Malpedia Library

Click here to download all references as Bib-File.•

2017-10-05 ⋅ Palo Alto Networks Unit 42 ⋅ Esmid Idrizovic, Juan Cortes
FreeMilk: A Highly Targeted Spear Phishing Campaign
Freenki Loader PoohMilk Loader

2017-09-21 ⋅ ESET Research ⋅ Filip Kafka
New FinFisher surveillance campaigns: Internet providers involved?
FinFisher RAT

2017-09-01 ⋅ Bitdefender ⋅ Alexandru Maximciuc, Cristina Vatamanu
EHDevel – The story of a continuously improving advanced threat creation toolkit
EHDevel

2017-07-13 ⋅ Proofpoint ⋅ Proofpoint Staff
Meet Ovidiy Stealer: Bringing credential theft to the masses
OvidiyStealer

2017-06-27 ⋅ Palo Alto Networks Unit 42 ⋅ Esmid Idrizovic, Tom Lancaster
Paranoid PlugX
PlugX

2017-04-27 ⋅ Palo Alto Networks Unit 42 ⋅ Robert Falcone
OilRig Actors Provide a Glimpse into Development and Testing Efforts
OilRig

2017-03-28 ⋅ SecurityIntelligence ⋅ Ilya Kolmanovich, Limor Kessem
The NukeBot Trojan, a Bruised Ego and a Surprising Source Code Leak
TinyNuke

2017-03-28 ⋅ Palo Alto Networks Unit 42 ⋅ Brandon Levene, Dominik Reichel, Esmid Idrizovic
Dimnie: Hiding in Plain Sight
Dimnie

2017-03-13 ⋅ Morphisec ⋅ Roy Moshailov
Moving Target Defense Blog
Andromeda

2017-03-13 ⋅ Core Security ⋅ Core Security
Behind a Malware Lifecycle and Infection Chain: Linking Asprox, Zemot, Rovix and Rerdom Malware Families
Rerdom

2017-01-18 ⋅ Reuters ⋅ Oleg Vukmanovic, Pavel Polityuk, Stephen Jewkes
Ukraine's power outage was a cyber attack: Ukrenergo
ENERGETIC BEAR

2016-11-22 ⋅ Palo Alto Networks Unit 42 ⋅ Jen Miller-Osborn, Robert Falcone, Tom Lancaster, Vicky Ray
Tropic Trooper Targets Taiwanese Government and Fossil Fuel Provider With Poison Ivy
APT23

2016-11-22 ⋅ Palo Alto Networks Unit 42 ⋅ Jen Miller-Osborn, Robert Falcone, Tom Lancaster, Vicky Ray
Tropic Trooper Targets Taiwanese Government and Fossil Fuel Provider With Poison Ivy
Winsloader Yahoyah APT23

2016-06-15 ⋅ CrowdStrike ⋅ Dmitri Alperovitch
Bears in the Midst: Intrusion into the Democratic National Committee
X-Agent ATI-Agent SEADADDY Seduploader X-Agent XTunnel APT28

2016-05-01 ⋅ Check Point ⋅ Stanislav Skuratovich
Looking into Teslacrypt
TeslaCrypt

2015-10-01 ⋅ Check Point ⋅ Aliaksandr Trafimchuk, Stanislav Skuratovich
Digging for Groundhogs: Holes in your Linux server
XOR DDoS

2015-08-31 ⋅ SecurityIntelligence ⋅ Denis Laskov, Ilya Kolmanovich, Limor Kessem
Shifu: ‘Masterful’ New Banking Trojan Is Attacking 14 Japanese Banks
Shifu

2015-05-15 ⋅ Check Point ⋅ Stanislav Skuratovich
MATSNU
Matsnu

2015-04-13 ⋅ CrowdStrike ⋅ Dmitri Alperovitch
Cyber Deterrence in Action? A story of one long HURRICANE PANDA campaign
HURRICANE PANDA

2014-10-14 ⋅ CrowdStrike ⋅ Dmitri Alperovitch
CrowdStrike Discovers Use of 64-bit Zero-Day Privilege Escalation Exploit (CVE-2014-4113) by Hurricane Panda
HURRICANE PANDA

2014-07-07 ⋅ CrowdStrike ⋅ Dmitri Alperovitch
Deep in Thought: Chinese Targeting of National Security Think Tanks
APT19

2014-02-24 ⋅ RSA Conference ⋅ Dmitri Alperovitch
The Art of Attribution Identifying and Pursuing your Cyber Adversaries
ANDROMEDA SPIDER APT19 DEXTOROUS SPIDER Ghost Jackal Silent Chollima SINGING SPIDER Tonto Team TOXIC PANDA UNION SPIDER

2012-09-13 ⋅ Microsoft ⋅ Richard Domingues Boscovich
Microsoft Disrupts the Emerging Nitol Botnet Being Spread through an Unsecure Supply Chain
Nitol

2008-11-24 ⋅ NoVirusThanks Blog ⋅ NoVirusThanks Blog
I-Worm/Nuwar.W + Rustock.E Variant – Analysis
Rustock