Archive of publicly available threat/cybercrime INTel reports (mostly APT Reports but not limited to). Useful as a reference when you emulate threat actors on a daily basis. Please create an issue if I'm missing a relevant Report.
Note: If you are looking for every type of publicly available documents and notes related to APT have a look at APTnotes and aptnotes. Unfortunately the way they store and sort their data doesn't work for me anymore.
| Title | Date | Source |
|---|---|---|
| APT28: A WINDOW INTO RUSSIAS CYBER ESPIONAGE OPERATIONS? | Jan 2017 | FireEye |
| APT28: At the center of the storm. Russia strategically evolves its cyber operations | Jan 2017 | FireEeye |
| Foreign Cyber Threats to the United States | Jan 2017 | NSA |
| APT28 Under the Scope A Journey into Exfiltrating Intelligence and Government Information | Feb 2017 | BitDefender |
| KingSlayer A Supply chain attack | Feb 2017 | RSA |
| Enhanced Analysis of GRIZZLY STEPPE Activity | Feb 2017 | US-CERT |
| Dissecting the APT28 Mac OS X Payload | Feb 2017 | Bitdefender |
| From Shamoon to StoneDrill | March 2017 | Kaspersky |
| LAZARUS UNDER THE HOOD | Apr 2017 | Kaspersky |
| Appendix B: Moonlight Maze Technical Report | Apr 2017 | Kaspersky |