Malpedia Library

2017-08-14 ⋅ Palo Alto Networks Unit 42 ⋅ Anthony Kasza
The Blockbuster Saga Continues
HOPLIGHT

2017-08-01 ⋅ Palo Alto Networks Unit 42 ⋅ Simon Conant, Tomer Bar
Prince of Persia – Ride the Lightning: Infy returns as “Foudre”
Infy

2017-08-01 ⋅ Palo Alto Networks Unit 42 ⋅ Simon Conant, Tomer Bar
Prince of Persia – Ride the Lightning: Infy returns as “Foudre”
Infy Infy

2017-07-31 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
TwoFace Webshell: Persistent Access Point for Lateral Movement
TwoFace OilRig

2017-07-27 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
OilRig Uses ISMDoor Variant; Possibly Linked to Greenbug Threat Group
Greenbug

2017-07-25 ⋅ Palo Alto Networks Unit 42 ⋅ Kaoru Hayashi
“Tick” Group Continues Attacks
Daserf Tick

2017-06-27 ⋅ Palo Alto Networks Unit 42 ⋅ Esmid Idrizovic, Tom Lancaster
Paranoid PlugX
PlugX

2017-06-22 ⋅ Palo Alto Networks Unit 42 ⋅ Danny Tsechansky, Erye Hernandez
The New and Improved macOS Backdoor from OceanLotus
OceanLotus

2017-05-03 ⋅ Palo Alto Networks Unit 42 ⋅ Brandon Levene, Robert Falcone, Tyler Halfpop
Kazuar: Multiplatform Espionage Backdoor with API Access
Turla

2017-05-03 ⋅ Palo Alto Networks Unit 42 ⋅ Brandon Levene, Robert Falcone, Tyler Halfpop
Kazuar: Multiplatform Espionage Backdoor with API Access
Kazuar

2017-04-27 ⋅ Palo Alto Networks Unit 42 ⋅ Robert Falcone
OilRig Actors Provide a Glimpse into Development and Testing Efforts
OilRig

2017-04-20 ⋅ Palo Alto Networks Unit 42 ⋅ Josh Grunzweig
Cardinal RAT Active for Over Two Years
Cardinal RAT

2017-04-07 ⋅ Palo Alto Networks Unit 42 ⋅ Anthony Kasza, Micah Yates
The Blockbuster Sequel
OpBlockBuster

2017-04-06 ⋅ Palo Alto Networks Unit 42 ⋅ Claud Xiao, Cong Zheng
New IoT/Linux Malware Targets DVRs, Forms Botnet
Tsunami

2017-04-05 ⋅ Palo Alto Networks Unit 42 ⋅ Tom Lancaster, Tomer Bar
Targeted Attacks in the Middle East Using KASPERAGENT and MICROPSIA
KasperAgent Micropsia

2017-04-05 ⋅ Palo Alto Networks Unit 42 ⋅ Tom Lancaster, Tomer Bar
Targeted Attacks in the Middle East Using KASPERAGENT and MICROPSIA
vamp

2017-03-30 ⋅ Palo Alto Networks Unit 42 ⋅ Jen Miller-Osborn, Josh Grunzweig
Trochilus and New MoonWind RATs Used In Attack Against Thai Organizations
MoonWind

2017-03-30 ⋅ Palo Alto Networks Unit 42 ⋅ Jen Miller-Osborn, Josh Grunzweig
Trochilus and New MoonWind RATs Used In Attack Against Thai Organizations
APT9

2017-03-28 ⋅ Palo Alto Networks Unit 42 ⋅ Brandon Levene, Dominik Reichel, Esmid Idrizovic
Dimnie: Hiding in Plain Sight
Dimnie

2017-03-26 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
Shamoon 2: Delivering Disttrack
DistTrack