Malpedia Library

2017-10-05 ⋅ Palo Alto Networks Unit 42 ⋅ Esmid Idrizovic, Juan Cortes
FreeMilk: A Highly Targeted Spear Phishing Campaign
Freenki Loader PoohMilk Loader

2017-09-28 ⋅ Palo Alto Networks Unit 42 ⋅ Josh Grunzweig, Robert Falcone
Threat Actors Target Government of Belarus Using CMSTAR Trojan
BYEBY CMSTAR Vicious Panda

2017-09-28 ⋅ Palo Alto Networks Unit 42 ⋅ Josh Grunzweig, Robert Falcone
Threat Actors Target Government of Belarus Using CMSTAR Trojan
BYEBY CMSTAR

2017-09-26 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
Striking Oil: A Closer Look at Adversary Infrastructure
OilRig

2017-09-26 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
Striking Oil: A Closer Look at Adversary Infrastructure
RGDoor

2017-09-25 ⋅ Palo Alto Networks Unit 42 ⋅ Jeff White
Analyzing the Various Layers of AgentTesla’s Packing
Agent Tesla

2017-09-06 ⋅ Palo Alto Networks Unit 42 ⋅ Dominik Reichel
Analysing a 10-Year-Old SNOWBALL
Babar

2017-09-01 ⋅ Palo Alto Networks Unit 42 ⋅ Brad Duncan
EITest: HoeflerText Popups Targeting Google Chrome Users Now Push RAT Malware
NetSupportManager RAT

2017-08-31 ⋅ Palo Alto Networks Unit 42 ⋅ Alex Hinchliffe, Jen Miller-Osborn
Updated KHRAT Malware Used in Cambodia Attacks

2017-08-14 ⋅ Palo Alto Networks Unit 42 ⋅ Anthony Kasza
The Blockbuster Saga Continues
HOPLIGHT

2017-08-01 ⋅ Palo Alto Networks Unit 42 ⋅ Simon Conant, Tomer Bar
Prince of Persia – Ride the Lightning: Infy returns as “Foudre”
Infy

2017-08-01 ⋅ Palo Alto Networks Unit 42 ⋅ Simon Conant, Tomer Bar
Prince of Persia – Ride the Lightning: Infy returns as “Foudre”
Infy Infy

2017-07-31 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
TwoFace Webshell: Persistent Access Point for Lateral Movement
TwoFace OilRig

2017-07-27 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
OilRig Uses ISMDoor Variant; Possibly Linked to Greenbug Threat Group
Greenbug

2017-07-25 ⋅ Palo Alto Networks Unit 42 ⋅ Kaoru Hayashi
“Tick” Group Continues Attacks
Daserf Tick

2017-06-27 ⋅ Palo Alto Networks Unit 42 ⋅ Esmid Idrizovic, Tom Lancaster
Paranoid PlugX
PlugX

2017-06-22 ⋅ Palo Alto Networks Unit 42 ⋅ Danny Tsechansky, Erye Hernandez
The New and Improved macOS Backdoor from OceanLotus
OceanLotus

2017-05-03 ⋅ Palo Alto Networks Unit 42 ⋅ Brandon Levene, Robert Falcone, Tyler Halfpop
Kazuar: Multiplatform Espionage Backdoor with API Access
Turla

2017-05-03 ⋅ Palo Alto Networks Unit 42 ⋅ Brandon Levene, Robert Falcone, Tyler Halfpop
Kazuar: Multiplatform Espionage Backdoor with API Access
Kazuar

2017-04-27 ⋅ Palo Alto Networks Unit 42 ⋅ Robert Falcone
OilRig Actors Provide a Glimpse into Development and Testing Efforts
OilRig