Research reports
1,224 reports from 387 publishers45 added in the past week
5 reports, newest added first
Added Tue 24 Mar
Google-Calendar-as-C2-infrastructure-a-China-nexus-campaign-with-stealthy-tactics.pdf
GOOGLE CALENDAR AS C2 INFRASTRUCTURE: A CHINA-NEXUS CAMPAIGN... CHEN & HSU 2 VIRUS BULLETIN CONFERENCE SEPTEMBER 2025 ABSTRACT In recent years, China-nexus threat groups have increasingly adopted tactics to obscure their malware footprint, particularly…
Malware
Added Wed 15 Jan 2025
Sugarcoating-KANDYKORN-a-sweet-dive-into-a-sophisticated-MacOS-backdoor.pdf
No excerpt available.
Malware
Added Sat 14 Dec 2024
Let's go door with KCP
In 2022 we observed the use of new APT malware by an unknown China-based APT actor across several incidents in Japan. The malware uses KCP protocol for backdoor communication and was coded in Golang on multiple platform operating systems – we named it…
State-sponsoredMalware
Added Tue 10 Dec 2024
CrackedCantil-a-malware-symphony-delivered-by-cracked-software-performed-by-loaders-infostealers-ransomware-et-al.pdf
The digital landscape teems with diverse malware families, each engineered with distinct capabilities – ranging from data theft, deployment of additional malicious payloads, to destruction of data and more. Yet, beneath their varied functionalities, these…
RansomwareMalwareInfostealers
Added Fri 12 Apr 2024
Possible supply chain attack targeting South Asian government delivers Shadowpad
2 VIRUS BULLETIN CONFERENCE OCTOBER 2023 ABSTRACT Shadowpad is a malware family that has been involved in multiple advanced campaigns, starting in 2017 with a supply chain attack against NetSarang software, and an ASUS compromise in 2018, all attributed to…
MalwareSupply chain
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.