Research reports
1,224 reports from 387 publishers45 added in the past week
20 reports, newest added first
Added Sun 25 Oct
Threat Group Cards: A Threat Actor Encyclopedia
Home > List all groups > List all tools > List all groups using tool Retefe (Android) Tool: Retefe (Android) Names Retefe (Android) Category Malware Type Banking trojan, Backdoor, Info stealer, Credential stealer, Botnet (GovCERT.ch) Recently, some anti-virus…
MalwareInfostealersMobile
Added Tue 20 Oct
Threat Group Cards: A Threat Actor Encyclopedia
Home > List all groups > List all tools > List all groups using tool Emissary Tool: Emissary Names Emissary Category Malware Type Backdoor (Palo Alto) This Trojan is related to the Elise backdoor described in the Operation Lotus Blossom report. Both Emissary…
Malware
Added Mon 19 Oct
listgroups.cgi?u=72670111-f95a-423c-a296-f424939cc08e
No excerpt available.
listgroups.cgi?u=cacc4de8-a9b2-4231-9fdb-8aefa8ed0a5c
No excerpt available.
listgroups.cgi?u=b999fd13-e5d2-4056-9676-907b6e1be7d0
No excerpt available.
listgroups.cgi?u=55915915-162d-4d8f-bbea-7f4c959973aa
No excerpt available.
listgroups.cgi?u=572924b9-4cc2-4247-b8b4-1cb8b6c4cd6e
No excerpt available.
listgroups.cgi?u=fe58993d-9e29-4ff8-8bb1-b580762bbe7d
No excerpt available.
listgroups.cgi?u=00fb1835-390b-490d-b6d6-7347fa39284b
No excerpt available.
listgroups.cgi?u=bbfe0734-20d1-4c43-a238-fffba96f49dd
No excerpt available.
Added Mon 6 Apr
Threat Group Cards: A Threat Actor Encyclopedia
Home > List all groups > List all tools > List all groups using tool Emdivi Tool: Emdivi Names Emdivi Newsripper Category Malware Type Backdoor Description (Kaspersky) The emdivi family stores important data about itself, including C2, API name, strings for…
Malware
Threat Group Cards: A Threat Actor Encyclopedia
Download this tool card in JSON format All groups using tool Jumpall Changed Name Country Observed APT groups APT 17, Deputy Dog, Elderwood, Sneaky Panda 2009-Jun 2024 APT 41 2012-Jul 2025 2 groups liste
State-sponsoredMalware
Threat Group Cards: A Threat Actor Encyclopedia
Home > List all groups > List all tools > List all groups using tool Gamaredon Tool: Gamaredon Names Gamaredon Category Malware Type Reconnaissance, Backdoor, Info stealer, Downloader Description (Palo Alto) The custom-developed malware is fully featured an…
State-sponsoredMalware
Threat Group Cards: A Threat Actor Encyclopedia
Home > List all groups > List all tools > List all groups using tool Defray777 Tool: Defray777 Names Defray777 Defray Defray 2018 Target777 Ransom X RansomExx Glushkov Category Malware Type Ransomware, Big Game Hunting Description (Palo Alto) Defray777 is an…
Ransomware
Threat Group Cards: A Threat Actor Encyclopedia
Home > List all groups > List all tools > List all groups using tool KARAE Tool: KARAE Names KARAE Category Malware Type Reconnaissance, Backdoor, Info stealer, Exfiltration Description (FireEye) Karae backdoors are typically used as first-stage malware after…
Malware
Threat Group Cards: A Threat Actor Encyclopedia
(ESET) Rare is the APT group that goes largely undetected for nine years, but XDSpy is just that; a previously undocumented espionage group that has been active since 2011. It has attracted very little public attention, with the exception of an advisory from…
State-sponsored
Threat Group Cards: A Threat Actor Encyclopedia
Home > List all groups > List all tools > List all groups using tool Sword2033 Tool: Sword2033 Names Sword2033 Category Malware Type Backdoor, Downloader, Exfiltration Description (Palo Alto) Pivoting on the C2 domain, we identified one additional sample that…
Malware
Threat Group Cards: A Threat Actor Encyclopedia
Description A threat actor mentioned in a summary report only, so we don't know who they are yet. Information <https://cybersecuritylog.com/north-korean-hacker-recently-employed-social-media-to-launch-a-cyberattack> Last change to this card: 02 November 2021…
Added Sun 5 Apr
Threat Group Cards: A Threat Actor Encyclopedia
Home > List all groups > List all tools > List all groups using tool Karkoff Tool: Karkoff Names Karkoff MailDropper DropperBackdoor CACTUSPIPE OILYFACE Category Malware Type Backdoor, Dropper Description (Talos) In April, Cisco Talos identified an…
Malware
Added Thu 2 Apr
Threat Group Cards: A Threat Actor Encyclopedia
Home > List all groups > List all tools > List all groups using tool Janeleiro Tool: Janeleiro Names Janeleiro Category Malware Type Banking trojan, Backdoor, Keylogger, Info stealer, Credential stealer Description (ESET) This new threat, which we’ve named…
MalwareInfostealers
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.