Mur d'images - Cyberveille

curated by Decio

Dero miner spreads inside containerized Linux environments | Securelist

A miner and the ClipBanker Trojan being distributed via SourceForge | Securelist

SparkCat crypto stealer in Google Play and App Store

CloudSorcerer APT uses cloud services and GitHub as C2 | Securelist

XZ backdoor behavior inside OpenSSH

Leaked LockBit builder in a real-life incident response case | Securelist

Kaspersky analysis of the backdoor in XZ

A backdoor with a cryptowallet stealer inside cracked macOS software

StripedFly: Perennially flying under the radar

DNS changer in malicious mobile app used by Roaming Mantis

Stolen certificates in two waves of ransomware and wiper attacks

NullMixer drops Redline Stealer, SmokeLoader and other malware | Securelist

Kaspersky report on Luna and Black Basta ransomware

The hateful eight: Kaspersky’s guide to modern ransomware groups’ TTPs