Malpedia Library

2026-03-20 ⋅ Nextron Systems ⋅ Pezier Pierre-Henri
RegPhantom Backdoor Threat Analysis
RegPhantom

2026-03-19 ⋅ Gen ⋅ Vojtěch Krejsa
VoidStealer: Debugging Chrome to Steal Its Secrets
VoidStealer

2026-03-19 ⋅ Sophos ⋅ Sophos Counter Threat Unit Research Team
Android devices ship with firmware-level malware
Keenadu

2026-03-19 ⋅ cocomelonc ⋅ cocomelonc
MacOS malware persistence 5: cron jobs. Simple C example

2026-03-18 ⋅ Google ⋅ Google Threat Intelligence Group
The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors
GHOSTBLADE UNC6748

2026-03-18 ⋅ Google ⋅ Google Threat Intelligence Group
The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors
GHOSTBLADE

2026-03-18 ⋅ Zscaler ⋅ Muhammed Irfan V A
Technical analysis of SnappyClient
HijackLoader SnappyClient

2026-03-17 ⋅ Seqrite ⋅ Sathwik Ram Prakki
Operation GhostMail: Russian APT exploits Zimbra Webmail to Target Ukraine State Agency
ZimReaper

2026-03-17 ⋅ Hunt.io ⋅ Hunt.io
Iranian Botnet Exposed via Open Directory: 15-Node Relay Network and Active C2

2026-03-17 ⋅ NTT Security ⋅ Rintaro Koike, Ryu Hiyoshi
StoatWaffle, malware used by WaterPlum
StoatWaffle

2026-03-16 ⋅ HackNotice ⋅ HackNotice
Hualun New Materials Suffers Massive Data Breach by SnowSoul
SnowSoul

2026-03-16 ⋅ Ransom-ISAC ⋅ François-Julien Alcaraz, Yashraj Solanki
Contagious Interview: VS Code to RAT
StoatWaffle

2026-03-16 ⋅ Ctrl-Alt-Intel ⋅ Ctrl-Alt-Intel
FancyBear Exposed: Major OPSEC Blunder Inside Russian Espionage Ops

2026-03-13 ⋅ Scarlet Shark
Analyst’s Brief: Moonrise RAT
MoonRise

2026-03-13 ⋅ kmsec ⋅ Kieran Miyamoto
First instance of PylangGhost RAT observed on npm
PylangGhost

2026-03-12 ⋅ IBM X-Force ⋅ Golo Mühr
A Slopoly start to AI-enhanced ransomware attacks
Slopoly Hive0163

2026-03-12 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Storm-2561 uses SEO poisoning to distribute fake VPN clients for credential theft
Storm-2561

2026-03-12 ⋅ Palo Alto Networks Unit 42 ⋅ Lior Rochberger, Yoav Zemah
Suspected China-Based Espionage Operation Against Military Targets in Southeast Asia
AppleChris CL-STA-1087

2026-03-12 ⋅ ANY.RUN ⋅ ANY.RUN
MicroStealer Analysis: A Fast-Spreading Infostealer with Limited Detection
MicroStealer

2026-03-12 ⋅ Gdata ⋅ John Dador
Endgame Harvesting: Inside ACRStealer’s Modern Infrastructure
ACR Stealer