Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

Filter by company: All Intel Recorded Future Kaseya

• ClickFix campaign uses fake macOS utilities lures to deliver infostealers

  Microsoft Security Blog

  T1543.004 96% T1555.003 96% T1059.002 96%
  7 hours ago
• OceanLotus suspected of using PyPI to deliver ZiChatBot malware

  Kaspersky Securelist

  T1195.001 98% T1055.001 91% T1071 64%
  10 hours ago
• DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware

  The Hacker News

  T1195.002 97% T1071.001 77% T1059.004 65%
  1 day ago
• Hackers Abuse DAEMON Tools Distribution Channel to Deliver Malicious Payloads

  GBHackers

  T1059.001 98% T1543.004 95% T1195.002 89%
  1 day ago
• Stealthy malware abuses Microsoft Phone Link to siphon SMS OTPs from enterprise PCs

  CSO Online

  T1053.005 95% T1557.001 69% T1111 57%
  1 day ago
• UAT-8302 and its box full of malware

  Cisco Talos Intelligence

  T1053.005 100% T1087.002 98% T1055.001 97%
  1 day ago
• Quasar Linux (QLNX) – A Silent Foothold in the Supply Chain: Inside a Full-Featured Linux RAT With Rootkit, PAM Backdoor, Credential Harvesting Capabilities

  Trend Micro Research

  T1195.001 98% T1574.006 98% T1014 96%
  2 days ago
• EtherRAT Distribution Spoofing Administrative Tools via GitHub Facades

  The Hacker News

  T1547.001 99% T1608.006 73% T1071 71%
  6 days ago
• UNC6692 Impersonates IT Help Desk via Microsoft Teams to Deploy SNOW Malware

  The Hacker News

  T1684.001 96% T1021.006 95% T1566.004 83%
  2026-04-23
• GopherWhisper: A burrow full of malware

  ESET WeLiveSecurity

  T1055.001 97% T1071 75% T1102.002 71%
  2026-04-23
• Malicious trading website drops malware that hands your browser to attackers

  Malwarebytes Labs

  T1055.012 99% T1176 86% T1176.001 84%
  2026-04-22
• Nightmare-Eclipse Tooling Seen in Real-World Intrusion

  Huntress

  T1078 98% T1055.001 97% T1003.002 96%
  2026-04-20
• A Deep Dive Into Attempted Exploitation of CVE-2023-33538

  Palo Alto Unit 42

  T1190 97% T1204.002 89% T1498 77%
  2026-04-16
• Signed, Trusted, and Abused: Proxy Execution via WebView2

  Black Hills InfoSec

  T1055.001 91% T1574.001 89% T1190 47%
  2026-04-15
• JanelaRAT: a financial threat targeting users in Latin America

  Kaspersky Securelist

  T1574.001 69% T1204.002 68% T1573.001 61%
  2026-04-13
• North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack

  Mandiant

  T1195.001 98% T1195.002 93% T1071.001 92%
  2026-03-31
• Pawn Storm Campaign Deploys PRISMEX, Targets Government and Critical Infrastructure Entities

  Trend Micro Research

  T1055.001 100% T1546.015 97% T1204.002 93%
  2026-03-26
• Security Flaw in AWS Bedrock Code Interpreter Raises Alarms

  Infosecurity Magazine

  T1525 42% T1071 35%
  2026-03-16
• Web Shells, Tunnels, and Ransomware: Dissecting a Warlock Attack

  Trend Micro Research

  T1059.001 99% T1055.001 98% T1567.002 97%
  2026-03-16
• Unmasking an Attack Chain of MuddyWater

  Huntress

  T1059.001 96% T1071 57% T1021.001 43%
  2026-03-06
• Multi-Stage "BadPaw" Malware Campaign Targets Ukraine

  Infosecurity Magazine

  T1204.002 77% T1566.002 62% T1566.001 39%
  2026-03-04
• Weekly Threat Bulletin – March 4th, 2026

  F5 Labs

  T1055.012 99% T1190 93% T1071.001 65%
  2026-03-03
• UNC1069 Targets Cryptocurrency Sector with New Tooling and AI-Enabled Social Engineering

  Mandiant

  T1056.001 99% T1548.006 99% T1555.003 97%
  2026-02-09
• Web Traffic Hijacking: When Your Nginx Configuration Turns Malicious

  Datadog Security Labs

  T1190 90% T1041 74% T1071 72%
  2026-02-04
• Tracing a Paper Werewolf campaign through AI-generated decoys and Excel XLLs

