| Skip to content | https://patch-diff.githubusercontent.com/DCounter/APTnotes#start-of-content |
|
| https://patch-diff.githubusercontent.com/ |
|
Sign in
| https://patch-diff.githubusercontent.com/login?return_to=https%3A%2F%2Fgithub.com%2FDCounter%2FAPTnotes |
| GitHub CopilotWrite better code with AI | https://github.com/features/copilot |
| GitHub SparkBuild and deploy intelligent apps | https://github.com/features/spark |
| GitHub ModelsManage and compare prompts | https://github.com/features/models |
| MCP RegistryNewIntegrate external tools | https://github.com/mcp |
| ActionsAutomate any workflow | https://github.com/features/actions |
| CodespacesInstant dev environments | https://github.com/features/codespaces |
| IssuesPlan and track work | https://github.com/features/issues |
| Code ReviewManage code changes | https://github.com/features/code-review |
| GitHub Advanced SecurityFind and fix vulnerabilities | https://github.com/security/advanced-security |
| Code securitySecure your code as you build | https://github.com/security/advanced-security/code-security |
| Secret protectionStop leaks before they start | https://github.com/security/advanced-security/secret-protection |
| Why GitHub | https://github.com/why-github |
| Documentation | https://docs.github.com |
| Blog | https://github.blog |
| Changelog | https://github.blog/changelog |
| Marketplace | https://github.com/marketplace |
| View all features | https://github.com/features |
| Enterprises | https://github.com/enterprise |
| Small and medium teams | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| App Modernization | https://github.com/solutions/use-case/app-modernization |
| DevSecOps | https://github.com/solutions/use-case/devsecops |
| DevOps | https://github.com/solutions/use-case/devops |
| CI/CD | https://github.com/solutions/use-case/ci-cd |
| View all use cases | https://github.com/solutions/use-case |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| View all industries | https://github.com/solutions/industry |
| View all solutions | https://github.com/solutions |
| AI | https://github.com/resources/articles?topic=ai |
| Software Development | https://github.com/resources/articles?topic=software-development |
| DevOps | https://github.com/resources/articles?topic=devops |
| Security | https://github.com/resources/articles?topic=security |
| View all topics | https://github.com/resources/articles |
| Customer stories | https://github.com/customer-stories |
| Events & webinars | https://github.com/resources/events |
| Ebooks & reports | https://github.com/resources/whitepapers |
| Business insights | https://github.com/solutions/executive-insights |
| GitHub Skills | https://skills.github.com |
| Documentation | https://docs.github.com |
| Customer support | https://support.github.com |
| Community forum | https://github.com/orgs/community/discussions |
| Trust center | https://github.com/trust-center |
| Partners | https://github.com/partners |
| GitHub SponsorsFund open source developers | https://github.com/sponsors |
| Security Lab | https://securitylab.github.com |
| Maintainer Community | https://maintainers.github.com |
| Accelerator | https://github.com/accelerator |
| Archive Program | https://archiveprogram.github.com |
| Topics | https://github.com/topics |
| Trending | https://github.com/trending |
| Collections | https://github.com/collections |
| Enterprise platformAI-powered developer platform | https://github.com/enterprise |
| GitHub Advanced SecurityEnterprise-grade security features | https://github.com/security/advanced-security |
| Copilot for BusinessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/premium-support |
| Pricing | https://github.com/pricing |
| Search syntax tips | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
| documentation | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
|
Sign in
| https://patch-diff.githubusercontent.com/login?return_to=https%3A%2F%2Fgithub.com%2FDCounter%2FAPTnotes |
|
Sign up
| https://patch-diff.githubusercontent.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E&source=header-repo&source_repo=DCounter%2FAPTnotes |
| Reload | https://patch-diff.githubusercontent.com/DCounter/APTnotes |
| Reload | https://patch-diff.githubusercontent.com/DCounter/APTnotes |
| Reload | https://patch-diff.githubusercontent.com/DCounter/APTnotes |
|
DCounter
| https://patch-diff.githubusercontent.com/DCounter |
| APTnotes | https://patch-diff.githubusercontent.com/DCounter/APTnotes |
| kbandla/APTnotes | https://patch-diff.githubusercontent.com/kbandla/APTnotes |
|
Notifications
| https://patch-diff.githubusercontent.com/login?return_to=%2FDCounter%2FAPTnotes |
|
Fork
0
| https://patch-diff.githubusercontent.com/login?return_to=%2FDCounter%2FAPTnotes |
|
Star
0
| https://patch-diff.githubusercontent.com/login?return_to=%2FDCounter%2FAPTnotes |
|
0
stars
| https://patch-diff.githubusercontent.com/DCounter/APTnotes/stargazers |
|
884
forks
| https://patch-diff.githubusercontent.com/DCounter/APTnotes/forks |
|
Branches
| https://patch-diff.githubusercontent.com/DCounter/APTnotes/branches |
|
Tags
| https://patch-diff.githubusercontent.com/DCounter/APTnotes/tags |
|
Activity
| https://patch-diff.githubusercontent.com/DCounter/APTnotes/activity |
|
Star
| https://patch-diff.githubusercontent.com/login?return_to=%2FDCounter%2FAPTnotes |
|
Notifications
| https://patch-diff.githubusercontent.com/login?return_to=%2FDCounter%2FAPTnotes |
|
Code
| https://patch-diff.githubusercontent.com/DCounter/APTnotes |
|
Pull requests
0
| https://patch-diff.githubusercontent.com/DCounter/APTnotes/pulls |
|
Actions
| https://patch-diff.githubusercontent.com/DCounter/APTnotes/actions |
|
Projects
0
| https://patch-diff.githubusercontent.com/DCounter/APTnotes/projects |
|
Wiki
| https://patch-diff.githubusercontent.com/DCounter/APTnotes/wiki |
|
Security
Uh oh!
There was an error while loading. Please reload this page.
| https://patch-diff.githubusercontent.com/DCounter/APTnotes/security |
| Please reload this page | https://patch-diff.githubusercontent.com/DCounter/APTnotes |
|
Insights
| https://patch-diff.githubusercontent.com/DCounter/APTnotes/pulse |
|
Code
| https://patch-diff.githubusercontent.com/DCounter/APTnotes |
|
Pull requests
| https://patch-diff.githubusercontent.com/DCounter/APTnotes/pulls |
|
Actions
| https://patch-diff.githubusercontent.com/DCounter/APTnotes/actions |
|
Projects
| https://patch-diff.githubusercontent.com/DCounter/APTnotes/projects |
|
Wiki
| https://patch-diff.githubusercontent.com/DCounter/APTnotes/wiki |
|
Security
| https://patch-diff.githubusercontent.com/DCounter/APTnotes/security |
|
Insights
| https://patch-diff.githubusercontent.com/DCounter/APTnotes/pulse |
| Branches | https://patch-diff.githubusercontent.com/DCounter/APTnotes/branches |
