attacks

Evil Corp demands $40 million in new Macaw ransomware attacks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Evil Corp demands $40 million in new Macaw ransomware attacks

Phishing Eager Travelers

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Phishing Eager Travelers

Big Game Hunting TTPs Continue to Shift After DarkSide Pipeline Attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Big Game Hunting TTPs Continue to Shift After DarkSide Pipeline Attack

Big Game Hunting TTPs Continue to Shift After DarkSide Pipeline Attack

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Big Game Hunting TTPs Continue to Shift After DarkSide Pipeline Attack

Dark Covenant: Connections Between the Russian State and Criminal Actors

Malpedia library date Insikt Group® fromORKL

Archived copy on ORKL Detailsfor Dark Covenant: Connections Between the Russian State and Criminal Actors

The State of SSL/TLS Certificate Usage in Malware C&C Communications

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The State of SSL/TLS Certificate Usage in Malware C&C Communications

Secure Communications Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Secure Communications Blog

The Ransomware Threat (White Paper)

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Ransomware Threat (White Paper)

Nationstate_ransomware_with_consecutive_endnotes.pdf

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Nationstate_ransomware_with_consecutive_endnotes.pdf

Ransomware Gangs and the Name Game Distraction

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Gangs and the Name Game Distraction

Ransomware Gangs and the Name Game Distraction

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Ransomware Gangs and the Name Game Distraction

Detecting TA551 domains

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Detecting TA551 domains

Ransomware gang breached CNA’s network via fake browser update

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Ransomware gang breached CNA’s network via fake browser update

Inside the FBI, Russia, and Ukraine’s failed cybercrime investigation

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Inside the FBI, Russia, and Ukraine’s failed cybercrime investigation

Dridex Document to Cobalt Strike – Malware Book Reports

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Dridex Document to Cobalt Strike – Malware Book Reports

What We Think | Business & Technology Insights

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor What We Think | Business & Technology Insights

HADES ransomware operators continue attacks

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor HADES ransomware operators continue attacks

How Initial Access Brokers Lead to Ransomware | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor How Initial Access Brokers Lead to Ransomware | Proofpoint US

The First Step- Initial Access Leads to Ransomware

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor The First Step- Initial Access Leads to Ransomware

Hades Ransomware Operators Use Distinctive Tactics and Infrastructure

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Hades Ransomware Operators Use Distinctive Tactics and Infrastructure

The blurry boundaries between nation-state actors and the cybercrime underground

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor The blurry boundaries between nation-state actors and the cybercrime underground

Intel 471

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Intel 471

New Evil Corp ransomware mimics PayloadBin gang to evade US sanctions

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor New Evil Corp ransomware mimics PayloadBin gang to evade US sanctions

New Evil Corp ransomware mimics PayloadBin gang to evade US sanctions

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor New Evil Corp ransomware mimics PayloadBin gang to evade US sanctions

A Deep Dive into Packing Software CryptOne

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor A Deep Dive into Packing Software CryptOne

Are The Notorious Cyber Criminals Evil Corp actually Russian Spies-

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Are The Notorious Cyber Criminals Evil Corp actually Russian Spies-

Notorious Cybercriminals Evil Corp Actually Russian Spies? - Trulysuper

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Notorious Cybercriminals Evil Corp Actually Russian Spies? - Trulysuper

APT35 ‘Charming Kitten' discovered in a pre-infected environment _ Blog _ Darktrace

date in the CCS '25 data Darktrace fromORKLCCS '25 data

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor APT35 ‘Charming Kitten' discovered in a pre-infected environment _ Blog _ Darktrace

APT35 ‘Charming Kitten' discovered in a pre-infected environment

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor APT35 ‘Charming Kitten' discovered in a pre-infected environment

How the Kremlin provides a safe harbor for ransomware

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor How the Kremlin provides a safe harbor for ransomware

Security Brief: Threat Actors Pair Tax-Themed Lures With COVID-19, Healthcare Themes | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Security Brief: Threat Actors Pair Tax-Themed Lures With COVID-19, Healthcare Themes | Proofpoint US

PaaS, or how hackers evade antivirus software

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor PaaS, or how hackers evade antivirus software

Dridex Loader Analysis

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Dridex Loader Analysis

2021-Threat-Detection-Report.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 2021-Threat-Detection-Report.pdf

Dridex Reloaded: Analysis of a New Dridex Campaign

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Dridex Reloaded: Analysis of a New Dridex Campaign

What We Think | Business & Technology Insights

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor What We Think | Business & Technology Insights

Evil Corp switches to Hades ransomware to evade sanctions

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Evil Corp switches to Hades ransomware to evade sanctions

Insurance giant CNA hit by new Phoenix CryptoLocker ransomware

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Insurance giant CNA hit by new Phoenix CryptoLocker ransomware

