Research reports
1,224 reports from 387 publishers45 added in the past week
2 reports, newest added first
Added Tue 20 Oct
Retrohunting APT37: North Korean APT used VBA self decode technique to inject RokRat
Downloaded payload is a variant of a cloud-based RAT known as RokRat which has been used by this group since 2017. This sample compilation date is 29 Oct 2019. This RAT is known to steal data from a victim’s machine and send them to cloud services (Pcloud,…
State-sponsoredMalware
Added Fri 10 Apr
HelloKitty: When Cyberpunk met cy-purr-crime
On February 9, after discovering a compromise, CD Projekt Red (CDPR) announced to its 1+ million followers on Twitter that it was the victim of a ransomware attack against its systems (and made it clear they would not yield to the demands of the threat…
Ransomware
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.