Malpedia Library

2026-03-30 ⋅ Synthient ⋅ Synthient
ProxyBox: Socks5Systemz Lives On
Socks5 Systemz

2026-03-26 ⋅ ANY.RUN ⋅ khr0x, raptur3
Active Magecart Campaign Targets Spain, Steals Card Data via Hijacked eStores for Bank Fraud
magecart

2026-03-26 ⋅ Rapid7 ⋅ Rapid7
BPFdoor in Telecom Networks: Sleeper Cells in the Backbone
BPFDoor tsh

2026-03-25 ⋅ ANY.RUN ⋅ Achmad Adhikara, GridGuardGhoul
Kamasers Analysis: A Multi-Vector DDoS Botnet Targeting Organizations Worldwide
Kamasers

2026-03-23 ⋅ Netomize ⋅ Mohamad Mokbel
Detect SnappyClient C&C Traffic Using PacketSmith + Yara-X Detection Module
SnappyClient

2026-03-23 ⋅ Sophos ⋅ Sophos Counter Threat Unit Research Team
NICKEL ALLEY strategy: Fake it ‘til you make it
PylangGhost GolangGhost

2026-03-20 ⋅ IC3 ⋅ FBI, IC3
I-032026-PSA: Russian Intelligence Services Target Commercial Messaging Application Accounts

2026-03-20 ⋅ FBI ⋅ FBI
Government of Iran Cyber Actors Deploy Telegram C2 to Push Malware to Identified Targets

2026-03-20 ⋅ cocomelonc ⋅ cocomelonc
MacOS malware persistence 6: PAM module injection. Simple C example

2026-03-20 ⋅ Nextron Systems ⋅ Pezier Pierre-Henri
RegPhantom Backdoor Threat Analysis
RegPhantom

2026-03-19 ⋅ cocomelonc ⋅ cocomelonc
MacOS malware persistence 5: cron jobs. Simple C example

2026-03-18 ⋅ Google ⋅ Google Threat Intelligence Group
The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors
GHOSTBLADE

2026-03-18 ⋅ Zscaler ⋅ Muhammed Irfan V A
Technical analysis of SnappyClient
HijackLoader SnappyClient

2026-03-17 ⋅ Seqrite ⋅ Sathwik Ram Prakki
Operation GhostMail: Russian APT exploits Zimbra Webmail to Target Ukraine State Agency
Unidentified JS 007 (Zimbra Stealer)

2026-03-17 ⋅ Hunt.io ⋅ Hunt.io
Iranian Botnet Exposed via Open Directory: 15-Node Relay Network and Active C2

2026-03-17 ⋅ NTT Security ⋅ Rintaro Koike, Ryu Hiyoshi
StoatWaffle, malware used by WaterPlum
StoatWaffle

2026-03-16 ⋅ Ransom-ISAC ⋅ François-Julien Alcaraz, Yashraj Solanki
Contagious Interview: VS Code to RAT
StoatWaffle

2026-03-16 ⋅ Ctrl-Alt-Intel ⋅ Ctrl-Alt-Intel
FancyBear Exposed: Major OPSEC Blunder Inside Russian Espionage Ops

2026-03-13 ⋅ Scarlet Shark
Analyst’s Brief: Moonrise RAT
MoonRise

2026-03-13 ⋅ kmsec ⋅ Kieran Miyamoto
First instance of PylangGhost RAT observed on npm
PylangGhost