| Tags | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tags |
| https://patch-diff.githubusercontent.com/DCounter/APTnotes/branches |
| https://patch-diff.githubusercontent.com/DCounter/APTnotes/tags |
| 390 Commits | https://patch-diff.githubusercontent.com/DCounter/APTnotes/commits/master/ |
| https://patch-diff.githubusercontent.com/DCounter/APTnotes/commits/master/ |
| 2008 | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tree/master/2008 |
| 2008 | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tree/master/2008 |
| 2009 | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tree/master/2009 |
| 2009 | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tree/master/2009 |
| 2010 | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tree/master/2010 |
| 2010 | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tree/master/2010 |
| 2011 | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tree/master/2011 |
| 2011 | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tree/master/2011 |
| 2012 | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tree/master/2012 |
| 2012 | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tree/master/2012 |
| 2013 | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tree/master/2013 |
| 2013 | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tree/master/2013 |
| 2014 | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tree/master/2014 |
| 2014 | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tree/master/2014 |
| 2015 | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tree/master/2015 |
| 2015 | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tree/master/2015 |
| 2016 | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tree/master/2016 |
| 2016 | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tree/master/2016 |
| docs | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tree/master/docs |
| docs | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tree/master/docs |
| historical | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tree/master/historical |
| historical | https://patch-diff.githubusercontent.com/DCounter/APTnotes/tree/master/historical |
| .gitignore | https://patch-diff.githubusercontent.com/DCounter/APTnotes/blob/master/.gitignore |
| .gitignore | https://patch-diff.githubusercontent.com/DCounter/APTnotes/blob/master/.gitignore |
| APTnotes_summary.csv | https://patch-diff.githubusercontent.com/DCounter/APTnotes/blob/master/APTnotes_summary.csv |
| APTnotes_summary.csv | https://patch-diff.githubusercontent.com/DCounter/APTnotes/blob/master/APTnotes_summary.csv |
| README.md | https://patch-diff.githubusercontent.com/DCounter/APTnotes/blob/master/README.md |
| README.md | https://patch-diff.githubusercontent.com/DCounter/APTnotes/blob/master/README.md |
| contributors.md | https://patch-diff.githubusercontent.com/DCounter/APTnotes/blob/master/contributors.md |
| contributors.md | https://patch-diff.githubusercontent.com/DCounter/APTnotes/blob/master/contributors.md |
| papers.md | https://patch-diff.githubusercontent.com/DCounter/APTnotes/blob/master/papers.md |
| papers.md | https://patch-diff.githubusercontent.com/DCounter/APTnotes/blob/master/papers.md |
| README | https://patch-diff.githubusercontent.com/DCounter/APTnotes |
| https://patch-diff.githubusercontent.com/DCounter/APTnotes#apt-notes |
| https://gitter.im/kbandla/APTnotes?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge |
| https://patch-diff.githubusercontent.com/DCounter/APTnotes#archived |
| https://github.com/aptnotes/data | https://github.com/aptnotes/data |
| new issue | https://github.com/aptnotes/data/issues |
| README | https://github.com/aptnotes/data/blob/master/README.md |
| https://patch-diff.githubusercontent.com/DCounter/APTnotes#2016 |
| GRIZZLY STEPPE - Russian Malicious Cyber Activity | https://app.box.com/s/5q1827f6ig94an0buhsk9i8k7e0eju8w |
| Use of Fancy Bear Android Malware tracking of Ukrainian Artillery Units | https://app.box.com/s/8lj785rl608lsmf80bwvtuxb7b9mscxy |
| PROMETHIUM and NEODYMIUM: Parallel zero-day attacks targeting individuals in Europe | https://app.box.com/s/12f9s3qxwk4oyr1vwfpaxco9p50xc2v8 |
| Malware Actors Using Nic Cyber Security Themed Spear Phishing To Target Indian Government Organizations | https://app.box.com/s/zsm16yh2sffqr9caehmifmvw2jrrwiga |
| It's Parliamentary: KeyBoy and the targeting of the Tibetan Community | https://app.box.com/s/q7rywbgt6s5c380vvjpk643ppcdtdl8v |
| New Carbanak / Anunak Attack Methodology | https://app.box.com/s/cbclbgiu54ihivxe7bvblwsv1e8jq44h |
| PowerDuke: Widespread Post-Election Spear Phishing Campaigns Targeting Think Tanks and NGOs | https://app.box.com/s/wd73vlkdiry8hibkbqvmtsn0bhmzkhgk |
| When The Lights Went Out: Ukraine Cybersecurity Threat Briefing | https://app.box.com/s/pbj4aeiapdbblzs19gzymgsk73sxbe56 |
| BLACKGEAR Espionage Campaign Evolves, Adds Japan To Target List | https://app.box.com/s/ws5vsndqqi7s17ysrfa39260wqy2ktyt |
| En Route with Sednit Part 3: A Mysterious Downloader | https://app.box.com/s/p4ywd9iqr5fr48nbz5o0nfwwgjkq5itk |
| BITTER: A Targeted attack against Pakistan | https://app.box.com/s/iegu4jz7v3q0vcvgrkzrnq3w28q3pyne |
| Moonlight - Targeted attacks in the Middle East | https://app.box.com/s/f7p6hmdojxrh6mzs91yvjmpgz528b7h9 |
| Houdini's Magic Reappearance | https://app.box.com/s/y4zzbao34iv483op59h1dettrwgoe7li |
| En Route with Sednit Part 2: Observing the Comings and Goings | https://app.box.com/s/lmaensc7vzdugsy1nsh4bwligl07q53b |
| En Route with Sednit Part 1: Approaching the Target | https://app.box.com/s/c7oz0zci5gxsbgnucxwah82bfdj0boe0 |
| Wave your false flags! Deception tactics muddying attribution in targeted attacks | https://app.box.com/s/6smqqgagrck8ltwztwnw08x1ope6k0mi |
| On the StrongPity Waterhole Attacks Targeting Italian and Belgian Encryption Users | https://app.box.com/s/c9w0xp0mgndij268ku7ti5ee4lxu54bv |
| Belling the BEAR | https://app.box.com/s/xpj87wwmxjkl3cykpyjbekaqhb3v4py6 |
| Sofacy's Komplex OS X Trojan | https://app.box.com/s/w1qrcz1z9bx2dwt4gegv0h940ex35hlt |
| Hunting Libyan Scorpions | https://app.box.com/s/pov6xl0nvac5iaq4kafyw7p8ylmx3p8d |
| Buckeye cyberespionage group shifts gaze from US to Hong Kong | https://app.box.com/s/0rfkkv27x039vbqsblzdsm530ii2ymjl |
| The Million Dollar Dissident: NSO Group's iPhone Zero-Days used against a UAE Human Rights Defender | https://app.box.com/s/adaa4lfxeohb7ehxv3ao6104gmvq226i |
| Visa Alert and Update on the Oracle Breach | https://app.box.com/s/ejrvucttqc6eanln2kkmqtjklg563jxg |
| Carbanak Oracle Breach | https://app.box.com/s/4sfhcqaaxwui1dbvd13254wm5wfy9bmk |
| The ProjectSauron APT | https://app.box.com/s/3n10k8gbwt7pfebhqjg8n2mwpo6m3u7j |
