Technical

[Asyn]

Countering threats from Iran
https://blog.google/threat-analysis-group/countering-threats-iran/

[Asyn]

New Yanluowang ransomware used in targeted attacks
https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/yanluowang-targeted-ransomware

[Asyn]

Governments worldwide to crack down on ransomware payment channels
https://www.bleepingcomputer.com/news/security/governments-worldwide-to-crack-down-on-ransomware-payment-channels/

[Asyn]

Harvester: Nation-State-Backed Group Uses New Toolset to Target Victims in South Asia
https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/harvester-new-apt-attacks-asia

[Asyn]

Over 25% of Malicious JavaScript Is Being Obfuscated
https://www.akamai.com/blog/security/over-25-percent-of-malicious-javascript-is-being-obfuscated

[Asyn]

BlackByte ransomware decryptor released to recover files for free
https://www.bleepingcomputer.com/news/security/blackbyte-ransomware-decryptor-released-to-recover-files-for-free/

https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/blackbyte-ransomware-pt-1-in-depth-analysis/
https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/blackbyte-ransomware-pt-2-code-obfuscation-analysis/

[Asyn]

LightBasin: A Roaming Threat to Telecommunications Companies
https://www.crowdstrike.com/blog/an-analysis-of-lightbasin-telecommunications-attacks/

[Asyn]

Karma Ransomware | An Emerging Threat With A Hint of Nemty Pedigree
https://www.sentinelone.com/labs/karma-ransomware-an-emerging-threat-with-a-hint-of-nemty-pedigree/

[Asyn]

Malicious campaign uses a barrage of commodity RATs to target Afghanistan and India
https://blog.talosintelligence.com/2021/10/crimeware-targets-afghanistan-india.html

[Asyn]

UltimaSMS: A widespread premium SMS scam on the Google Play Store
https://blog.avast.com/premium-sms-scam-apps-on-play-store-avast
https://raw.githubusercontent.com/avast/ioc/master/UltimaSMS/UltimaSMS_IOC_19-10-2021.pdf

[Asyn]

Phishing campaign targets YouTube creators with cookie theft malware
https://blog.google/threat-analysis-group/phishing-campaign-targets-youtube-creators-cookie-theft-malware/

[Asyn]

New Gummy Browsers attack lets hackers spoof tracking profiles
https://www.bleepingcomputer.com/news/security/new-gummy-browsers-attack-lets-hackers-spoof-tracking-profiles/
http://arxiv.org/pdf/2110.10129.pdf

[Asyn]

PurpleFox Adds New Backdoor That Uses WebSockets
https://www.trendmicro.com/en_us/research/21/j/purplefox-adds-new-backdoor-that-uses-websockets.html

[Asyn]

Babuk ransomware decryptor released to recover files for free
https://www.bleepingcomputer.com/news/security/babuk-ransomware-decryptor-released-to-recover-files-for-free/
https://files.avast.com/files/decryptor/avast_decryptor_babuk.exe

Free decryptor released for Atom Silo and LockFile ransomware
https://www.bleepingcomputer.com/news/security/free-decryptor-released-for-atom-silo-and-lockfile-ransomware/
https://files.avast.com/files/decryptor/avast_decryptor_atomsilo.exe

[Asyn]

Microsoft: WizardUpdate Mac malware adds new evasion tactics
https://www.bleepingcomputer.com/news/security/microsoft-wizardupdate-mac-malware-adds-new-evasion-tactics/