Technical

[Asyn]

GoldMax, GoldFinder, and Sibot: Analyzing NOBELIUM’s layered persistence
https://www.microsoft.com/security/blog/2021/03/04/goldmax-goldfinder-sibot-analyzing-nobelium-malware/

[Asyn]

A Basic Timeline of the Exchange Mass-Hack
https://krebsonsecurity.com/2021/03/a-basic-timeline-of-the-exchange-mass-hack/

[Asyn]

New SUNSHUTTLE Second-Stage Backdoor Uncovered Targeting U.S.-Based Entity; Possible Connection to UNC2452
https://www.fireeye.com/blog/threat-research/2021/03/sunshuttle-second-stage-backdoor-targeting-us-based-entity.html

[Asyn]

Bitsquatting Windows.com
https://remyhax.xyz/posts/bitsquatting-windows/

[Asyn]

The Compact Campaign
https://www.wmcglobal.com/blog/the-compact-campaign

[Asyn]

Ransomware is a multi-billion industry and it keeps growing
https://www.bleepingcomputer.com/news/security/ransomware-is-a-multi-billion-industry-and-it-keeps-growing/

[Asyn]

Magento 2 PHP Credit Card Skimmer Saves to JPG
https://blog.sucuri.net/2021/03/magento-2-php-credit-card-skimmer-saves-to-jpg.html

[Asyn]

A Basic Timeline of the Exchange Mass-Hack
https://krebsonsecurity.com/2021/03/a-basic-timeline-of-the-exchange-mass-hack/

The Microsoft Exchange hacks: How they started and where we are
https://www.bleepingcomputer.com/news/security/the-microsoft-exchange-hacks-how-they-started-and-where-we-are/

[Asyn]

SUPERNOVA Web Shell Deployment Linked to SPIRAL Threat Group
https://www.secureworks.com/blog/supernova-web-shell-deployment-linked-to-spiral-threat-group

[Asyn]

Hidden menace: Peeling back the secrets of OnionCrypter
https://decoded.avast.io/jakubkaloc/onion-crypter/

[Asyn]

Video: Avast Hacker Archives Episode 4: Troy Hunt
https://blog.avast.com/avast-hacker-archives-episode-4-troy-hunt-avast

[Asyn]

Cybereason Exposes Campaign Targeting US Taxpayers with NetWire and Remcos Malware
https://www.cybereason.com/blog/cybereason-exposes-malware-targeting-us-taxpayers

[Asyn]

Azure LoLBins: Protecting against the dual use of virtual machine extensions
https://www.microsoft.com/security/blog/2021/03/09/azure-lolbins-protecting-against-the-dual-use-of-virtual-machine-extensions/

[Asyn]

A Spectre proof-of-concept for a Spectre-proof web
https://security.googleblog.com/2021/03/a-spectre-proof-of-concept-for-spectre.html

[Asyn]

New Linux Backdoor RedXOR Likely Operated by Chinese Nation-State Actor
https://www.intezer.com/blog/malware-analysis/new-linux-backdoor-redxor-likely-operated-by-chinese-nation-state-actor/