| Moonsoon - Analysis of an APT Campaign | https://app.box.com/s/cdivyys0ej34bh9r151vybct5nlqy4l5 |
| Operation Manul | https://app.box.com/s/0dhelcscwtesl3biuldgrbeddaffwneu |
| The Dropping Elephant - aggressive cyber-espionage in the Asian region | https://app.box.com/s/9yczw853br9y9bs98j44uwc3kx6e414y |
| NetTraveler APT Targets Russian, European Interests | https://app.box.com/s/u16hs4trjkamdxkb8xth6e5ugckr3230 |
| Unveiling Patchwork the Copy Paste APT | https://app.box.com/s/r9pw9xbcy2fz2ssewg5p7lqyvtn1b6jc |
| Espionage toolkit targeting Central and Eastern Europe uncovered | https://app.box.com/s/kmb22xnoniwxfkhsw8r3tkpo5rko0w1a |
| Pacifier APT | https://app.box.com/s/xcu346jhiokohlj9300q6hif06swac57 |
| Asruex: Malware Infecting through Shortcut Files | https://app.box.com/s/mxvgs6dx4kixjv5s29yc6m81kii8opbw |
| Prince of Persia Game Over | https://app.box.com/s/drj4vb73cv87ok5wks21rynlq3236793 |
| Tracking Elirks Variants in Japan: Similarities to Previous Attacks | https://app.box.com/s/ki60vxvdi2wzqrsrqik0yvg4sdwsbbal |
| Visiting The Bear Den A Journey in the Land of (Cyber-)Espionage | https://app.box.com/s/ifsplrz92ssuo3mhgwadkgoc19e5y56e |
| Findings from Analysis of DNC Intrusion Malware | https://app.box.com/s/406jm438rm7s65du4d4qnj7iwj5bkphv |
| Reverse-engineering DUBNIUM's Flash-targeting exploit | https://app.box.com/s/rsvvnrm7ct991olqsvbqrie614xt9f3b |
| Flash zero-day exploit deployed by the ScarCruft APT Group | https://app.box.com/s/0vp77yw58zhqmt9xoez6f7nmicbgkqrw |
| Threat Group 4127 Targets Hillary Clinton Presidential Campaign | https://app.box.com/s/jfku9mhjnf150uokw2owfxy0isj3pi28 |
| Threat Group-4127 Targets Hillary Clinton Presidential Campaign | https://app.box.com/s/uy6iv3fj7akwzrj9zq1gv403b35twaoy |
| Group5: Syria and the Iranian Connection | https://app.box.com/s/2475tuv4oigvtrdy1jx6p2lct9ebzlcb |
| New Sofacy Attacks Against US Government Agency | https://app.box.com/s/49rs6u4cyq43khamdah90y9zyacjzmbr |
| Reverse-engineering DUBNIUM | https://app.box.com/s/f0xelxxs6ey9nms9fox1uugy8nuof40t |
| Operation DustySky Part 2 Indicators | https://app.box.com/s/q9amfvko7h3x9g4rgcno0vy25btsv1rw |
| Operation DustySky Part 2 | https://app.box.com/s/ldd528ht55m4avot9b485mi6529f8c3r |
| Bears in the Midst: Intrusion into the Democratic National Committee | https://app.box.com/s/x5sz7dw4as54b1rif3mdtqwzzj2aek68 |
| Apt Group Sends Spear Phishing Emails To Indian Government Officials | https://app.box.com/s/5hn3fparz8n2bmjpwzvxbds7gcnb7kum |
| APT Group Sends Spear Phishing Emails to Indian Government Officials | https://app.box.com/s/s0yj8qsfhkf81hpyrtdmhpv3lrmd5p5n |
| IRONGATE ICS Malware: Nothing to See Here...Masking Malicious Activity on SCADA Systems | https://app.box.com/s/6s871m2xa63x4ru8glto9crcv6kk8jor |
| Stealth Falcon | https://app.box.com/s/is08b06f6fj6a9z6wymf4u5y5xjm6opr |
| IXESHE Derivative IHEATE Targets Users in America | https://app.box.com/s/8glps1qnq0glc2c2b2wsmeb4019f9wpd |
| CVE-2015-2545: overview of current threats | https://app.box.com/s/ztb6a52hkbenfurrecc3jifk9b67ie79 |
| New Wekby Attacks Use DNS Requests As Command and Control Mechanism | https://app.box.com/s/5dcx9g1lrt3m9y2wgmxpyiv4malmdnpp |
| Operation Ke3chang Resurfaces With New TidePool Malware | https://app.box.com/s/vwuocstge7xud74xhnw9s98h2m812pyr |
| APT Case RUAG Technical Report | https://app.box.com/s/rabwkf8pmoxndj0n0nlktvc2eti2381k |
| Targeted Attacks against Banks in the Middle East | https://app.box.com/s/43ovij7jz7isl93tow4s3f89yhuiwu4e |
| Operation C-Major Actors Also Used Android BlackBerry Mobile Spyware Against Targets | https://app.box.com/s/xua6557tccyx7h0ksmjnu8u5bra3z15n |
| Indian organizations targeted in Suckfly attacks | https://app.box.com/s/nekeu5y0v2yk4rdwpuq8y1ahyyuaduen |
| Operation Groundbait:Analysis of a surveillance toolkit | https://app.box.com/s/hq5t0xjxxbkeulf942ufeiyf3k4zq9b6 |
| Mofang: A politically motivated information stealing adversary | https://app.box.com/s/p2oftago51ohnku082ztx1kbvaa1lxps |
| Exploring CVE-2015-2545 and its users | https://app.box.com/s/g9pew9ajkp259c2t99mh4xspsev61hgm |
| Prince of Persia: Infy Malware Active In Decade of Targeted Attacks | https://app.box.com/s/zkjmru7uknf1p90mqn81ycf867le78tn |
| Turbo Twist: Two 64-bit Derusbi Strains Converge | https://app.box.com/s/ex6wh2qsg1c29sob6f70x1q6eoe3v64w |
| PLATINUM Targeted attacks in South and Southeast Asia | https://app.box.com/s/ursk78m124t1lagjnu2862kumrnoshcp |
| The Ghost Dragon | https://app.box.com/s/xr1ykgout1c9ho5rotpop09smkawg5me |
| Looking Into a Cyber-Attack Facilitator in the Netherlands (Appendix) | https://app.box.com/s/1vjcdqrpcvtb5fqfehk3ehxj6qh8eaf0 |
| Looking Into a Cyber-Attack Facilitator in the Netherlands | https://app.box.com/s/ub5txv2ky12s7kuuv7d1vzqvkympepaq |
| Between Hong Kong and Burma: Tracking UP007 and SLServer Espionage Campaign | https://app.box.com/s/goyec2m2zwl5fi4sv3ayzwhudcfly1lv |
| The Four Element Sword Engagement | https://app.box.com/s/19ghms2qz9raaquoxu2bh3paoqyx545r |
| Taiwan Presidential Election: A Case Study on Thematic Targeting | https://app.box.com/s/lyradpx3h7eic3dyiz33ufiia0wj7otn |
| Suckfly: Revealing the secret life of your code signing certificates | https://app.box.com/s/p3tmorslyk9q1s3s6eul4xa4148o6fp2 |
| Shifting Tactics Tracking Changes In Years Long Espionage Campaign Against Tibetans | https://app.box.com/s/wb0vzmvsgude6yby0d5bn02cxebuuvhc |
| Operation Transparent Tribe | https://app.box.com/s/2terwf3c3e8iunw8v7kj83p2zw44nns2 |
| FROM SEOUL TO SONY: THE HISTORY OF THE DARKSEOUL GROUP AND THE SONY INTRUSION MALWARE DESTOVER | https://app.box.com/s/xyyord0b806e6or2nh92coxw2areyyx4 |
| Operation Blockbuster | https://app.box.com/s/rhn69xecfqe8k2abwmn43ilmd59y1we0 |
| Operation Duststorm | https://app.box.com/s/dt9mscechq7heg83z7vgujp5ujjzd97c |
| A Look Into Fysbis: Sofacy's Linux Backdoor | https://app.box.com/s/2x3mrik225skob8rxd50rp63wlq0fp6v |
| Poseidon Group | https://app.box.com/s/94ct7ny9breqnyhdwmcyv982w9qj2rxi |
| Know Your Enemies 2.0: A Primer on Advanced Persistent Threat Groups | https://app.box.com/s/kj9eyf73oh2hi8zum6a8lygzqb5jhsm7 |
| Attack On French Diplomat Linked To Operation Lotus Blossom | https://app.box.com/s/cbxo6pdyf8xua2eg5dn44ni47wbs0le0 |
| T9000: Advanced Modular Backdoor Uses Complex Anti Analysis Techniques | https://app.box.com/s/u9eldsgol20dmuw0nljeqo9nlw4r9ms7 |
| Emissary Trojan Changelog: Did Operation Lotus Blossom Cause It To Evolve | https://app.box.com/s/oyqcfzoa1hfq5evuymj5bqfitkqlfp4v |
| BlackEnergy APT Attacks in Ukraine employ spearphishing with Word documents | https://app.box.com/s/igygz8ihex1hok5r1dp215ui0gz1ghwr |
| Scarlet Mimic | https://app.box.com/s/zhour42vz6sxf7aws3oj70i1rd5ib8kx |
| RESEARCH SPOTLIGHT: NEEDLES IN A HAYSTACK | https://app.box.com/s/6tlgwpp0u2lzahlrhtymkp2nnbtd421f |
