TeamTNT

Storm clouds on the horizon: Resurgence of TeamTNT? | Group-IB Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Storm clouds on the horizon: Resurgence of TeamTNT? | Group-IB Blog

FIRSTCON23-TLPCLEAR-Sood-Compromising-the-Keys-to-the-Kingdom.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor FIRSTCON23-TLPCLEAR-Sood-Compromising-the-Keys-to-the-Kingdom.pdf

P2PInfect: The Rusty Peer-to-Peer Self-Replicating Worm

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor P2PInfect: The Rusty Peer-to-Peer Self-Replicating Worm

TeamTNT Reemerged with New Aggressive Cloud Campaign

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TeamTNT Reemerged with New Aggressive Cloud Campaign

Threat Alert: Anatomy of Silentbob’s Cloud Attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat Alert: Anatomy of Silentbob’s Cloud Attack

New Kiss-a-dog Cryptojacking Campaign Targets Docker and Kubernetes

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor New Kiss-a-dog Cryptojacking Campaign Targets Docker and Kubernetes

Threat Horizons - September 2022

file creation date Google's Cybersecurity Action Team (GCAT) fromORKL

Archived copy on ORKL Detailsfor Threat Horizons - September 2022

Threat Alert: New Malware in the Cloud By TeamTNT

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat Alert: New Malware in the Cloud By TeamTNT

Threat Alert- New Malware in the Cloud By TeamTNT

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Threat Alert- New Malware in the Cloud By TeamTNT

Security Breaks- TeamTNT’s DockerHub Credentials Leak

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Security Breaks- TeamTNT’s DockerHub Credentials Leak

How Malicious Actors Abuse Native Linux Tools in Attacks

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor How Malicious Actors Abuse Native Linux Tools in Attacks

Alibaba OSS Buckets Compromised to Distribute Malicious Shell Scripts via Steganography

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Alibaba OSS Buckets Compromised to Distribute Malicious Shell Scripts via Steganography

2019-10 - Geost botnet. The story of the discovery of a new Android banking trojan from an OpSec error

file creation date fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor 2019-10 - Geost botnet. The story of the discovery of a new Android banking trojan from an OpSec error

2017-12 - Nine circles of Cerber

file creation date fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor 2017-12 - Nine circles of Cerber

Cryptojacking on the Fly- TeamTNT Using NVIDIA Drivers to Mine Cryptocurrency

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Cryptojacking on the Fly- TeamTNT Using NVIDIA Drivers to Mine Cryptocurrency

Navigating New Frontiers: Trend Micro 2021 Annual Cybersecurity Report

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Navigating New Frontiers: Trend Micro 2021 Annual Cybersecurity Report

TeamTNT Cryptomining Explosion ??????

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TeamTNT Cryptomining Explosion ??????

TeamTNT Cryptomining Explosion

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor TeamTNT Cryptomining Explosion

VMware Exposing Malware In Linux Based Multi Cloud Environments

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor VMware Exposing Malware In Linux Based Multi Cloud Environments

Collector-stealer- a Russian origin credential and information extractor

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Collector-stealer- a Russian origin credential and information extractor

Threat news: TeamTNT stealing credentials using EC2 Instance Metadata

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat news: TeamTNT stealing credentials using EC2 Instance Metadata

Threat news- TeamTNT stealing credentials using EC2 Instance Metadata

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Threat news- TeamTNT stealing credentials using EC2 Instance Metadata

Analyzing How TeamTNT Used Compromised Docker Hub Accounts

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Analyzing How TeamTNT Used Compromised Docker Hub Accounts

Analyzing How TeamTNT Used Compromised Docker Hub Accounts

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Analyzing How TeamTNT Used Compromised Docker Hub Accounts

Groups Target Alibaba ECS Instances for Cryptojacking

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Groups Target Alibaba ECS Instances for Cryptojacking

TeamTNT Upgrades Arsenal, Refines Focus on Kubernetes and GPU Environments

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor TeamTNT Upgrades Arsenal, Refines Focus on Kubernetes and GPU Environments

Compromised Docker Hub Accounts Abused for Cryptomining Linked to TeamTNT

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Compromised Docker Hub Accounts Abused for Cryptomining Linked to TeamTNT

TeamTNT Upgrades Arsenal, Refines Focus on Kubernetes and GPU Environments

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor TeamTNT Upgrades Arsenal, Refines Focus on Kubernetes and GPU Environments

TeamTNT Upgrades Arsenal Refines Focus on Kubernetes and GPU Environments

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TeamTNT Upgrades Arsenal Refines Focus on Kubernetes and GPU Environments

TeamTNT Continues to Target Exposed Docker API

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor TeamTNT Continues to Target Exposed Docker API

Team TNT Deploys Malicious Docker Image on Docker Hub

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Team TNT Deploys Malicious Docker Image on Docker Hub

Team TNT Deploys Malicious Docker Image On Docker Hub

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Team TNT Deploys Malicious Docker Image On Docker Hub

Inside TeamTNT’s Impressive Arsenal- A Look Into A TeamTNT Server

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Inside TeamTNT’s Impressive Arsenal- A Look Into A TeamTNT Server