Insurance giant CNA hit by new Phoenix CryptoLocker ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Insurance giant CNA hit by new Phoenix CryptoLocker ransomware

Evil Corp switches to Hades ransomware to evade sanctions

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Evil Corp switches to Hades ransomware to evade sanctions

SilverFish_TLPWHITE

date in the CCS '25 data FireEye fromORKLCCS '25 data

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor SilverFish_TLPWHITE

SilverFish_TLPWHITE.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor SilverFish_TLPWHITE.pdf

INDRIK SPIDER: WastedLocker Superseded by Hades Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor INDRIK SPIDER: WastedLocker Superseded by Hades Ransomware

HP_Bromium_Threat_Insights_Report_Q4_2020_V5.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor HP_Bromium_Threat_Insights_Report_Q4_2020_V5.pdf

unit42-ransomware-threat-report-2021.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor unit42-ransomware-threat-report-2021.pdf

INDRIK SPIDER Supersedes WastedLocker with Hades Ransomware to Circumvent OFAC Sanctions

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor INDRIK SPIDER Supersedes WastedLocker with Hades Ransomware to Circumvent OFAC Sanctions

Cyber Threats 2020: A Year in Retrospect

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cyber Threats 2020: A Year in Retrospect

CERTFR-2021-CTI-006.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERTFR-2021-CTI-006.pdf

Report2021GTR.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Report2021GTR.pdf

Q4 2020 Threat Report- A Quarterly Analysis of Cybersecurity Trends, Tactics and Themes

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Q4 2020 Threat Report- A Quarterly Analysis of Cybersecurity Trends, Tactics and Themes

Q4 2020 Threat Report | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Q4 2020 Threat Report | Proofpoint US

Operation SyncTrek

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Operation SyncTrek

CERTFR-2021-CTI-003.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERTFR-2021-CTI-003.pdf

Dridex Malware Analysis

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Dridex Malware Analysis

Dridex Malware Analysis [1 Feb 2021]

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Dridex Malware Analysis [1 Feb 2021]

What tracking an attacker email infrastructure tells us about persistent cybercriminal operations | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor What tracking an attacker email infrastructure tells us about persistent cybercriminal operations | Microsoft Security Blog

Dridex Malicious Document Analysis: Automating the Extraction of Payload URLs | HP Wolf Security

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Dridex Malicious Document Analysis: Automating the Extraction of Payload URLs | HP Wolf Security

research.checkpoint.com-Stopping Serial Killer Catching the Next Strike

file creation date fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor research.checkpoint.com-Stopping Serial Killer Catching the Next Strike

Stopping Serial Killer: Catching the Next Strike - Check Point Research

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Stopping Serial Killer: Catching the Next Strike - Check Point Research

DRIDEX Stopping Serial Killer- Catching the Next Strike

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor DRIDEX Stopping Serial Killer- Catching the Next Strike

Cyber Actors Target K-12 Distance Learning Education to Cause Disruptions and Steal Data | CISA

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cyber Actors Target K-12 Distance Learning Education to Cause Disruptions and Steal Data | CISA

The malware that usually installs ransomware and you need to remove right away

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The malware that usually installs ransomware and you need to remove right away

CERTFR-2020-CTI-010.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERTFR-2020-CTI-010.pdf

Officials Announce International Operation Targeting Transnational Criminal Organization QQAAZZ that Provided Money Laundering Services to High-Level Cybercriminals

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Officials Announce International Operation Targeting Transnational Criminal Organization QQAAZZ that Provided Money Laundering Services to High-Level Cybercriminals

Wikipedia Page- Maksim Yakubets

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Wikipedia Page- Maksim Yakubets

Maksim Yakubets

Malpedia library date fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Maksim Yakubets

What's behind the increase in ransomware attacks this year?

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor What's behind the increase in ransomware attacks this year?

What's behind the increase in ransomware attacks this year-

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor What's behind the increase in ransomware attacks this year-

Double Trouble- Ransomware with Data Leak Extortion, Part 1

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Double Trouble- Ransomware with Data Leak Extortion, Part 1

Double Trouble- Ransomware with Data Leak Extortion, Part 1

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Double Trouble- Ransomware with Data Leak Extortion, Part 1

Ransomware + Data Leak Extortion: Origins and Adversaries, Pt. 1

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware + Data Leak Extortion: Origins and Adversaries, Pt. 1

Reverse Engineering Dridex and Automating IOC Extraction

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Reverse Engineering Dridex and Automating IOC Extraction

Recent Dridex activity - SANS Internet Storm Center

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Recent Dridex activity - SANS Internet Storm Center

tweets/2020-09-07-Dridex-IOCs.txt at master · pan-unit42/tweets

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor tweets/2020-09-07-Dridex-IOCs.txt at master · pan-unit42/tweets