| Uncovering the Seven Pointed Dagger | https://app.box.com/s/z1uanuv1vn3vw5iket1r6bqrmlra0gpn |
| Operation Dusty Sky (indicators) | https://app.box.com/s/5iym3huegu3ssaejl0rr268sr7qy6seb |
| Operation Dusty Sky | https://app.box.com/s/cydpeasz6l8cv9oo99o4tpazd5tq4xkm |
| BlackEnergy by the SSHBearDoor: attacks against Ukrainian news media and electric industry | https://app.box.com/s/uo31npu9sese34f1ppggmrug48x7rlqp |
| https://patch-diff.githubusercontent.com/DCounter/APTnotes#2015 |
| ELISE: Security Through Obesity | https://app.box.com/s/xjjieg8w489osjfp4jk7vgum37a6ibro |
| BBSRAT Attacks Targeting Russian Organizations Linked to Roaming Tiger | https://app.box.com/s/noqd4tec6z6nfv8w4z48vzvwfo3goegl |
| Dissecting the Malware Involved in the INOCNATION Campaign | https://app.box.com/s/dl6izicyky1x946ueo77nn2w8c5jxgm3 |
| Evolution of Cyber Threats in the Corporate Sector | https://app.box.com/s/ql84nxbrheluzhi3bt7k48damnuz00u5 |
| Iran-based attackers use back door threats to spy on Middle Eastern targets | https://app.box.com/s/oeix6b4jcwdkwyrzq35brtmq2ktoyxnw |
| PEERING INTO GLASSRAT: A Zero Detection Trojan from China | https://app.box.com/s/3jg797vagekvf1xjyz1j49esdhm4fmjs |
| Microsoft Security Intelligence Report (Volume 19) | https://app.box.com/s/qjvx7sdbo7cufb5b8putfyqn8ku82xq2 |
| Rocket Kitten: A Campaign With 9 Lives | https://app.box.com/s/vhe51fr5m6kqqzbkkcuukta6nucn9p6a |
| Pay No Attention to the Server Behind the Proxy: Mapping FinFisher's Continuing Proliferation | https://app.box.com/s/46ab2f2m26oaqu7r2kflfig8ni686gcl |
| THE DUKES: 7 years of Russian cyberespionage | https://app.box.com/s/ipsg0t3krs811gesknvxrdsqhsknbydj |
| Carbanak is packing new guns | https://app.box.com/s/h1dn7d6ptcpwjbcfj468fy5201ev4bbz |
| Threat Group-3390 Targets Organizations For Cyberespionage | https://app.box.com/s/6j0fm3yepzf11engl7t213zltahujorc |
| RSA Research Terracotta VPN: Enabler Of Advanced Threat Anonymity | https://app.box.com/s/cx1sjzb1q7slnjho5n1n0iuc7y9om2ll |
| Operation Potao Express: Analysis Of A Cyber-Espionage Toolkit | https://app.box.com/s/hji6y2fi3nwqbd8mtx6kiy6yckizwq2w |
| The Black Vine Cyberespionage Group | https://app.box.com/s/0ahidgtzecyx94hgvxoai9kmu5r6yw49 |
| Hammertoss: Stealthy Tactics Define A Russian Cyber Threat Group | https://app.box.com/s/xqp6s3fb8w65f6mkm1zc89ftrl8lyfw7 |
| Duke APT Group's Latest Tools: Cloud Services And Linux Support | https://app.box.com/s/4oehib8xu2boak3hd72sh1f9ka9gwwh7 |
| China Hacks The Peace Palace: All Your Eez's Are Belong To Us | https://app.box.com/s/yso9235awisw1dmjh8dyqpi5r9nokzcx |
| Watering Hole Attack On Aerospace Firm Exploits CVE-2015-5122 To Install Isspace Backdoor | https://app.box.com/s/8izjpumhif40wt5jzbe6yej6j1sewt0b |
| Tracking Minidionis: Cozycar's New Ride Is Related To Seaduke | https://app.box.com/s/s29hmikrmmik5v7eumpb4tipkdlyqhjl |
| "Forkmeiamfamous": Seaduke, Latest Weapon In The Duke Armory | https://app.box.com/s/kse3c1yd5gqku9e2nfmsny7gp99zlgu4 |
| Butterfly: Corporate Spies Out For Financial Gain | https://app.box.com/s/e8hbsm0zsrjryz3suwvutn1zjfpugwak |
| Wild Neutron _ Economic Espionage Threat Actor Returns With New Tricks | https://app.box.com/s/anoc1ews8p5jil4pewlafksf3d4oym5x |
| Dino: The Latest Spying Malware From An Allegedly French Espionage Group Analyzed | https://app.box.com/s/wavmm2zrlt4n1jri8byn31b9fb1wo35i |
| Unfin4Ished Business | https://app.box.com/s/7ep6vyqosrj2b26t6udv30jjdevkpv6f |
| Games Are Over: Winnti Is Now Targeting Pharmaceutical Companies | https://app.box.com/s/f090ea4pi40hoaxe6otzfw7yl65ylw6y |
| Operation Lotusblossom | https://app.box.com/s/xhn6ru62qqom1kuxoe3mxnqrtb1sqw2q |
| Target Attacks Against Tibetan And Hong Kong Groups Exploiting CVE-2014-4114 | https://app.box.com/s/ma7v20ug1ij6dv1bxmb2qn69hgnr5nck |
| The Naikon APT: Tracking Down Geo-Political Intelligence Across APAC, One Nation At A Time | https://app.box.com/s/zuyuhxayshyuaypjoxfm0nu8d5tivqih |
| The Duqu 2.0 Technical Details | https://app.box.com/s/9bejel60h3doxinwxdfyhig5nsqz05ga |
| Duqu 2.0: A Comparison To Duqu | https://app.box.com/s/yfoqrf6r0i0ih38pl0bmtud3ke0e6vhf |
| Blue Termite (Internet Watch) | https://app.box.com/s/0qhbl4o5adpf8fhdun7kp6cfz4ql3rdj |
| An Iranian Cyber-Attack Campaign Against Targets In The Middle East | https://app.box.com/s/mf27ius5sdlorh8nl4h4fr643g2i9orb |
| Oceanlotus | https://app.box.com/s/fapwtkrudntz5po7c4u34l54j0vys9po |
| Grabit And The Rats | https://app.box.com/s/x7jlktifxatv3oam1altle8km1xwju7b |
| Analysis On APT-To-Be Attack That Focusing On China's Government Agency | https://app.box.com/s/zeacvn2ae7aunrlsfjm8kbt4nbf6yn0z |
| Dissecting Linux/Moose: The Analysis Of A Linux Router-Based Worm Hungry For Social Networks | https://app.box.com/s/38tsu5p4cc9kevuiiaxrptw3wrgksguk |
| The Msnmm Campaigns: The Earliest Naikon APT Campaigns | https://app.box.com/s/nbtyzfb5j5x9d2qznmj3bzcpa2e8kezj |
| Operation Oil Tanker: The Phantom Menace | https://app.box.com/s/xrwk7gqk44dp89fioubewttrw8a88im1 |
| Cmstar Downloader: Lurid And Enfal's New Cousin | https://app.box.com/s/67esnb1ppzsgyo3mm5es3zs8khtf3rpe |
| Operation Tropic Trooper: Relying On Tried-And-Tested Flaws To Infiltrate Secret Keepers | https://app.box.com/s/h3xtomk798hufzzqxnhn2kjmvt6yrcxh |
| Cylance Spear Team: A Threat Actor Resurfaces | https://app.box.com/s/ma0qrrczbji4grvjbezpeugf3gru084x |
| APT28 Targets Financial Markets: Zero Day Hashes Released | https://app.box.com/s/g55oxdd3q63hyngbjm4fbipfct94wrye |
| Dissecting The Kraken | https://app.box.com/s/r5vy0kolgdxwwby2wjo523devdbt5leg |
| Targeted Attack on France's TV5Monde | https://app.box.com/s/ightjgw5rkaldfpfel7q9v6p3pcqhqat |
| Attacks Against Israeli & Palestinian Interests | https://app.box.com/s/aaai5lu6q5wy0wp25m34oh383wmtg54m |
| Operation Clandestine Wolf _ Adobe Flash Zero-Day In APT3 Phishing Campaign | https://app.box.com/s/vxnua4o5c8u12xl4r7e5zkndpw65wz0m |
| Cozyduke | https://app.box.com/s/wig4z9nwq6wjxf3i4aslu9qro14pgsbe |
| The Cozyduke APT | https://app.box.com/s/8vksggruwwqzg7a4y7xrsrysrje56pqn |
| Sofacy II_ Same Sofacy, Different Day | https://app.box.com/s/dm3fbeb7hl95ilno014ftskoc1vi7n1r |
| Operation Russiandoll: Adobe & Windows ZeroDay Exploits Likely leveraged By Russia's APT28 | https://app.box.com/s/oj4sr8vifeb03qe51newafin81tu8poy |
| Hellsing Indicators Of Compromise | https://app.box.com/s/ralrn76f32axakdv2fdl4kwtxqxvwee8 |
| The Chronicles Of The Hellsing APT: The Empire Strikes Back | https://app.box.com/s/ob16ltqxv6urff6z1ore9i6t4308cxy6 |
| APT30 And The Mechanics Of A Long-Running Cyber Espionage Operation | https://app.box.com/s/5jjomo7k001inllirt5lj83lu92ath7d |
| RSA Incident Response: An APT Case Study | https://app.box.com/s/tjoi82cp4iq6xx561qcu3xjr2rmfgmo1 |