Inside TeamTNT's Impressive Arsenal: A Look Into A TeamTNT Server

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Inside TeamTNT's Impressive Arsenal: A Look Into A TeamTNT Server

TeamTNT Script Employed to Grab AWS Credentials

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor TeamTNT Script Employed to Grab AWS Credentials

AquaSecurity_Cloud_Native_Threat_Report_2021.pdf?utm_campaign=WP%20-%20Jun2021%20Nautilus%202021%20Threat%20Research%20Report&utm_medium=email&_hsmi=132931006&_hsenc=p2ANqtz-_8oopT5Uhqab8B7kE0l3iFo1koirxtyfTehxF7N-EdGYrwk30gfiwp5SiNlW3G0TNKZxUcDkYOtwQ9S6nNVNyEO-Dgrw&utm_content=132931006&utm_source=hs_automation

file creation date fromORKL

Archived copy on ORKL Detailsfor AquaSecurity_Cloud_Native_Threat_Report_2021.pdf?utm_campaign=WP%20-%20Jun2021%20Nautilus%202021%20Threat%20Research%20Report&utm_medium=email&_hsmi=132931006&_hsenc=p2ANqtz-_8oopT5Uhqab8B7kE0l3iFo1koirxtyfTehxF7N-EdGYrwk30gfiwp5SiNlW3G0TNKZxUcDkYOtwQ9S6nNVNyEO-Dgrw&utm_content=132931006&utm_source=hs_automation

TeamTNT with new campaign aka “Chimaera”

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor TeamTNT with new campaign aka “Chimaera”

TeamTNT-Cryptomining-Explosion.pdf

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor TeamTNT-Cryptomining-Explosion.pdf

How to Detect Cobalt Strike

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor How to Detect Cobalt Strike

Tracking the Activities of TeamTNT: A Closer Look at a Cloud-Focused Malicious Actor Group

Malpedia library date Trend Micro Research fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Tracking the Activities of TeamTNT: A Closer Look at a Cloud-Focused Malicious Actor Group

TeamTNT Using WatchDog TTPs to Expand Its Cryptojacking Footprint

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor TeamTNT Using WatchDog TTPs to Expand Its Cryptojacking Footprint

TeamTNT Actively Enumerating Cloud Environments to Infiltrate Organizations

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TeamTNT Actively Enumerating Cloud Environments to Infiltrate Organizations

TeamTNT Actively Enumerating Cloud Environments to Infiltrate Organizations

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor TeamTNT Actively Enumerating Cloud Environments to Infiltrate Organizations

TeamTNT Targets Kubernetes, Nearly 50,000 IPs Compromised in Worm-like Attack

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor TeamTNT Targets Kubernetes, Nearly 50,000 IPs Compromised in Worm-like Attack

TeamTNT’s Extended Credential Harvester Targets Cloud Services, Other Software

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor TeamTNT’s Extended Credential Harvester Targets Cloud Services, Other Software

The “Kek Security” Network

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor The “Kek Security” Network

Malpedia Website for Malware Family Team TNT

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Malpedia Website for Malware Family Team TNT

TeamTNT (Malware Family)

Malpedia library date fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor TeamTNT (Malware Family)

Threat Alert- TeamTNT Pwn Campaign Against Docker and K8s Environments

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Threat Alert- TeamTNT Pwn Campaign Against Docker and K8s Environments

Threat Alert: TeamTNT Pwn Campaign Against Docker and K8s Environments

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat Alert: TeamTNT Pwn Campaign Against Docker and K8s Environments

Hildegard- TeamTNT’s New Feature-Rich Malware Targeting Kubernetes

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Hildegard- TeamTNT’s New Feature-Rich Malware Targeting Kubernetes

Hildegard_ New TeamTNT Malware Targeting Kubernetes

date in the CCS '25 data Palo Alto fromORKLCCS '25 data

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Hildegard_ New TeamTNT Malware Targeting Kubernetes

Hildegard- New TeamTNT Malware Targeting Kubernetes

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Hildegard- New TeamTNT Malware Targeting Kubernetes

Hildegard: New TeamTNT Cryptojacking Malware Targeting Kubernetes

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Hildegard: New TeamTNT Cryptojacking Malware Targeting Kubernetes

TeamTNT delivers malware with new detection evasion tool

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor TeamTNT delivers malware with new detection evasion tool

Botnet Deploys Cloud and Container Attack Techniques

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Botnet Deploys Cloud and Container Attack Techniques

Malware using new Ezuri memory loader

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Malware using new Ezuri memory loader

Investigating Crimeware Name Servers

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Investigating Crimeware Name Servers

TeamTNT Now Deploying DDoS-Capable IRC Bot TNTbotinger

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TeamTNT Now Deploying DDoS-Capable IRC Bot TNTbotinger

TeamTNT Now Deploying DDoS-Capable IRC Bot TNTbotinger

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor TeamTNT Now Deploying DDoS-Capable IRC Bot TNTbotinger

Threat Alert- Fileless Malware Executing in Containers

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Threat Alert- Fileless Malware Executing in Containers

