Update readme.md
This commit is contained in:
blackorbird
@@ -1,3 +1,146 @@
|
||||
2024 MID OF YEAR
|
||||
|
||||
[1]https://mp.weixin.qq.com/s/Mflg1NZVrHC6JuVm0rW6GQ
|
||||
[2]https://asec.ahnlab.com/ko/62771/
|
||||
[3]https://asec.ahnlab.com/ko/65495/
|
||||
[4]https://mp.weixin.qq.com/s/84lUaNSGo4lhQlpnCVUHfQ
|
||||
[5]https://www.chainalysis.com/blog/2024-crypto-money-laundering/
|
||||
[6]https://decoded.avast.io/janvojtesek/lazarus-and-the-fudmodule-rootkit-beyond-byovd-with-an-admin-to-kernel-zero-day/
|
||||
[7]https://decoded.avast.io/luiginocamastra/from-byovd-to-a-0-day-unveiling-advanced-exploits-in-cyber-recruiting-scams/
|
||||
[8]https://mp.weixin.qq.com/s/kKNkTAlUpLL2skXq3TcBfw
|
||||
[9]https://asec.ahnlab.com/ko/61666/
|
||||
[10]https://asec.ahnlab.com/ko/62117/
|
||||
[11]https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/springtail-kimsuky-backdoor-espionage
|
||||
[12]https://mp.weixin.qq.com/s/Pog2WXQ8uZTTZKybJFy1Ow
|
||||
[13]https://mp.weixin.qq.com/s/YhaEq6ogz3p5OQO_PyI-OQ
|
||||
[14]https://www.securonix.com/blog/securonix-threat-research-security-advisory-new-deepgosu-attack-campaign/
|
||||
[15]https://www.genians.co.kr/blog/threat_intelligence/dropbox
|
||||
[16]https://mp.weixin.qq.com/s/7vnxz8dYmWf7Z8Cmaa8sVg
|
||||
[17]https://www.kroll.com/en/insights/publications/cyber/screenconnect-vulnerability-exploited-to-deploy-babyshark
|
||||
[18]https://www.genians.co.kr/blog/threat_intelligence/webinar-apt
|
||||
[19]https://www.sentinelone.com/labs/a-glimpse-into-future-scarcruft-campaigns-attackers-gather-strategic-intelligence-and-target-cybersecurity-professionals/
|
||||
[20]https://mp.weixin.qq.com/s/yzd0aVq2wzi-v-eB73F6lQ
|
||||
[21]https://mp.weixin.qq.com/s/BOTyH6YTmVzhVInhTlzXww
|
||||
[22]https://mp.weixin.qq.com/s/JBX6AGPPGEPzo4SqcN9n9A
|
||||
[23]https://mp.weixin.qq.com/s/3GhWv3wsiAIZTClDBJxG-g
|
||||
[24]https://mp.weixin.qq.com/s/K-FUaffQx4g6d_hweXxCTg
|
||||
[25]https://www.nextron-systems.com/2024/03/22/unveiling-kamikakabot-malware-analysis/
|
||||
[26]https://www.group-ib.com/blog/dark-pink-apt/
|
||||
[27]https://mp.weixin.qq.com/s/eFxoX3cwpPee5z2_3G3wXw
|
||||
[28]https://mp.weixin.qq.com/s/_gBnAlghd3gbP-PQ5M-7yQ
|
||||
[29]https://mp.weixin.qq.com/s/wR7IgBmEuqqGQ9SCAV39Uw
|
||||
[30]https://www.welivesecurity.com/en/eset-research/vajraspy-patchwork-espionage-apps/
|
||||
[31]https://mp.weixin.qq.com/s/SAt5NU-hCbS0D6jI8gkkFQ
|
||||
[32]https://mp.weixin.qq.com/s/I_s5HrRWdbTW99B99udl1w
|
||||
[33]https://mp.weixin.qq.com/s/ENDm2bVzw89TlkljZYFdbw
|
||||
[34]https://www.sentinelone.com/labs/capratube-remix-transparent-tribes-android-spyware-targeting-gamers-weapons-enthusiasts/
|
||||
[35]https://mp.weixin.qq.com/s/NBFwjxnm2yIwPfMn87vbRQ
|
||||
[36]https://blogs.blackberry.com/en/2024/05/transparent-tribe-targets-indian-government-defense-and-aerospace-sectors
|
||||
[37]https://mp.weixin.qq.com/s/FT7xvyGdk-WaB9nfYWPMUg
|
||||
[38]https://www.seqrite.com/blog/pakistani-apts-escalate-attacks-on-indian-gov-seqrite-labs-unveils-threats-and-connections/