| Volatile Cedar Threat Intelligence And Research | https://app.box.com/s/jgl1n5xvzu3kp7aoi3cd9r407kjfzjcc |
| Operation Woolen-Goldfish When Kittens Go Phishing | https://app.box.com/s/pqe4y802utfswg27g3jeyaup46zje5b0 |
| Inside The Equationdrug Espionage Platform | https://app.box.com/s/vdy6lfmpvu6gzglsc3d7sade6tp9gi7e |
| Tibetan Uprising Day Malware Attacks | https://app.box.com/s/43vz10qmcubl6d3cCVEzh2ahb9rbmyyj |
| The Anthem Hack: All Roads Lead To China | https://app.box.com/s/7rzfjpwud8blv668j1kxa7qmhcadn6pr |
| Plugx Goes To The Registry (And India) | https://app.box.com/s/jfuf6eo3az72qrvh6ueke42ft9f23ztz |
| Southeast Asia: An Evolving Cyber Threat Landscape | https://app.box.com/s/h8kx7u7euolv1d6kjup0bxoujjikcbil |
| Scanbox Ii | https://app.box.com/s/o83u5pekus9251w0cl5lo2m1k5u0u2vn |
| Shooting Elephants | https://app.box.com/s/qog0dtpldhebhlasl12z3j82e0uv8t26 |
| The Desert Falcons Targeted Attacks | https://app.box.com/s/y45wyjrr4tnz2jlt93pk6giurxpg7ue7 |
| Carbanak APT The Great Bank Robbery | https://app.box.com/s/p7qzcury97tuwk26694uutujwqmwqyhe |
| Equation Group: Questions And Answers | https://app.box.com/s/reidof9i3qnjdq4t0k49o392g8r98tbt |
| Operation Arid Viper: Bypassing The Iron Dome | https://app.box.com/s/uqh30535vxopnp0achnlcemu2034aa26 |
| Global Threat Intel Report | https://app.box.com/s/xbbiyzpb3614bdaxuu3rs96n7f4ysppa |
| Pawn Storm Update: Ios Espionage App Found | https://app.box.com/s/9b7dfetwel6ywbcfai2wa0ja20cym721 |
| Behind The Syrian Conflict's Digital Front Lines | https://app.box.com/s/qriikjn5436zpiyazh8ta7gbzbd04onf |
| Backdoor.Winnti Attackers Have A Skeleton In Their Closet? | https://app.box.com/s/89pqnoimwdkrmyhxwqj5pp17jtjm4lmc |
| Analysis Of A Recent Plugx Variant - P2P Plugx | https://app.box.com/s/outg1oalwwfvd86eopmgv2pskekzmr4t |
| An Analysis Of Regin's Hopscotch And Legspin | https://app.box.com/s/yezsypczjmt973gpcqfqh5yf9po4zr3c |
| Scarab Attackers Took Aim At Select Russian Targets Since 2012 | https://app.box.com/s/pkoancu0b09aifvm2qfu6tdl8w0l5dqz |
| The Waterbug Attack Group | https://app.box.com/s/nrf432kfdk6kadkvbclgykekocn4pzzu |
| Reversing The Inception APT Malware | https://app.box.com/s/sctzfr6aoagpzb9aoajcodvn6we7e055 |
| Analysis Of Project Cobra | https://app.box.com/s/vuxbnmnptzygbuxkqbaq90vgm35hpcdv |
| Evolution Of Sophisticated Spyware: From Agent.Btz To Comrat | https://app.box.com/s/gqksdtk0gogqzzzbg2w6b4y7fej6f26t |
| Insight In To A Strategic Web Compromise And Attack Campaign Against Hong Kong Infrastructure | https://app.box.com/s/9bt05cgrk8vbmylm5odno0k85s39kny0 |
| Skeleton Key Malware Analysis | https://app.box.com/s/elb9hgj4rvcajilnlh67kpgoskjqjra0 |
| https://patch-diff.githubusercontent.com/DCounter/APTnotes#2014 |
| Anunak: Apt Against Financial Institutions | https://app.box.com/s/exmsfcvad1sjqtmvtzbiil9k52js62ir |
| Operation Poisoned Helmand | https://app.box.com/s/emf5ke7j5q12sku7vvvb0c1hbk70fygb |
| Alert (Ta14-353A) Targeted Destructive Malware | https://app.box.com/s/lldbbamo2r9d59jf9ztlif93d6o2p2uw |
| Malware Attack Targeting Syrian Isis Critics | https://app.box.com/s/bnq1jfzfmvflkui8zw06fkp9c0x5dgxq |
| Wiper Malware _ A Detection Deep Dive | https://app.box.com/s/efz1qmraxgqzenl5mzyeqtrh8kg1nktb |
| Bots, Machines, And The Matrix | https://app.box.com/s/91ckw3z2lh26ylhxbjbjirjuyv5oslul |
| Vinself Now With Steganography | https://app.box.com/s/uy1tzn58yjoarnrftgs9d8ieucwf4029 |
| Cloud Atlas: Redoctober Apt Is Back In Style | https://app.box.com/s/pyjpzua55mu6j1my5jegdiiovmpx35yi |
| Vulnerability, Malicious Code Appeared In The Mbr Destruction Function Using Hangul File | https://app.box.com/s/q8gx5wedudaui491qn6i4d7dxsnmuyla |
| W32/Regin, Stage #1 | https://app.box.com/s/358saagkwt3gqy6w62ed6xo33w175r0y |
| W64/Regin, Stage #1 | https://app.box.com/s/2ifpyh8kjoxsvrj9dnqfxfrb2go1pu3a |
| The Inception Framework: Cloud-Hosted Apt | https://app.box.com/s/vny8b4ubmxo421amxtk8tvk4b9x1vz52 |
| The 'Penquin' Turla | https://app.box.com/s/5gfajyyz8firhnttdo72j0iz6uo4eo6q |
| Operation Cleaver: The Notepad Files | https://app.box.com/s/vsret8sjx5qd6xaxzv0rxdw4pocdmjll |
| Hacking The Street? Fin4 Likely Playing The Market | https://app.box.com/s/56mtum85h5pznvw9r4x6yh5qivb7vgql |
| I Am Ironman: Deep Panda Uses Sakula Malware To Target Organizations In Multiple Sectors | https://app.box.com/s/4dfaheem1io3i71o51rf4lfo2ivotuol |
| The Regin Platform Nation-State Ownership Of Gsm Networks | https://app.box.com/s/q23ruuvmn5mgq1dc0w3kggl6ek1pn4nz |
| Secret Malware In European Union Attack Linked To U.S. And British Intelligence | https://app.box.com/s/qpegircfwykf835shpflarf87ah2438x |
| Regin: Top-Tier Espionage Tool Enables Stealthy Surveillance | https://app.box.com/s/at56dm7anwlk35y4cp4ung9qwgiz6bn1 |
| Operation Double Tap | https://app.box.com/s/30f8215m5iow438k6gpjuxyvlsid7oom |
| Evil Bunny: Suspect #4 | https://app.box.com/s/xvilsesi5qd2gh6so2g3tnric51ndv57 |
| Derusbi (Server Variant) Analysis | https://app.box.com/s/t3h83k7pfdyzoi3hrhfl7k5o33sk1fwk |
| Onionduke: Apt Attacks Via The Tor Network - F-Secure Weblog : News From The Lab | https://app.box.com/s/vpr6m62odv8f7tz59xisqrba9khg4rhi |
| Roaming Tiger | https://app.box.com/s/1q4787ruef22tvkgc7h82j6ib6qpc8v0 |
| Operation Cloudyomega: Ichitaro Zero-Day And Ongoing Cyberespionage Campaign Targeting Japan | https://app.box.com/s/61pv7a2qufqbm3dhargkrsqjjzgswxba |
| Korplug Military Targeted Attacks: Afghanistan & Tajikistan | https://app.box.com/s/jih94kv82ucn12fdne8tsijvwn06cf4p |
| The Uroburos Case: New Sophisticated Rat Identified | https://app.box.com/s/sg4cyodukt7edmmba6bfikuiu1jgzv59 |
| The Darkhotel Apt A Story Of Unusual Hospitality | https://app.box.com/s/rqk4up23y49pe1zalfmstkj4zb1dxbja |
| Darkhotel Indicators Of Compromise | https://app.box.com/s/r97cjt70ywsd7pnrstr7buqzxn5svfw1 |
| Be2 Custom Plugins, Router Abuse, And Target Profiles | https://app.box.com/s/0aem5xn8owa5hpsjxuqbyloielln6oyh |
| Operation Poisoned Handover: Unveiling Ties Between Apt Activity In Hong Kong's Pro-Democracy Movement | https://app.box.com/s/4ld2qhui8rs1slmh76mzj9vaum353mk8 |
| Operation Toohash How Targeted Attacks Work | https://app.box.com/s/11ozmt3fr8pucuo08gnotg6ab22ka7pp |
| The Rotten Tomato Campaign | https://app.box.com/s/ngqr8jevmhlypff49eju70nhxzfy26bh |
| Apt28: A Window Into Russia's Cyber Espionage Operations | https://app.box.com/s/2e7s0j3cuuswoplyvaqdz4kdudvvr7x7 |
| Threat Spotlight: Group 72, Opening The Zxshell | https://app.box.com/s/89uahki8m2ksfgc8pysjw6utcqjp4q9u |
| Full Disclosure Of Havex Trojans | https://app.box.com/s/v76ozenghvxl8cnk7rcdw4dxsnsffz2g |
| Micro-Targeted Malvertising Via Real-Time Ad Bidding | https://app.box.com/s/fy9ss400cv8irbkyrw7i72dc8xaf5xiv |
