Malpedia Library

2017-07-24 ⋅ Kaspersky Labs ⋅ Noushin Shabab
Spring Dragon – Updated Activity
LOTUS PANDA

2017-07-19 ⋅ Kaspersky Labs ⋅ Sergey Yunakovsky
The NukeBot banking Trojan: from rough drafts to real threats
TinyNuke

2017-07-12 ⋅ Kaspersky Labs ⋅ Sergey Yunakovsky
The Magala Trojan Clicker: A Hidden Advertising Threat
Magala

2017-06-30 ⋅ Kaspersky Labs ⋅ GReAT
From BlackEnergy to ExPetr
EternalPetya

2017-06-28 ⋅ Kaspersky Labs ⋅ Anton Ivanov, Orkhan Mamedov
ExPetr/Petya/NotPetya is a Wiper, Not Ransomware
EternalPetya

2017-06-27 ⋅ Kaspersky Labs ⋅ GReAT
Schroedinger’s Pet(ya)
EternalPetya

2017-06-27 ⋅ Kaspersky Labs ⋅ Sergey Yunakovsky
Neutrino modification for POS-terminals
Neutrino POS

2017-06-20 ⋅ Kaspersky Labs ⋅ Roman Unuchek
Ztorg: from rooting to SMS
Ztorg

2017-06-08 ⋅ Kaspersky Labs ⋅ Roman Unuchek
Dvmap: the first Android malware with code injection
Dvmap

2017-05-25 ⋅ Kaspersky Labs ⋅ Nikita Slepogin
Dridex: A History of Evolution
Dridex Feodo

2017-05-12 ⋅ Kaspersky Labs ⋅ GReAT
WannaCry ransomware used in widespread attacks all over the world
WannaCryptor

2017-05-01 ⋅ Kaspersky Labs ⋅ Kaspersky
Crouching Yeti (Energetic Bear) Malware
ENERGETIC BEAR

2017-04-28 ⋅ Kaspersky Labs ⋅ Alexey Shulmin, Sergey Yunakovsky
Use of DNS Tunneling for C&C Communications
SOUNDBITE

2017-04-24 ⋅ Kaspersky Labs ⋅ Anton Ivanov, Fabio Assolini, Fedor Sinitsyn, Santiago Pontiroli
XPan, I am your father
Xpan

2017-04-11 ⋅ Kaspersky Labs ⋅ GReAT
Unraveling the Lamberts Toolkit

2017-04-04 ⋅ Kaspersky Labs ⋅ Kaspersky Lab
Chasing Lazarus: A Hunt for the Infamous Hackers to Prevent Large Bank Robberies
Lazarus Group

2017-04-04 ⋅ Kaspersky Labs ⋅ Sergey Golovanov
ATMitch: remote administration of ATMs
ATMitch

2017-04-03 ⋅ Kaspersky Labs ⋅ Costin Raiu, Daniel Moore, Juan Andrés Guerrero-Saade, Thomas Rid
Penquin’s Moonlit Maze
Penquin Turla

2017-04-03 ⋅ Kaspersky Labs ⋅ Nikolay Pankov
Moonlight Maze: Lessons from history
Turla