  Intezer

  T1071.001 98% T1564.004 92% T1030 83%
  2025-12-19
• The Rise of Collaborative Tactics Among China-aligned Cyber Espionage Campaigns

  Trend Micro Research

  T1190 97% T1003.001 93% T1055.001 87%
  2025-10-22
• VTPRACTITIONERS{SEQRITE}: Tracking UNG0002, Silent Lynx and DragonClone

  VirusTotal Blog

  T1553.002 92% T1204.002 92% T1059.001 91%
  2025-10-21
• Self-Propagating Malware Spreading Via WhatsApp, Targets Brazilian Users

  Trend Micro Research

  T1059.001 100% T1566.001 91% T1204.002 88%
  2025-10-03
• From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion

  The DFIR Report

  T1218.011 100% T1055.001 100% T1555.003 99%
  2025-09-29
• EvilAI Operators Use AI-Generated Code and Fake Apps for Far-Reaching Attacks

  Trend Micro Research

  T1012 100% T1547.001 99% T1053.005 99%
  2025-09-11
• An MDR Analysis of the AMOS Stealer Campaign Targeting macOS via ‘Cracked’ Apps

  Trend Micro Research

  T1555.003 100% T1553.001 98% T1204.002 95%
  2025-09-04
• TAOTH Campaign Exploits End-of-Support Software to Target Traditional Chinese Users and Dissidents

  Trend Micro Research

  T1566.002 92% T1525 71% T1566.001 71%
  2025-08-28
• NoBooze1 Malware Targets TP-Link Routers via CVE-2019-9082

  F5 Labs

  T1027.002 99% T1027 94% T1190 91%
  2025-07-16
• Delving Into the SparkRAT Remote Access Tool

  F5 Labs

  T1190 99% T1071.001 95% T1587.004 66%
  2025-06-03
• Cleo Malichus Malware Analysis CVE-2024-55956| Huntress

  Huntress

  T1105 81% T1573 76% T1059.001 74%
  2024-12-11
• APT Targeting Vietnamese Human Rights Defenders | Huntress

  Huntress

  T1053.005 100% T1547.001 100% T1055.001 99%
  2024-08-28
• DISGOMOJI Malware Used to Target Indian Government

  Volexity

  T1027.002 98% T1057 98% T1068 97%
  2024-06-13
• 3CX VoIP Software Compromise & Supply Chain Threats | Huntress

  Huntress

  T1055.001 91% T1486 89% T1195.002 88%
  2023-03-30
• Investigating Intrusions From Intriguing Exploits

  Huntress

  T1053.005 99% T1190 99% T1218.011 95%
  2023-02-08
• F5 Labs Investigates MaliBot

  F5 Labs

  T1621 59% T1556.006 55% T1219 44%
  2022-06-15
• Targeted APT Activity: BABYSHARK Is Out for Blood | Huntress

  Huntress

  T1053.005 99% T1566.001 93% T1059.001 89%
  2022-03-01
• Snakes on a Domain: An Analysis of a Python Malware Loader | Huntress

  Huntress

  T1055.012 99% T1055.001 99% T1053.005 95%
  2021-08-17
• Cobalt Strikes Again: An Analysis of Obfuscated Malware | Huntress

  Huntress

  T1059.001 99% T1055.001 99% T1547.001 95%
  2021-05-25
• Using CloudFront to Relay Cobalt Strike Traffic

  Black Hills InfoSec

  T1055.001 93% T1090.004 87% T1090.002 44%
  2019-08-15
• C2, C3, Whatever It Takes

  Black Hills InfoSec

  T1071 73% T1071.001 45%
  2018-05-17
• How to Build a Command & Control Infrastructure with Digital Ocean: C2K Revamped

  Black Hills InfoSec

  T1071.001 96% T1071 73%
  2018-03-22
• Can Engineers Build Networks Too Complicated for Humans to Operate? Part II: Making Sense of Network Activities and System Behaviors

  F5 Labs

  T1040 99% T1572 75% T1071 34%
  2017-11-02
• How to Build a C2 Infrastructure with Digital Ocean – Part 1

  Black Hills InfoSec

  T1071.001 80% T1572 73% T1583.001 72%
  2017-07-24
• Marcher Gets Close to Users by Targeting Mobile Banking, Android Apps, Social Media, and Email

  F5 Labs

  T1566.002 91% T1071.001 43% T1566.001 40%
  2017-04-07
• Bypassing Cylance: Part 1 – Using VSAgent.exe

  Black Hills InfoSec

  T1071 38%
  2017-03-27