| Scanbox Framework: Who's Affected, And Who's Using It? | https://app.box.com/s/u273q9utje6wds8mtv17efskdu5oj8la |
| Leouncia And Orcarat | https://app.box.com/s/737gsokqbgsi9d6yenyob3kgafl8mrc4 |
| Modified Binaries Tor | https://app.box.com/s/nj7stspq3veln8iebra2f5u1203i86eg |
| Operation Pawn Storm Using Decoys To Evade Detection | https://app.box.com/s/t2flymgu0ct5s3z487oedaq8dycsge77 |
| Tactical Intelligence Bulletin Sofacy Phishing | https://app.box.com/s/th78b3w9bhr1cpdtn9gmmm9v7j2vuq47 |
| Orcarat - A Whale Of A Tale | https://app.box.com/s/r3qo159trv793oeqdgsv99swjsxzq8pw |
| Threat Spotlight: Group 72 | https://app.box.com/s/mtk3zeae1823kz2hv3f7z6pgjgwxlkyl |
| Hikit Analysis | https://app.box.com/s/k1zaybbj4ickaq5u0flu9bpmtp8a1e5k |
| Russian Cyber Espionage Campaign - Sandworm Team | https://app.box.com/s/k0vbq8vx0z8qg3s4ycit1kc99cg5ay27 |
| Zoxpng Analysis | https://app.box.com/s/8wxap100crzcd96a05ajsj9vodpjauau |
| Democracy In Hong Kong Under Attack | https://app.box.com/s/dvtxta3jtratjxlpr5rzwsqvqfetsn6z |
| New Indicators Of Compromise For Apt Group Nitro Uncovered | https://app.box.com/s/drb0p2idherjlxlwdqh0nharpt310s8u |
| Aided Frame, Aided Direction (Because It's A Redirect) | https://app.box.com/s/c0vmfv396d3lej8g37mxbhjgbjen1m21 |
| Blackenergy & Quedagh: The Convergence Of Crimeware And Apt Attacks | https://app.box.com/s/ccj81xcg1xunuyjmnb3kt3ug77r16z7q |
| Recent Watering Hole Attacks Attributed To Apt Group Th3Bug Using Poison Ivy | https://app.box.com/s/4j0ajrkivoyxw0licxinxpkgrk1ep7b8 |
| Cosmicduke Cosmu With A Twist Of Miniduke | https://app.box.com/s/b0mc62by5j96jg9l91t68mlq6roksbg2 |
| Operation Quantum Entanglement | https://app.box.com/s/qvuhc7j8tle0a83z3iivsz3yz6aok3tv |
| Targeted Threat Index: Characterizing And Quantifying Politically-Motivated Targeted Malware | https://app.box.com/s/flstb1aalkoeq5f0g4baemo9g1bclrd2 |
| When Governments Hack Opponents: A Look At Actors And Technology | https://app.box.com/s/idaqxp9usqbtbo80vhemh66shyvavagu |
| Analysis Of Chinese Mitm On Google | https://app.box.com/s/rpig9c10mj8wdri1ulftjxbabm543mxa |
| Forced To Adapt: Xslcmd Backdoor Now On Os X | https://app.box.com/s/fc2gc8m4ospivuhzjmj2vfc1l3sxc17j |
| Darwin's Favorite Apt Group | https://app.box.com/s/aj0b81yqt1fe6ufuklxuirvh8hawnnjb |
| Connecting The Dots: Syrian Malware Team Uses Blackworm For Attacks | https://app.box.com/s/5sir2hjd6rhi9a03nb5e4ykkx3s4l7d6 |
| Scanbox: A Reconnaissance Framework Used With Watering Hole Attacks | https://app.box.com/s/vlbe0y40djeaadl2l4iqdm13cju3v3n6 |
| Profiling An Enigma: The Mystery Of North Korea's Cyber Threat Landscape | https://app.box.com/s/a6c2ljuyf6kzgx853khmhmrxk4toal8x |
| Nettraveler Apt Gets A Makeover For 10Th Birthday | https://app.box.com/s/5p59z0cnoul885qx2hj1f85h00mk2ec5 |
| El Machete | https://app.box.com/s/badlir1w3z6fowjb0xj9too0mf11ls4e |
| The Epic Turla Operation: Solving Some Of The Mysteries Of Snake/Uroboros | https://app.box.com/s/9rsegtgvnwe9n2lrk6ezxfv8mnpfhpk3 |
| Operation Poisoned Hurricane | https://app.box.com/s/f74irgo6g47gr37urjypwcnetjj2ymie |
| Operation Arachnophobia Caught In The Spider's Web | https://app.box.com/s/d7pm2c1r4cx80tt1rctysd7452lo367v |
| Sidewinder Targeted Attack Against Android In The Golden Age Of Ad Libraries | https://app.box.com/s/qwg36lcvf9iaz3alks4w24btqcxmzlkq |
| Gholee Protective Edge Themed Spear Phishing Campaign | https://app.box.com/s/krnvva7fu9o6ywa81uwbpsasj4sz3y2n |
| Syrian Malware, The Ever-Evolving Threat | https://app.box.com/s/029unv6hijmzrq3xzevz58y4n4xneybz |
| Energetic Bear _ Crouching Yeti | https://app.box.com/s/z0apbug9w1ztt8ex0pe99sq0d2u9r3nu |
| Crouching Yeti: Appendixes | https://app.box.com/s/90zdh7pfbmon8mtea3okbc6s83ro28bx |
| Sayad (Flying Kitten) Infostealer: Is This The Work Of The Iranian Ajax Security Team? | https://app.box.com/s/hjjb0aysslxse1ehpyt5ny68lf8tyctg |
| The Eye Of The Tiger (Pitty Tiger) | https://app.box.com/s/54porxs30re847wc7ca1jk1hzbtvt0hv |
| Tr-25 Analysis - Turla / PNet / Snake/ Uroburos | https://app.box.com/s/54kvbxp9nc0xtme1omd1xpxcckwm945g |
| Dragonfly: Cyberespionage Attacks Against Energy Suppliers | https://app.box.com/s/edyb0yn2g8ozavlmxoh082l7z5o5v3yx |
| #9 Blitzanalysis: Embassy Of Greece Beijing - Compromise | https://app.box.com/s/j108s0yjga3w42lm7wifklqilr4l35ld |
| Anatomy Of The Attack: Zombie Zero | https://app.box.com/s/r95pew4gb5gi1qw40l6s0jbzw5lfwqbm |
| Putter Panda | https://app.box.com/s/ugahgfd07evh7q0h8lnb00brew4ixvdk |
| Illuminating The Etumbot Apt Backdoor | https://app.box.com/s/h8c0ds5etxke111s38r7rs3ltmpf2mot |
| Rat In A Jar: A Phishing Campaign Using Unrecom | https://app.box.com/s/hhfmfv9itrx2mabe5m441a381zvc5jul |
| Miniduke Still Duking It Out | https://app.box.com/s/dnn3hp5nlwuiwxcqjc9kmsfiodcimi64 |
| Cat Scratch Fever: Crowdstrike Tracks Newly Reported Iranian Actor As Flying Kitten | https://app.box.com/s/vr9chzv8t952gywbaom6r0p4bo4pub8r |
| Operation Saffron Rose | https://app.box.com/s/pnagcb7vgpqaxen71n2x557m05q7dazl |
| New Zero-Day Exploit Targeting Internet Explorer Versions 9 Through 11 Identified In Targeted Attacks | https://app.box.com/s/5epjx7i7fc3q8jh8o4exabquoar1s3ii |
| Suspected Russian Spyware Turla Targets Europe, United States | https://app.box.com/s/n9zt53c246ltmhhjkcfay9xq8mee09yo |
| Snake Campaign & Cyber Espionage Toolkit | https://app.box.com/s/xmeq5ajvmzux1appt1qvd8wme7k13o63 |
| The Siesta Campaign: A New Cybercrime Operation Awakens | https://app.box.com/s/0rcadhypkl7fod418nv58uicnnljvnrh |
| Uroburos Highly Complex Espionage Software With Russian Roots | https://app.box.com/s/dokswmrkrxmipfmdpsvelnq18w4ypogw |
| The French Connection: French Aerospace-Focused CVE-2014-0322 Attack Shares Similarities with 2012 Capstone Turbine Activity | https://app.box.com/s/yh95vh5l17z2vcffwjvg3v05fzn0pzp1 |
| Gathering In The Middle East, Operation Stteam | https://app.box.com/s/ine4z2lyf8ryqao789oc0als335iip8c |
| Mo' Shells Mo' Problems - Deep Panda Web Shells | https://app.box.com/s/pn1mtot3a2d2seuqx46unamdl7udlwq0 |
| Operation Greedywonk: Multiple Economic And Foreign Policy Sites Compromised, Serving Up Flash Zero-Day Exploit | https://app.box.com/s/870bnpwyxqjqg9o0z4sl0e2mlkzar60q |
| The Monju Incident | https://app.box.com/s/l6n25enqom0uydgxogybp82294nkf4dt |
| Xtremerat: Nuisance Or Threat? | https://app.box.com/s/s7kamaz3bmziz8vu1fvwz2e9m13xiysg |
| Operation Snowman: Deputydog Actor Compromises Us Veterans Of Foreign Wars Website | https://app.box.com/s/6uv4v8hpnfpka971qk0gd3j4mnm5x7mt |
| Unveiling Careto - The Masked Apt | https://app.box.com/s/aepgdq5vc2dxd2m9t0ab2v28rtwbhjua |
| Intruder File Report- Sneakernet Trojan | https://app.box.com/s/yvbehxsn3tknzogt74z9ryn7r7elwpmf |
| Emerging Threat Profile Shell_Crew | https://app.box.com/s/xqldk5renv5ecihr7wyyazplrnezknmx |