MVISION Insights- Wastedlocker Ransomware

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor MVISION Insights- Wastedlocker Ransomware

CERTFR-2020-CTI-009

file creation date fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor CERTFR-2020-CTI-009

Wireshark Tutorial: Decrypting HTTPS Traffic

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Wireshark Tutorial: Decrypting HTTPS Traffic

CERTFR-2020-CTI-009.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERTFR-2020-CTI-009.pdf

Banking Trojans: A Reference Guide to the Malware Family Tree

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Banking Trojans: A Reference Guide to the Malware Family Tree

Dridex – From Word to Domain Dominance

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Dridex – From Word to Domain Dominance

Dridex - From Word to Domain Dominance

publisher's date The DFIR Report fromDFIR Report

Detailsfor Dridex - From Word to Domain Dominance

Threat Assessment: WastedLocker Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat Assessment: WastedLocker Ransomware

Threat Assessment- WastedLocker Ransomware

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Threat Assessment- WastedLocker Ransomware

Garmin outage caused by confirmed WastedLocker ransomware attack

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Garmin outage caused by confirmed WastedLocker ransomware attack

Garmin outage caused by confirmed WastedLocker ransomware attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Garmin outage caused by confirmed WastedLocker ransomware attack

CERTFR-2020-CTI-008

Malpedia library date CrowdStrike fromORKLCCS '25 data

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor CERTFR-2020-CTI-008

Threat spotlight: WastedLocker, customized ransomware | Malwarebytes Labs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat spotlight: WastedLocker, customized ransomware | Malwarebytes Labs

Threat spotlight- WastedLocker, customized ransomware

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Threat spotlight- WastedLocker, customized ransomware

WastedLocker: Symantec Identifies Wave of Attacks Against U.S. Organizations

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor WastedLocker: Symantec Identifies Wave of Attacks Against U.S. Organizations

WastedLocker_ Symantec Identifies Wave of Attacks Against U.S. Organizations _ Symantec Blogs

date in the CCS '25 data Symantec fromORKLCCS '25 data

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor WastedLocker_ Symantec Identifies Wave of Attacks Against U.S. Organizations _ Symantec Blogs

WastedLocker- Symantec Identifies Wave of Attacks Against U.S. Organizations

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor WastedLocker- Symantec Identifies Wave of Attacks Against U.S. Organizations

Russian hacker group Evil Corp targets US workers at home

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Russian hacker group Evil Corp targets US workers at home

Obfuscated VBScript Drops Zloader, Ursnif, Qakbot, Dridex

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Obfuscated VBScript Drops Zloader, Ursnif, Qakbot, Dridex

WastedLocker- A New Ransomware Variant Developed By The Evil Corp Group

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor WastedLocker- A New Ransomware Variant Developed By The Evil Corp Group

WastedLocker_ A New Ransomware Variant Developed By The Evil Corp Group – NCC Group Research

date in the CCS '25 data NCC Group fromORKLCCS '25 data

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor WastedLocker_ A New Ransomware Variant Developed By The Evil Corp Group – NCC Group Research

Cyber Security Research

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cyber Security Research

CERTFR-2020-CTI-006.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERTFR-2020-CTI-006.pdf

File Security blog posts | Menlo Security

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor File Security blog posts | Menlo Security

WastedLoader or DridexLoader?

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor WastedLoader or DridexLoader?

CERTFR-2020-CTI-005.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERTFR-2020-CTI-005.pdf

Fantastic payloads and where we find them

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Fantastic payloads and where we find them

Human-operated ransomware attacks: A preventable disaster | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Human-operated ransomware attacks: A preventable disaster | Microsoft Security Blog

Report2020CrowdStrikeGlobalThreatReport

Malpedia library date fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Report2020CrowdStrikeGlobalThreatReport

Cyber Threats 2019: A Year in Retrospect

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cyber Threats 2019: A Year in Retrospect

DoppelPaymer Ransomware Launches Site to Post Victim's Data

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor DoppelPaymer Ransomware Launches Site to Post Victim's Data

leveraging this mysterious artifact of the PE format

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor leveraging this mysterious artifact of the PE format

CERTFR-2020-CTI-001.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERTFR-2020-CTI-001.pdf

JSAC2020_1_tamada-yamazaki-nakatsuru_en.pdf

Malpedia library date SecureWorks fromORKLCCS '25 data

Archived copy on ORKL Detailsfor JSAC2020_1_tamada-yamazaki-nakatsuru_en.pdf

Inside ‘Evil Corp,’ a $100M Cybercrime Menace

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Inside ‘Evil Corp,’ a $100M Cybercrime Menace

Inside ‘Evil Corp,’ a $100M Cybercrime Menace

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Inside ‘Evil Corp,’ a $100M Cybercrime Menace