|
||||
[39]https://cyble.com/blog/the-overlapping-cyber-strategies-of-transparent-tribe-and-sidecopy-against-india/
|
||||
[40]https://mp.weixin.qq.com/s/Uf708Khax2rJaUhNo1Mz1Q
|
||||
[41]https://www.trendmicro.com/en_us/research/24/a/pawn-storm-uses-brute-force-and-stealth.html
|
||||
[42]https://www.microsoft.com/en-us/security/blog/2024/04/22/analyzing-forest-blizzards-custom-post-compromise-tool-for-exploiting-cve-2022-38028-to-obtain-credentials/
|
||||
[43]https://go.recordedfuture.com/hubfs/reports/CTA-RU-2024-0530.pdf
|
||||
[44]https://www.trendmicro.com/en_us/research/24/e/router-roulette.html
|
||||
[45]https://www.ic3.gov/Media/News/2024/240227.pdf
|
||||
[46]https://www.clearskysec.com/wp-content/uploads/2024/02/DoppelgangerNG_ClearSky.pdf
|
||||
[47]https://securityintelligence.com/x-force/itg05-leverages-malware-arsenal/
|
||||
[48]https://cert.pl/posts/2024/05/apt28-kampania/
|
||||
[49]https://labs.withsecure.com/publications/kapeka
|
||||
[50]https://www.sentinelone.com/labs/acidpour-new-embedded-wiper-variant-of-acidrain-appears-in-ukraine/
|
||||
[51]https://cert.gov.ua/article/6278706
|
||||
[52]https://cloud.google.com/blog/topics/threat-intelligence/apt44-unearthing-sandworm
|
||||
[53]https://blog.talosintelligence.com/tinyturla-ng-tooling-and-c2/
|
||||
[54]https://blog.talosintelligence.com/tinyturla-full-kill-chain/
|
||||
[55]https://www.welivesecurity.com/en/eset-research/moon-backdoors-lunar-landing-diplomatic-missions/
|
||||
[56]https://www.mandiant.com/resources/blog/apt29-wineloader-german-political-parties
|
||||
[57]https://blogs.blackberry.com/en/2024/04/fin7-targets-the-united-states-automotive-industry
|
||||
[58]https://www.esentire.com/blog/fin7-uses-trusted-brands-and-sponsored-google-ads-to-distribute-msix-payloads
|
||||
[59]https://www.microsoft.com/en-us/security/blog/2024/01/17/new-ttps-observed-in-mint-sandstorm-campaign-targeting-high-profile-individuals-at-universities-and-research-orgs/
|
||||
[60]https://www.deepinstinct.com/blog/muddyc2go-latest-c2-framework-used-by-iranian-apt-muddywater-spotted-in-israel
|
||||
[61]https://www.deepinstinct.com/blog/darkbeatc2-the-latest-muddywater-attack-framework
|
||||
[62]https://harfanglab.io/en/insidethelab/muddywater-rmm-campaign/
|
||||
[63]https://x.com/MsftSecIntel/status/1737895717870440609
|
||||
[64]https://www.nextron-systems.com/2024/01/29/analysis-of-falsefont-backdoor-used-by-peach-sandstorm-threat-actor/
|
||||
[65]https://unit42.paloaltonetworks.com/curious-serpens-falsefont-backdoor/#post-133071-_re5lfhtpycch
|
||||
[66]https://www.welivesecurity.com/en/eset-research/arid-viper-poisons-android-apps-with-aridspy/
|
||||
[67]https://www.esentire.com/blog/blind-eagles-north-american-journey
|
||||
[68]https://mp.weixin.qq.com/s/tPVw-fbu3pQvKTYMzxb4Bw
|
||||
[69]https://blog.talosintelligence.com/starry-addax/
|
||||
[70]https://blog.eclecticiq.com/operation-flightnight-indian-government-entities-and-energy-sector-targeted-by-cyber-espionage-campaign
|
||||