| New Cdto: A Sneakernet Trojan Solution | https://app.box.com/s/63rg0wfr0ki2xvtt7ja1b7lmn7dspcdc |
| Targeted Attacks Against The Energy Sector | https://app.box.com/s/blcobivhvh1gwqh7qjtkrdpaggz2lmlr |
| https://patch-diff.githubusercontent.com/DCounter/APTnotes#2013 |
| Energy At Risk: A Study Of It Security In The Energy And Natural Resources Industry | https://app.box.com/s/z7lwte5v91lz2rkfywd9s1grnqeuy1fk |
| Etso Apt Attacks Analysis | https://app.box.com/s/n4vji662ern1bii9hhahvglujeobqmk0 |
| Operation Ke3Chang Targeted Attacks Against Ministries Of Foreign Affairs | https://app.box.com/s/8w1uu9e2l7jwq40gtea7xem6ezg79ffu |
| "Njrat", The Saga Continues | https://app.box.com/s/6blnvkflzcded9jlthm7yt1zzki6eakz |
| Supply Chain Analysis: From Quartermaster To Sunshopfireeye | https://app.box.com/s/cpnh3qzju92xffn9qtlw45vceuleqh6d |
| Evasive Tactics: Terminator Rat | https://app.box.com/s/zesgiuff58vejn97rad0w9tt827cusg0 |
| Fakem Rat: Malware Disguised As Windows Messenger And Yahoo! Messenger | https://app.box.com/s/otjh028wd3rfia4ysdtldj3whsd1i4y2 |
| World War C: Understanding Nation-State Motives Behind Today's Advanced Cyber Attacks | https://app.box.com/s/dbgzho741wbtce2r5hppvocy6cwjbcbk |
| 2Q Report On Targeted Attack Campaigns | https://app.box.com/s/bwgb7uhh6p4bdkyvlw94dpq19tq0fvbv |
| Hidden Lynx: Professional Hackers For Hire | https://app.box.com/s/m7yxjl7nljw2iltpbasm7t2dswhya6iv |
| Operation Deputydog: Zero-Day (Cve-2013-3893) Attack Against Japanese Targets | https://app.box.com/s/w4rzfbf0ziip0dt4smkwtraluv8o0z9g |
| The "Kimsuky" Operation: A North Korean Apt? | https://app.box.com/s/bel4s8xubunn5gxjvorgm7qg2v0e9kgt |
| Operation Ephemeral Hydra: Ie Zero-Day Linked To Deputydog Uses Diskless Method | https://app.box.com/s/qm0qqb7bpc0ut2c5n76zr5i0rdfhy5ts |
| Operation Molerats | https://app.box.com/s/96rwehp2pkoou5gnimrx3sfdymv0nkhv |
| Poison Ivy: Assessing Damage And Extracting Intelligence | https://app.box.com/s/7gw9d1cbuvygb3qamjytpgh9nbmk7cbw |
| Byebye Shell And The Targeting Of Pakistan | https://app.box.com/s/a4a59w1go5opcj607ssoh11oqnhozv0h |
| Survival Of The Fittest: New York Times Attackers Evolve Quickly | https://app.box.com/s/fkg2mxeqpb2ivx9neyz6bseopy1dfg5p |
| The Little Malware That Could: Detecting And Defeating The China Chopper Web Shell | https://app.box.com/s/yvk5tr8poletupw82biic0ucpvynvoyj |
| Where There Is Smoke, There Is Fire: South Asian Cyber Espionage Heats Up | https://app.box.com/s/s0c49bv6hitrhmcafk0phnnuer3e63v1 |
| Surtr: Malware Family Targeting The Tibetan Community | https://app.box.com/s/m57wv4yn4wsa0j2bj6yuj23bzyrq5rg8 |
| Inside Report _ Apt Attacks On Indian Cyber Space | https://app.box.com/s/a2zw9uye2hhofsc1me6yfj39u6gjalcq |
| Operation Hangover - Unveiling An Indian Cyberattack Infrastructure (Appendix) | https://app.box.com/s/2k6oduwj3aetbetxdjx6gjqcg7mrcvvj |
| Secrets Of The Comfoo Masters | https://app.box.com/s/70bcgwlwqpp43spjxnyk2f7h96lg0718 |
| The Plugx Malware Revisited: Introducing Smoaler | https://app.box.com/s/dfdg420iygjtz1rmou2ps14zi25l7tfb |
| Dark Seoul Cyber Attack: Could It Be Worse? | https://app.box.com/s/qw0kvewoi3uxy4g3xkc31ammxttbft5z |
| Hunting The Shadows: In Depth Analysis Of Escalated Apt Attacks | https://app.box.com/s/owi5dxkk3zx164lp90swu3weeyp805se |
| Njrat Uncovered | https://app.box.com/s/vdg51zbfvap52w60zj0is3l1dmyya0n4 |
| A Call To Harm: New Malware Attacks Target The Syrian Opposition | https://app.box.com/s/hydmfjuajj44kezw77k9nwj5qormpp9y |
| Trojan.Apt.Seinup Hitting Asean | https://app.box.com/s/iap35ypb6u03wrzpmemy2z2ntf4k8wm0 |
| Keyboy, Targeted Attacks Against Vietnam And India | https://app.box.com/s/f8p3dagvmdezcpgmnh04mgqz21viklpz |
| The Nettraveler (Aka Travnet) | https://app.box.com/s/1qx5mkzkcvwq3eazh2ygxowfbbadofby |
| Crude Faux: An Analysis Of Cyber Conflict Within The Oil & Gas Industries | https://app.box.com/s/9dpb6yyvb4yedosa75fo1ibuo46oy35a |
| The Chinese Malware Complexes: The Maudi Surveillance Operation | https://app.box.com/s/v04cs4pueqq78rh8uasr39tsh36gtqra |
| Analysis Of A Stage 3 Miniduke Sample | https://app.box.com/s/c95me2uocwoothfnapxrcjwfmynue4ri |
| Operation Hangover |Executive Summary | https://app.box.com/s/d3q764or208vbbg26gtcasv5uxnkcij1 |
| Operation Hangover - Unveiling An Indian Cyberattack Infrastructure | https://app.box.com/s/f5wyu7306nti3lbp58uesioijsl9zamm |
| Deep Panda | https://app.box.com/s/6po2pgedkjf4br5p7tm51go7p5g3z6g3 |
| The Mutter Backdoor: Operation Beebus with New Targets | https://app.box.com/s/zg8cx9of6h9kdol7wwvgz8lxkqlvyr2p |
| Winnti: More Than Just A Game | https://app.box.com/s/dlzp6f7hv9q3r0kreqvu8yyt36lzdbxw |
| A Closer Look At Miniduke | https://app.box.com/s/cfkwk5mocm6ckxmaiv8hfe73k2bl1u10 |
| Trojan.Apt.Banechant: In-Memory Trojan That Observes For Multiple Mouse Clicks | https://app.box.com/s/5ycaruh0zf07h2jy9mpasgm1crninjwp |
| Analysis Of A Plugx Variant (Plugx Version 7.0) | https://app.box.com/s/90qhti3jwdmthbz7fd1l49n9y2cp8ffq |
| Apt1: Technical Backstage | https://app.box.com/s/x2jgr4j1bgfas2h2b4h09mam9nn4qwu3 |
| Dissecting Operation Troy: Cyberespionage In South Korea | https://app.box.com/s/b91tgqhiw7zyivfnxe3sbrtzfgk6n08f |
| The Teamspy Story - Abusing Teamviewer In Cyberespionage Campaigns | https://app.box.com/s/742gtrl1fedxy8iqwjuqsiru1m8i0l2g |
| Safe A Targeted Threat | https://app.box.com/s/0yh8mn02v2wrehl9yaddrb8rjdzieeqb |
| You Only Click Twice: Finfisher's Global Proliferation | https://app.box.com/s/bdtw7jyfdcr9snnt14ye7ukb9oj2gmn9 |
| Miniduke: Indicators | https://app.box.com/s/d5npu14e4471j5mmpkgt1xwdnu90t43e |
| The Miniduke Mystery: Pdf 0-Day Government Spy Assembler 0X29A Micro Backdoor | https://app.box.com/s/w3b1yh6agvwmocx8ftzjg8kyds0jodmk |
| Stuxnet 0.5: The Missing Link | https://app.box.com/s/jzbxpm7m7kakhubocrrerq0myig6befb |
| Comment Crew: Indicators Of Compromise | https://app.box.com/s/0leqi6xaid7v745y3kujcyi5vgvf73su |
| Apt1 Exposing One Of China's Cyber Espionage Units | https://app.box.com/s/t8w9gavaci6jye519zp13tjdicnd7xzu |
| Targeted Cyber Attacks: Examples And Challenges Ahead | https://app.box.com/s/vsy0oa0n3l2m2lx5oxpzj71zhbqkkgxq |
| Command And Control In The Fifth Domain | https://app.box.com/s/yfduvs6jw8w3ankhjkbi4ei5ykqho368 |
| Operation Beebus | https://app.box.com/s/3bk8cfcjiwhh1gxlkmyslrmp85wm7ewd |
| Operation Red October | https://app.box.com/s/yzybkh6neofhi2wonyn7abjyn2hlfa8f |
| The Icefog Apt: A Tale Of Cloak And Three Daggers | https://app.box.com/s/ebjeefvfx58arny58fb9vv6up39f293w |
| "Red October" Diplomatic Cyber Attacks Investigation | https://app.box.com/s/m3hhm2et9h54sfojd33b6k7m76zoqdv1 |
