Malpedia Library

2023-03-23 ⋅ Mandiant ⋅ Josh Fleischer, Rufus Brown, Ryan Tomcik
UNC961 in the Multiverse of Mandiant: Three Encounters with a Financially Motivated Threat Actor
HOLERUN LIGHTBUNNY Prophet Spider

2023-03-23 ⋅ Red Canary ⋅ Red Canary
2023 / 5.0 Threat Dection Report: Techniques, Trend, and Takeaways

2023-03-17 ⋅ DeepInstinct ⋅ Deep Instinct Threat Lab
CVE-2023-23397: Exploitations in the Wild – What You Need to Know

2023-03-16 ⋅ Sekoia ⋅ Threat & Detection Research Team
Peeking at Reaper’s surveillance operations
Chinotto

2023-03-15 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
A year of Russian hybrid warfare in Ukraine
CaddyWiper DesertBlade DoubleZero HermeticWiper INDUSTROYER2 IsaacWiper PartyTicket SwiftSlicer WhisperGate

2023-03-15 ⋅ Reliaquest ⋅ RELIAQUEST THREAT RESEARCH TEAM
QBot: Laying the Foundations for Black Basta Ransomware Activity
Black Basta QakBot

2023-03-14 ⋅ ⋅ Secui ⋅ STIC
[Threat Analysis] CHM malware targeting North Korea-related corporations

2023-03-13 ⋅ Microsoft ⋅ Microsoft Threat Intelligence Center
DEV-1101 enables high-volume AiTM campaigns with open-source phishing kit

2023-03-09 ⋅ eSentire ⋅ eSentire Threat Response Unit (TRU)
BatLoader Continues to Abuse Google Search Ads to Deliver Vidar Stealer and Ursnif
BATLOADER ISFB Vidar

2023-03-09 ⋅ Secureworks ⋅ SecureWorks' Counter Threat Unit Research Team
COBALT ILLUSION Masquerades as Atlantic Council Employee

2023-03-09 ⋅ DeepInstinct ⋅ Simon Kenin
DUCKTAIL: Threat Operation Re-emerges with New LNK, PowerShell, and Other Custom Tactics to Avoid Detection
DUCKTAIL

2023-03-08 ⋅ Malwarebytes ⋅ Malwarebytes Threat Intelligence Team
Ransomware review: March 2023
Vendetta

2023-03-02 ⋅ CrowdStrike ⋅ CrowdStrike Threat Intel Team
Crowdstrike Global Threat Report 2023

2023-03-02 ⋅ ThreatMon ⋅ ThreatMon Malware Research Team
Behind the Breaches: Mapping Threat Actors and Their CVE Exploits

2023-03-01 ⋅ Zscaler ⋅ Meghraj Nandanwar, Shatak Jain
OneNote: A Growing Threat for Malware Distribution
AsyncRAT Cobalt Strike IcedID QakBot RedLine Stealer

2023-02-28 ⋅ Uptycs ⋅ Uptycs Threat Research
Cryptocurrency Entities at Risk: Threat Actor Uses Parallax RAT for Infiltration
Parallax RAT

2023-02-27 ⋅ PRODAFT Threat Intelligence ⋅ PRODAFT
RIG Exploit Kit: In-Depth Analysis
Dridex IcedID ISFB PureCrypter Raccoon RecordBreaker RedLine Stealer Royal Ransom Silence SmokeLoader Zloader

2023-02-27 ⋅ Sekoia ⋅ Threat & Detection Research Team
Stealc: a copycat of Vidar and Raccoon infostealers gaining in popularity – Part 2
Stealc

2023-02-23 ⋅ Symantec ⋅ Threat Hunter Team
Clasiopa: New Group Targets Materials Research
Atharvan HazyLoad Lilith

2023-02-23 ⋅ Bitdefender ⋅ Bitdefender Team, Martin Zugec
Technical Advisory: Various Threat Actors Targeting ManageEngine Exploit CVE-2022-47966
Cobalt Strike DarkComet QuiteRAT RATel