[71]https://www.huntandhackett.com/blog/turkish-espionage-campaigns
|
||||
[72]https://arcticwolf.com/resources/blog/follow-on-extortion-campaign-targeting-victims-of-akira-and-royal-ransomware/
|
||||
[73]https://www.securonix.com/blog/securonix-threat-research-security-advisory-new-returgence-attack-campaign-turkish-hackers-target-mssql-servers-to-deliver-domain-wide-mimic-ransomware/
|
||||
[74]https://blog.talosintelligence.com/decryptor-babuk-tortilla/
|
||||
[75]https://unit42.paloaltonetworks.com/medusa-ransomware-escalation-new-leak-site/
|
||||
[76]https://asec.ahnlab.com/en/60440/
|
||||
[77]https://mp.weixin.qq.com/s/Css8y2rPykyNPrLkJNq9ig
|
||||
[78]https://asec.ahnlab.com/ko/60744/
|
||||
[79]https://mp.weixin.qq.com/s/XV0x10YV-Wrs1ZI6tNHjLA
|
||||
[80]https://www.trendmicro.com/en_us/research/24/a/kasseika-ransomware-deploys-byovd-attacks-abuses-psexec-and-expl.html
|
||||
[81]https://www.fortinet.com/blog/threat-research/phobos-ransomware-variant-launches-attack-faust
|
||||
[82]https://www.fortinet.com/blog/threat-research/ransomware-roundup-albabat
|
||||
[83]https://blog.morphisec.com/akira-ransomware-prevention-and-analysis
|
||||
[84]https://www.fortinet.com/blog/threat-research/ransomware-roundup-abyss-locker
|
||||
[85]https://www.trendmicro.com/en_us/research/24/b/threat-actor-groups-including-black-basta-are-exploiting-recent-.html
|
||||
[86]https://www.trendmicro.com/en_us/research/24/c/multistage-ra-world-ransomware.html
|
||||
[87]https://blog.talosintelligence.com/ghostsec-ghostlocker2-ransomware/
|
||||
[88]https://www.facct.ru/blog/shadow-ransomware/
|
||||
[89]https://medium.com/@Intel_Ops/phobos-ransomware-analysing-associated-infrastructure-used-by-8base-646560302a8d
|
||||
[90]https://mp.weixin.qq.com/s/8dIxwYN3v4U7y9IECPxa7g
|
||||
[91]https://mp.weixin.qq.com/s/fxYSDH9NrcRkE_QFgHVIiw
|
||||
[92]https://blog.sonicwall.com/en-us/2024/03/new-multi-stage-stopcrypt-ransomware/
|
||||
[93]https://www.trendmicro.com/en_us/research/24/c/teamcity-vulnerability-exploits-lead-to-jasmin-ransomware.html
|
||||
[94]https://cert.360.cn/report/detail?id=65fceeb4c09f255b91b17f11
|
||||
[95]https://www.trendmicro.com/en_us/research/24/c/agenda-ransomware-propagates-to-vcenters-and-esxi-via-custom-pow.html
|
||||
[96]https://mp.weixin.qq.com/s/_KuFPPs6XFOICNpRjzn5AA
|
||||
[97]https://www.stormshield.com/news/technical-analysis-of-ransomware-crypt888
|
||||
[98]https://www.netskope.com/blog/netskope-threat-coverage-evil-ant-ransomware
|
||||
[99]https://asec.ahnlab.com/ko/64345/
|
||||
[100]https://mp.weixin.qq.com/s/ewo2Lp5arhun3dM94Pcsrw
|
||||
[101]https://thedfirreport.com/2024/04/29/from-icedid-to-dagon-locker-ransomware-in-29-days/
|
||||
[102]https://cert.360.cn/report/detail?id=663c203cc09f255b91b17fd9
|
||||
[103]https://cyble.com/blog/in-the-shadow-of-venus-trinity-ransomwares-covert-ties/
|
||||
[104]https://blog.sekoia.io/mallox-ransomware-affiliate-leverages-purecrypter-in-microsoft-sql-exploitation-campaigns/
|
||||
