LOLRMM is a curated list of Remote Monitoring and Management (RMM) - now with SIEM detections - see comment for important PR for KQL
깃헙브 데이터 저장소를 악용한 김수키(Kimsuky) 전자세금계산서 사칭 악성코드 공격-전자세금계산서.pdf.lnk(2025.7.23) - Kimsuky Electronic Tax Invoice Fraud Attack Exploiting GitHub Data Repository - Electronic Tax Invoice.pdf.lnk
유튜브 동영상 다운로드 사이트에서 유포 중인 Proxyware 악성코드 - Proxyware malware circulating on YouTube video download sites
Clorox versus Cognizant Complaint - Cognizant’sconduct on August 11, 2023, demonstrated spectacularly that it was failing to do so. Cognizantrepeatedly gave a cybercriminal access to Clorox’s network
Targeted attacks leverage accounts on popular online platforms as C2 servers - Cobalt Strike Beacon delivered via GitHub and social media
APT28’s New Arsenal: LAMEHUG, the First AI-Powered Malware - previously reported by the Ukrainian CERT
Mimo gang weaponizes religious symbols to deliver 4L4MD4r ransomware using Microsoft SharePoint RCE vulnerability - reporting from China
US Senator Maria Cantwell (D-WA) demands that Google-owned incident response firm Mandiant hand over the Salt Typhoon-related security assessments of AT&T and Verizon
RABIDS: Modular malware framework to build custom payloads, designed for advanced adversary simulation and malware research
LARVA-208 compromised the Steam game Chemia to distribute multiple malware families - Indicators of Compromise