Fileless Malware Executing in Containers - Aqua

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Fileless Malware Executing in Containers - Aqua

Fileless Malware Executing in Containers - Aqua

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Fileless Malware Executing in Containers - Aqua

Black-T- New Cryptojacking Variant from TeamTnT

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Black-T- New Cryptojacking Variant from TeamTnT

Black-T: New Cryptojacking Variant from TeamTNT

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black-T: New Cryptojacking Variant from TeamTNT

Threat Alert: TeamTNT is Back and Attacking Vulnerable Redis Servers

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat Alert: TeamTNT is Back and Attacking Vulnerable Redis Servers

TeamTNT activity targets Weave Scope deployments - Microsoft Tech Community - 1645968

date in the CCS '25 data Microsoft fromORKLCCS '25 data

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor TeamTNT activity targets Weave Scope deployments - Microsoft Tech Community - 1645968

TeamTNT activity targets Weave Scope deployments

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor TeamTNT activity targets Weave Scope deployments

Attackers Abusing Legitimate Cloud Monitoring Tools to Conduct Cyber Attacks

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Attackers Abusing Legitimate Cloud Monitoring Tools to Conduct Cyber Attacks

Cetus: Cryptojacking Worm Targeting Docker Daemons

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cetus: Cryptojacking Worm Targeting Docker Daemons

Cetus- Cryptojacking Worm Targeting Docker Daemons

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Cetus- Cryptojacking Worm Targeting Docker Daemons

Deep Analysis of TeamTNT Techniques Using Container Images to Attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Deep Analysis of TeamTNT Techniques Using Container Images to Attack

Team TNT – The First Crypto-Mining Worm to Steal AWS Credentials

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Team TNT – The First Crypto-Mining Worm to Steal AWS Credentials

Team TNT - The First Crypto-Mining Worm to Steal AWS Credentials

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Team TNT - The First Crypto-Mining Worm to Steal AWS Credentials

Attribution is in the object- using RTF object dimensions to track APT phishing weaponizers

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Attribution is in the object- using RTF object dimensions to track APT phishing weaponizers

Kimsuky group- tracking the king of the spear phishing

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Kimsuky group- tracking the king of the spear phishing

Pulling the PKPLUG- the adversary playbook for the long-standing espionage activity of a Chinese nation-state adversary

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Pulling the PKPLUG- the adversary playbook for the long-standing espionage activity of a Chinese nation-state adversary

LokiBot- dissecting the C&C panel deployments

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor LokiBot- dissecting the C&C panel deployments

Rich Headers- leveraging this mysterious artifact of the PE format

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Rich Headers- leveraging this mysterious artifact of the PE format

Behind the scenes of GandCrab’s operation

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Behind the scenes of GandCrab’s operation

Cyber espionage in the Middle East- unravelling OSX.WindTail

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Cyber espionage in the Middle East- unravelling OSX.WindTail

APT cases exploiting vulnerabilities in region‑specific software

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor APT cases exploiting vulnerabilities in region‑specific software

Spoofing in the reeds with Rietspoof

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Spoofing in the reeds with Rietspoof

APT15

date in the CCS '25 data Intezer fromCCS '25 data

The original link failed its last check. Detailsfor APT15

From Hacking Team to hacked team to...-

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor From Hacking Team to hacked team to...-

VB2018 - Inside Formbook InfoStealer

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor VB2018 - Inside Formbook InfoStealer

Tracking Mirai Variants (Ya Liu & Hui Wang)

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Tracking Mirai Variants (Ya Liu & Hui Wang)

VB2018 - Who Was Not Responsible for Olympic Destroyer

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor VB2018 - Who Was Not Responsible for Olympic Destroyer

A review of the evolution of Andromeda over the years before we say goodbye

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor A review of the evolution of Andromeda over the years before we say goodbye

VB2017 - Offensive Malware Analysis - Dissecting OSX-FruitFly.B Via a Custom C&C Server

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor VB2017 - Offensive Malware Analysis - Dissecting OSX-FruitFly.B Via a Custom C&C Server

KeyBase - A New Keylogger on the Block

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor KeyBase - A New Keylogger on the Block

VB2015 paper- It's A File Infector... It’s Ransomware... It's Virlock

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor VB2015 paper- It's A File Infector... It’s Ransomware... It's Virlock

Shifu – the rise of a self-destructive banking trojan

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Shifu – the rise of a self-destructive banking trojan

VB2014 paper- The pluginer - Caphaw

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor VB2014 paper- The pluginer - Caphaw

Bird's nest

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Bird's nest

Sinowal banking trojan

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Sinowal banking trojan

Tofsee botnet

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Tofsee botnet

Needle in a haystack

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Needle in a haystack

Andromeda 2.7 features

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Andromeda 2.7 features

Compromised library

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Compromised library

Tracking the 2012 Sasfis campaign

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Tracking the 2012 Sasfis campaign

URLZone reloaded- new evolution

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor URLZone reloaded- new evolution

Inside the ICE IX bot, descendent of Zeus

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Inside the ICE IX bot, descendent of Zeus

Spam from the kernel

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Spam from the kernel