Mur d'images - Cyberveille

curated by Decio

A miner and the ClipBanker Trojan being distributed via SourceForge | Securelist

SparkCat crypto stealer in Google Play and App Store

HZ Rat backdoor for macOS harvests data from WeChat and DingTalk

New Mandrake Android spyware version discovered on Google Play | Securelist

CloudSorcerer APT uses cloud services and GitHub as C2 | Securelist

XZ backdoor behavior inside OpenSSH

2023 Kaspersky Incident Response report

Leaked LockBit builder in a real-life incident response case | Securelist

Kaspersky analysis of the backdoor in XZ

A backdoor with a cryptowallet stealer inside cracked macOS software

Operation Triangulation: The last (hardware) mystery

Analysis of a new macOS Trojan-Proxy

A cascade of compromise: unveiling Lazarus' new campaign

StripedFly: Perennially flying under the radar

Triangulation: validators, post-compromise activity and modules | Securelist

Trojanized Free Download Manager found to contain a Linux backdoor

Phishing pages placed on hacked websites

Dissecting TriangleDB, a Triangulation spyware implant

Investigating ChatGPT phishing detection capabilities

QBot banker delivered through business correspondence

Nokoyawa ransomware attacks with Windows zero-day

Not just an infostealer: Gopuram backdoor deployed through 3CX supply chain attack | Securelist

IoC detection experiments with ChatGPT

IT specialists search and recruitment on the dark web

DNS changer in malicious mobile app used by Roaming Mantis

Stolen certificates in two waves of ransomware and wiper attacks

CVE-2022-41040 and CVE-2022-41082 – zero-days in MS Exchange

Malicious WhatsApp mod distributed through legitimate apps

Malicious Tor Browser spreads through YouTube

DeftTorero TTPs in 2019–2021

NullMixer drops Redline Stealer, SmokeLoader and other malware | Securelist

RedLine spreads through ads for cheats and cracks on YouTube

Kimsuky’s GoldDragon cluster and its C2 operations | Securelist

Kaspersky report on Luna and Black Basta ransomware

The SessionManager IIS backdoor: a possibly overlooked GELSEMIUM artefact

The hateful eight: Kaspersky’s guide to modern ransomware groups’ TTPs

APT ToddyCat

Analysis of dark web posts selling access to corporate networks

Kaspersky DDoS report, Q1 2022

Gas Is Too Expensive; Let’s Make It Cheap!