| 2024-02-29 | Jesse La Grew | [Guest Diary] Dissecting DarkGate: Modular Malware Delivery and Persistence as a Service. |
| 2022-11-02 | Brad Duncan | Who put the "Dark" in DarkVNC? |
| 2022-08-24 | Brad Duncan | Monster Libra (TA551/Shathak) --> IcedID (Bokbot) --> Cobalt Strike & DarkVNC |
| 2022-08-12 | Brad Duncan | Monster Libra (TA551/Shathak) pushes IcedID (Bokbot) with Dark VNC and Cobalt Strike |
| 2022-07-27 | Brad Duncan | IcedID (Bokbot) with Dark VNC and Cobalt Strike |
| 2022-04-20 | Brad Duncan | "aa" distribution Qakbot (Qbot) infection with DarkVNC traffic |
| 2021-12-16 | Brad Duncan | How the "Contact Forms" campaign tricks people |
| 2021-10-04 | Johannes Ullrich | Boutique "Dark" Botnet Hunting for Crumbs |
| 2021-02-19 | Xavier Mertens | Dynamic Data Exchange (DDE) is Back in the Wild? |
| 2018-01-25 | Xavier Mertens | Ransomware as a Service |