Anchor Project - The Deadly Planeswalker- How The TrickBot Group United High-Tech Crimeware & APT

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Anchor Project - The Deadly Planeswalker- How The TrickBot Group United High-Tech Crimeware & APT

Anchor Project | The Deadly Planeswalker: How The TrickBot Group United High-Tech Crimeware & APT - SentinelLabs

Malpedia library date SentinelOne fromORKLCCS '25 data

Archived copy on ORKL Detailsfor Anchor Project | The Deadly Planeswalker: How The TrickBot Group United High-Tech Crimeware & APT - SentinelLabs

MORPHISEC DISCOVERS CCLEANER BACKDOOR SAVING MILLIONS OF AVAST USERS

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor MORPHISEC DISCOVERS CCLEANER BACKDOOR SAVING MILLIONS OF AVAST USERS

Treasury Sanctions Evil Corp, the Russia-Based Cybercriminal Group Behind Dridex Malware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Treasury Sanctions Evil Corp, the Russia-Based Cybercriminal Group Behind Dridex Malware

Treasury Sanctions Evil Corp, the Russia-Based Cybercriminal Group Behind Dridex Malware

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Treasury Sanctions Evil Corp, the Russia-Based Cybercriminal Group Behind Dridex Malware

CERTFR-2019-CTI-006-EN.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERTFR-2019-CTI-006-EN.pdf

CERTFR-2019-CTI-006.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERTFR-2019-CTI-006.pdf

The state of advanced code injections

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The state of advanced code injections

BitPaymer Source Code Fork- Meet DoppelPaymer Ransomware and Dridex 2.0

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor BitPaymer Source Code Fork- Meet DoppelPaymer Ransomware and Dridex 2.0

CrowdStrike Discovers New DoppelPaymer Ransomware & Dridex Variant

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CrowdStrike Discovers New DoppelPaymer Ransomware & Dridex Variant

Information on GovCERT

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Information on GovCERT

Research, News, and Perspectives

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Research, News, and Perspectives

Report2019GlobalThreatReport

file creation date fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Report2019GlobalThreatReport

PINCHY SPIDER Affiliates Adopt “Big Game Hunting” Tactics to Distribute GandCrab Ransomware

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor PINCHY SPIDER Affiliates Adopt “Big Game Hunting” Tactics to Distribute GandCrab Ransomware

PINCHY SPIDER Adopts “Big Game Hunting” to Distribute GandCrab

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor PINCHY SPIDER Adopts “Big Game Hunting” to Distribute GandCrab

CrowdStrike_GTR_2019.pdf

file creation date fromORKL

The original link failed its last check. Original publisher Detailsfor CrowdStrike_GTR_2019.pdf

CrowdStrike_GTR_2019_.pdf

file creation date fromORKL

Archived copy on ORKL Detailsfor CrowdStrike_GTR_2019_.pdf

What is Ryuk Ransomware? The Complete Breakdown

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor What is Ryuk Ransomware? The Complete Breakdown

Big Game Hunting with Ryuk- Another Lucrative Targeted Ransomware

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Big Game Hunting with Ryuk- Another Lucrative Targeted Ransomware

URSNIF, EMOTET, DRIDEX and BitPayme Linked by Loader

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor URSNIF, EMOTET, DRIDEX and BitPayme Linked by Loader

Big Game Hunting- The Evolution of INDRIK SPIDER From Dridex Wire Fraud to BitPaymer Targeted Ransomware

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Big Game Hunting- The Evolution of INDRIK SPIDER From Dridex Wire Fraud to BitPaymer Targeted Ransomware

Big Game Hunting: The Evolution of INDRIK SPIDER From Dridex Wire Fraud to BitPaymer Targeted Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Big Game Hunting: The Evolution of INDRIK SPIDER From Dridex Wire Fraud to BitPaymer Targeted Ransomware

Report2018GlobalThreatReport.pdf

file creation date fromORKL

Archived copy on ORKL Detailsfor Report2018GlobalThreatReport.pdf

FriedEx: BitPaymer ransomware the work of Dridex authors

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor FriedEx: BitPaymer ransomware the work of Dridex authors

Holiday lull? Not so much | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Holiday lull? Not so much | Proofpoint US

Informe_Dridex_Revisado_FINAL_EN-2.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Informe_Dridex_Revisado_FINAL_EN-2.pdf

Ten process injection techniques: A technical survey of common and trending process injection techniques

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ten process injection techniques: A technical survey of common and trending process injection techniques

Dridex: A History of Evolution

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Dridex: A History of Evolution

Talking to Dridex (part 0) – inside the dropper

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Talking to Dridex (part 0) – inside the dropper

ANB_MIR_Dridex_PRv7_final.pdf

Malpedia library date Nuno fromORKL

Archived copy on ORKL Detailsfor ANB_MIR_Dridex_PRv7_final.pdf