Malpedia Library

2024-07-23 ⋅ Symantec ⋅ Threat Hunter Team
Daggerfly: Espionage Group Makes Major Update to Toolset
Nightdoor

2024-07-15 ⋅ ThreatMon ⋅ Aziz Kaplan, ThreatMon, ThreatMon Malware Research Team
Kematian Stealer Technical Malware Analysis
Kematian Stealer

2024-07-14 ⋅ Phylum ⋅ Phylum Research Team
Fake AWS Packages Ship Command and Control Malware In JPEG Files

2024-07-01 ⋅ Halcyon ⋅ Halcyon RISE Team
Halcyon Identifies New Ransomware Operator Volcano Demon Serving Up LukaLocker
lukalocker

2024-06-20 ⋅ Red Canary ⋅ The Red Canary Team
Gourav Khandelwal, Akash Chaudhuri, Matthew Mesa, Sagar Patil, Uri Oren, Krithika Ramakrishnan
UNC4393

2024-06-17 ⋅ splunk ⋅ Splunk Threat Research Team
LNK or Swim: Analysis & Simulation of Recent LNK Phishing

2024-06-12 ⋅ Symantec ⋅ Symantec Threat Hunter Team
Ransomware Attackers May Have Used Privilege Escalation Vulnerability as Zero-day
Black Basta UNC4393

2024-06-12 ⋅ ⋅ Gatewatcher ⋅ Gatewatcher's purple team
Nova Stealer, le malware made in France
Nova Stealer

2024-06-12 ⋅ Symantec ⋅ Symantec Threat Hunter Team
Ransomware Attackers May Have Used Privilege Escalation Vulnerability as Zero-day
Black Basta

2024-06-11 ⋅ Zscaler ⋅ ThreatLabZ research team
A Brief History of SmokeLoader, Part 1
SmokeLoader

2024-06-04 ⋅ Qianxin ⋅ Red Raindrop Team
Operation Veles: Decade-Long Espionage Targeting the Global Research and Education Sector
UTG-Q-008

2024-06-03 ⋅ SYGNIA ⋅ Sygnia Team
China-Nexus Threat Group ‘Velvet Ant’ Abuses F5 Load Balancers for Persistence
PlugX

2024-05-28 ⋅ Reliaquest ⋅ RELIAQUEST THREAT RESEARCH TEAM
BlackSuit Attack Analysis
BlackSuit

2024-05-22 ⋅ Bitdefender ⋅ Bitdefender Team
Deep Dive into the Unfading Sea Haze
InsidiousGh0st InsidiousGh0st

2024-05-16 ⋅ Symantec ⋅ Threat Hunter Team
Springtail: New Linux Backdoor Added to Toolkit
Gomir Kimsuky

2024-05-11 ⋅ Purple Team Security Research
Russian APT deploys new 'Kapeka' backdoor in Eastern European attacks
Kapeka

2024-05-01 ⋅ Natto Thoughts ⋅ Natto Team
Ransom-War: Russian Extortion Operations as Hybrid Warfare, Part One
Clop Conti Maze TrickBot

2024-04-29 ⋅ ThreatMon ⋅ Kerime Gencay, MalwareR&DTeam
Understanding the 'Kapeka' Backdoor: Detailed Analysis by APT44
Kapeka

2024-04-25 ⋅ Microsoft ⋅ Microsoft Incident Response Team
Guidance for Incident Responders

2024-04-19 ⋅ TEAMT5 ⋅ Charles Li, Che Chang, Greg Chen
Chinese APT: A Master of Exploiting Edge Devices
SEASPY UNC4841