[105]https://www.proofpoint.com/us/blog/threat-insight/security-brief-millions-messages-distribute-lockbit-black-ransomware
|
||||
[106]https://www.microsoft.com/en-us/security/blog/2024/05/15/threat-actors-misusing-quick-assist-in-social-engineering-attacks-leading-to-ransomware/
|
||||
[107]https://www.sentinelone.com/blog/ikaruz-red-team-hacktivist-group-leverages-ransomware-for-attention-not-profit/
|
||||
[108]https://securelist.com/ransomware-abuses-bitlocker/112643/
|
||||
[109]https://cyble.com/blog/ransomware-menace-amplifies-for-vulnerable-industrial-control-systems-heightened-threats-to-critical-infrastructure/
|
||||
[110]https://arcticwolf.com/resources/blog/lost-in-the-fog-a-new-ransomware-threat/
|
||||
[111]https://symantec-enterprise-blogs.security.com/threat-intelligence/ransomhub-knight-ransomware
|
||||
[112]https://www.trendmicro.com/en_us/research/24/f/targetcompany-s-linux-variant-targets-esxi-environments.html
|
||||
[113]https://www.fortinet.com/blog/threat-research/ransomware-roundup-shinra-and-limpopo-ransomware
|
||||
[114]https://www.cadosecurity.com/blog/from-dormant-to-dangerous-p2pinfect-evolves-to-deploy-new-ransomware-and-cryptominer
|
||||
[115]https://mp.weixin.qq.com/s/xXUBLE43ZZorfVd62FWm4g
|
||||
[116]https://mp.weixin.qq.com/s/-vvj2RHNNkCxruLlMpfyrA
|
||||
[117]https://mp.weixin.qq.com/s/vvvCl1yv3JF6FPXRXT5F3A
|
||||
[118]https://www.secrss.com/articles/52018
|
||||
[119]https://www.antiy.cn/research/notice&report/research_report/TrojanControl_Analysis.html
|
||||
[120]https://mp.weixin.qq.com/s/hQhAVWEykfd2bP2vTRdwsw
|
||||
[121]https://mp.weixin.qq.com/s/UZ557zX-pr428e6d4jO5jw
|
||||
[122]https://mp.weixin.qq.com/s/rHGwLo6XBGHKSObSCD3u1Q
|
||||
[123]https://cert.360.cn/report/detail?id=6603e9fec09f255b91b17f3f
|
||||
[124]https://mp.weixin.qq.com/s/ui_BU1OhIP0--FXT-b6uLg
|
||||
[125]https://www.antiy.cn/research/notice&report/research_report/SwimSnake_Analysis_202404.html
|
||||
[126]https://mp.weixin.qq.com/s/XK_UE0uLS26SB_clMqFO4w
|
||||
[127]https://mp.weixin.qq.com/s/Qe_5k8US7nyZHEHLshmlBg
|
||||
[128]https://mp.weixin.qq.com/s/TbiOIATW-Qn2uWImGoEagw
|
||||
[129]https://mp.weixin.qq.com/s/tNofW88EQAIZXjkCrjp8kw
|
||||
[130]https://mp.weixin.qq.com/s/dIuE6sXutFQ5GS5l6yMqwA
|
||||
[131]https://www.antiy.cn/research/notice&report/research_report/SwimSnake_Analysis_202406.html
|
||||
[132]https://blog.xlab.qianxin.com/unveiling-the-mystery-of-bigpanzi/
|
||||
[133]https://ti.qianxin.com/blog/articles/Analysis-of-Recent-OneinStack-Supply-Chain-Poisoning-Event-CN/
|
||||
[134]https://mp.weixin.qq.com/s/R0kn5STsiwIUhIqVRwnNxw
|
||||
[135]https://www.antiy.cn/research/notice&report/research_report/DarkMozzie.html
|
||||
[136]https://mp.weixin.qq.com/s/7h5rMLnv16uh27RoVrDmCw
|
||||
[137]https://mp.weixin.qq.com/s/MEQp4I1Ilrxf91etb0yZyQ
|
||||
[138]https://mp.weixin.qq.com/s/OheNN_iR_ATCkOkyK8FLAg
|
||||
[139]https://mp.weixin.qq.com/s/yF48xZcWb4S5aMfMchrxwg
|
||||
|
||||
|
||||
Happy New Year!
|
||||
|
||||
2023 YEAR IN REVIEW
|
||||
|
||||
Reference in New Issue
Block a user