Mur d'images - Cyberveille

curated by Decio

LilacSquid: The stealthy trilogy of PurpleInk, InkBox and InkLoader

ArcaneDoor - New espionage-focused campaign found targeting perimeter network devices

GhostSec’s joint ransomware operation and evolution of their arsenal

Threat actors leverage document publishing sites for ongoing credential and session token theft

Understanding the Phobos affiliate structure and activity

Active exploitation of Cisco IOS XE Software Web Management User Interface vulnerability

Lazarus Group exploits ManageEngine vulnerability to deploy QuiteRAT

Uncovering weaknesses in Apple macOS and VMWare vCenter: 12 vulnerabilities in RPC implementation

Mercenary mayhem: A technical analysis of Intellexa's PREDATOR spyware

New phishing-as-a-service tool “Greatness” already seen in the wild

Emotet resumes spam operations, switches to OneNote

Prometei botnet improves modules and exhibits new capabilities in recent updates

New MortalKombat ransomware and Laplas Clipper malware threats deployed in financially motivated campaign

Following the LNK metadata trail

Threat Spotlight: XLLing in Excel - threat actors using malicious add-ins

Threat Spotlight: Cyber Criminal Adoption of IPFS for Phishing, Malware Campaigns

Alchimist: A new attack framework in Chinese for Mac, Linux and Windows

MagicRAT: Lazarus’ latest gateway into victim networks

Comprehensive Threat Intelligence: Cisco Talos shares insights related to recent cyber attack on Cisco

Attackers leveraging Dark Utilities "C2aaS" platform in malware campaigns

Manjusaka: A Chinese sibling of Sliver and Cobalt Strike

Iranian linked conglomerate MuddyWater comprised of regionally focused subgroups