Research reports
1,224 reports from 387 publishers45 added in the past week
43 reports, newest added first
Added Thu 16 Oct 2025
Botconf2022-19-FaouCoteCyr.pdf
Operation Cache Panda: Zero-Day in Financial Software Exploited by China-Linked Threat Group Valentine’s Day this year saw the end of a truly toxic relationship — a prolonged supply chain attack targeting the Taiwan financial and securities trading sector…
State-sponsoredMalwareVulnerabilities
Added Fri 12 Apr 2024
Possible supply chain attack targeting South Asian government delivers Shadowpad
2 VIRUS BULLETIN CONFERENCE OCTOBER 2023 ABSTRACT Shadowpad is a malware family that has been involved in multiple advanced campaigns, starting in 2017 with a supply chain attack against NetSarang software, and an ASUS compromise in 2018, all attributed to…
MalwareSupply chain
Slides-Possible-supply-chain-attack-targeting-South-Asian-government-delivers-Shadowpad.pdf
Introduction • In March 2023, we noticed a detection hit from September 2022 for mscoree.dll in an uncommon directory − Mscoree.dll is a commonly used name for loaders of Shadowpad • This malicious DLL was embedded in a CAB file, itself embedded in an MSI…
Supply chain
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.