| The "Red October" Campaign - An Advanced Cyber Espionage Network Targeting Diplomatic And Government Agencies | https://app.box.com/s/ymcjx37fp0zyyjybcl80czcrpzctjfp9 |
| https://patch-diff.githubusercontent.com/DCounter/APTnotes#2012 |
| The Many Faces Of Gh0St Rat: Plotting The Connections Between Malware Attacks | https://app.box.com/s/aj7ebr1v0x9mf3psmxeififqijwmmacy |
| Systematic Cyber Attacks Against Israeli And Palestinian Targets Going On For A Year | https://app.box.com/s/83uopvit3i46wmy3hxvw4g3rjhv8ax1s |
| Recovering From Shamoon | https://app.box.com/s/fjucrojt5ldxio2sbvsql7syv46l6p4g |
| "Wicked Rose" And The Ncph Hacking Group | https://app.box.com/s/0cp8nyd339dnbak96x2klgz1kxm36xd2 |
| Trojan.Taidoor: Targeting Think Tanks | https://app.box.com/s/td8bl14go6icl9lhi9c4idkk82e83t2c |
| Iexpl0Re Rat | https://app.box.com/s/tdgkyqg7o511v8a29mc8ec28yxzw118j |
| The Elderwood Project | https://app.box.com/s/kbhzz24wt2t7kd92c2409uyqawj1jl0t |
| The Mirage Campaign | https://app.box.com/s/h9vlkkgq0yaat56muq6nei95nchysbay |
| The Voho Campaign: An In Depth Analysis | https://app.box.com/s/g1nx7q1o451m0o8hmhbeg82igcflk6q5 |
| Gauss: Abnormal Distribution | https://app.box.com/s/y0wmp82qdqivrx4x21nfj5miod1tjuf1 |
| The 'Madi' Infostealers - A Detailed Analysis | https://app.box.com/s/h2rowevapfawgbkdpcinjgbci6iy71ml |
| From Bahrain With Love: Finfisher Spy Kit Exposed? | https://app.box.com/s/1y57tx3onyislwp9w9k0dqew874y11s9 |
| Recent Observations In Tibet-Related Information Operations: Advanced Social Engineering For The Distribution Of Lurk Malware | https://app.box.com/s/njc3dvwkbx4i9y0s300r3k3ocrj1gmua |
| Pest Control: Taming The Rats | https://app.box.com/s/k6kyhjnok9n5vqtchm4u1luoluth0j1i |
| Skywiper (A.K.A. Flame A.K.A. Flamer): A Complex Malware For Targeted Attacks | https://app.box.com/s/ebeqddqmxdjqttnqjr1xzi7agiqusrac |
| Ixeshe An Apt Campaign | https://app.box.com/s/t74crjmu21ee2gpnnx56182bj74facvi |
| Have I Got Newsforyou: Analysis Of Flamer C&C Server | https://app.box.com/s/6ujt4gi1c962id9o4iviesurww2grbxi |
| New Version Of Osx.Sabpub & Confirmed Mac Apt Attacks | https://app.box.com/s/ew3h0mve5lf5x69ydjd1sm1r380rqy4k |
| The Luckycat Hackers | https://app.box.com/s/oiblu3lk6fsqnjqv6bx4ygkv7e14tcb8 |
| Luckycat Redux: Inside An Apt Campaign With Multiple Targets In India And Japan | https://app.box.com/s/vun0x0rrek5l51djb8igbojb7v85sg3q |
| It'S Not The End Of The World: Darkcomet Misses By A Mile | https://app.box.com/s/akmz317h8dkapm52ksycf187rw2ylp21 |
| Crouching Tiger, Hidden Dragon, Stolen Data | https://app.box.com/s/vk0oacayqkgrk3tp492h3ja9jnlktk7t |
| The Sin Digoo Affair | https://app.box.com/s/qj9849r6n72ktrc9q3n9107xduauffss |
| The Heartbeat Apt Campaign | https://app.box.com/s/4qfg9m8wrdgsdf7k3fwrz7zmg2tkfxno |
| https://patch-diff.githubusercontent.com/DCounter/APTnotes#2011 |
| Stuxnet/Duqu: The Evolution Of Drivers | https://app.box.com/s/shakkou3wcgwfq5u83jncdit7cmmw151 |
| Palebot Trojan Harvests Palestinian Online Credentials | https://app.box.com/s/73rhctcs0kj6s52eeqn509p44a368kuv |
| The Nitro Attacks: Stealing Secrets From The Chemical Industry | https://app.box.com/s/sp5gpgu0xpf0dsfxj269ptxyyzm0ohkf |
| Duqu Trojan Questions And Answers | https://app.box.com/s/ygyqokm0cxq56lut0v1u0i4u5vts9idc |
| Alleged Apt Intrusion Set: 1.Php Group | https://app.box.com/s/rqv5wirqhfc3zht1p2kouk8i0ymnmr92 |
| Sk Hack By An Advanced Persistent Threat | https://app.box.com/s/c911g2eqxck6va9cdn9vync5628zrreb |
| The Lurid Downloader | https://app.box.com/s/7s9bvquu64vafpi14t8p6w2t6hwls1zi |
| Revealed: Operation Shady Rat | https://app.box.com/s/a086wzo5lwibw0dl7ri0kt7d0b51u299 |
| Htran And The Advanced Persistent Threat | https://app.box.com/s/aqhzvj2a5vo91dgqjflh7nk4pm8aowon |
| Operation Shady Rat: Unprecedented Cyber-Espionage Campaign And Intellectual-Property Bonanza | https://app.box.com/s/k34la7wec8mf3gzxphkynem95en886d3 |
| Advanced Persistent Threats: A Decade In Review | https://app.box.com/s/tl13bx0ek04liinz7btbc3f47jpvpbxj |
| Stuxnet Under The Microscope | https://app.box.com/s/2mmdr5vhhrjt2prszn167a0v58az9put |
| Night Dragon: Specific Protection Measures For Consideration | https://app.box.com/s/grv4y3nziuxbsv4g16nyf4u1i1g1w0nm |
| Global Energy Cyberattacks: Night Dragon | https://app.box.com/s/o2tc88oihh4c67a0s8ygok9fwd66zp71 |
| W32.Stuxnet Dossier | https://app.box.com/s/rpdy3pk00bmkhgmf1lsfuwt6edakh6k3 |
| https://patch-diff.githubusercontent.com/DCounter/APTnotes#2010 |
| The Msupdater Trojan And Ongoing Targeted Attacks | https://app.box.com/s/gh8m5os2jewj2adleu2xqivj9qzf9ok8 |
| Shadows In The Cloud: Investigating Cyber Espionage 2.0 | https://app.box.com/s/mxffbrs4ju2yeoa47sbeym6n5zm1hnf3 |
| In-Depth Analysis Of Hydraq: The Face Of Cyberwar Enemies Unfolds | https://app.box.com/s/44e7rbs177n5inhpm9si6gu3lm7fw6bj |
| How Can I Tell If I Was Infected By Aurora? | https://app.box.com/s/k0qidf9g1yfehi6pbdodmcxdqag5a9bv |
| Operation Aurora | https://app.box.com/s/fjb89qr1vnk2ox0vllj68ivadqgyz3an |
| Operation Aurora: Detect, Diagnose, Respond | https://app.box.com/s/j36zc0da9nz6q8wnv13slwxcnmiaykul |
| Combating Aurora | https://app.box.com/s/jhy5k76ox6z8sy6tdjnqqrlz5r2o29h8 |
| The Command Structure Of The Aurora Botnet | https://app.box.com/s/6jeekvxflthmub9v26nybp5kqw9tjopj |
| Case Study: Operation Aurora | https://app.box.com/s/ni4xs2iuol4vskbc25vrxjih2w1ep7p6 |
| https://patch-diff.githubusercontent.com/DCounter/APTnotes#2009 |
| Tracking Ghostnet: Investigating A Cyber Espionage Network | https://app.box.com/s/8dq0gur02w8oh0z7ljjz5mh8l11cmrhh |
| Impact Of Alleged Russian Cyber Attack | https://app.box.com/s/4q3ws8a3ymx6y4ygsp4k4zm8gx0imsy0 |
| https://patch-diff.githubusercontent.com/DCounter/APTnotes#2008 |
| Russian Cyberwar On Georgia | https://app.box.com/s/ce4fr8p0mxv2pjcvh4pmma1q7oqc4vnc |
| How China Will Use Cyber Warfare | https://app.box.com/s/696xnzy1an3jbm3b212y5n8xieirbemd |
|
Readme
| https://patch-diff.githubusercontent.com/DCounter/APTnotes#readme-ov-file |
| Please reload this page | https://patch-diff.githubusercontent.com/DCounter/APTnotes |
|
Activity | https://patch-diff.githubusercontent.com/DCounter/APTnotes/activity |
|
0
stars | https://patch-diff.githubusercontent.com/DCounter/APTnotes/stargazers |
|
0
watching | https://patch-diff.githubusercontent.com/DCounter/APTnotes/watchers |
|
0
forks | https://patch-diff.githubusercontent.com/DCounter/APTnotes/forks |
|
Report repository
| https://patch-diff.githubusercontent.com/contact/report-content?content_url=https%3A%2F%2Fgithub.com%2FDCounter%2FAPTnotes&report=DCounter+%28user%29 |
| Releases | https://patch-diff.githubusercontent.com/DCounter/APTnotes/releases |
| Packages
0 | https://patch-diff.githubusercontent.com/users/DCounter/packages?repo_name=APTnotes |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |