Malware

Intrusion Detection and Prevention Systems

Quad9 on SecurityListing: A free DNS recursive service that blocks malicious host names and protects user privacy.

Software Composition Analysis

Raven Runtime Prevention on SecurityListing: Runtime protection preventing supply-chain attacks & exploits via library-level policies

Software Composition Analysis

Phylum on SecurityListing: Identifies 137 malicious npm packages and gathers system information to a remote server.

Digital Forensics and Incident Response

Userland API Monitoring and Code Injection Detection on SecurityListing: Explores malware interaction with Windows API and methods for detection and prevention.

Industry Reports

June's Sophisticated npm Attack Attributed to North Korea on SecurityListing: A sophisticated npm attack attributed to North Korean threat actors, targeting technology firms and their employees.

Threat Intelligence Platforms

ShadowServer on SecurityListing: A nonprofit security organization that collects and shares threat data to make the Internet more secure.

Endpoint Protection Platform

Comodo Advanced Endpoint Protection on SecurityListing: Advanced Endpoint Protection is a complete endpoint protection platform that provides advanced threat protection against ransomware, data breaches, and malware.

Threat Intelligence Platforms

Maldatabase on SecurityListing: Maldatabase is a threat intelligence platform providing malware datasets and threat intelligence feeds for malware data science and threat intelligence.

Threat Intelligence Platforms

Ryan Stillions: On TTPs on SecurityListing: In-depth analysis of real-world attacks and threat tactics

Threat Intelligence Platforms

TeamTNT Targeting AWS, Alibaba on SecurityListing: TeamTNT is modifying its malicious shell scripts after they were made public by security researchers.

Guides

The Anatomy of a Malicious Package on SecurityListing: Educational resource analyzing the structure and implementation of malicious packages in software ecosystems, with focus on JavaScript/NPM threat models.

Security Scanning

Sucuri Website Malware Scanner on SecurityListing: Website malware scanner with remote & server-side scanning capabilities

Threat Intelligence Platforms

VX-Underground on SecurityListing: VX-Underground is a vast online repository of malware samples, featuring various collections for cybersecurity professionals and researchers to analyze and combat cyber threats.

Guides

Windows Commands Abused by Attackers on SecurityListing: Malware allows attackers to execute Windows commands from a remote environment