Malpedia Library

2024-01-19 ⋅ Mandiant ⋅ Mandiant
Chinese Espionage Group UNC3886 Found Exploiting CVE-2023-34048 Since Late 2021

2024-01-19 ⋅ paloalto Networks Unit 42 ⋅ Ben Zhang, Billy Melicher, Bo Qu, Brad Duncan, Qi Deng, Zhanglin He
Parrot TDS: A Persistent and Evolving Malware Campaign
Parrot TDS Parrot TDS WebShell

2024-01-19 ⋅ Zscaler ⋅ Ismael Garcia Perez, Santiago Vicente
Zloader: No Longer Silent in the Night
Zloader

2024-01-19 ⋅ Phylum ⋅ Phylum Research Team
npm Package Found Delivering Sophisticated RAT
Unidentified 113 (RAT)

2024-01-19 ⋅ Microsoft ⋅ MSRC Team
Microsoft Actions Following Attack by Nation State Actor Midnight Blizzard

2024-01-19 ⋅ Kroll ⋅ David Truman
Inside the SYSTEMBC Command-and-Control Server
SystemBC

2024-01-18 ⋅ eSentire ⋅ eSentire Threat Response Unit (TRU)
SmartApeSG Delivering NetSupport RAT
SmartApeSG

2024-01-18 ⋅ Google ⋅ Wesley Shields
Russian threat group COLDRIVER expands its targeting of Western officials to include the use of malware
RCS SPICA Callisto

2024-01-18 ⋅ Kroll ⋅ Sean Straw
Open the DARKGATE – Brute Forcing DARKGATE Encodings
DarkGate

2024-01-18 ⋅ M4lcode, Mostafa Farghaly
Detect Mortis Locker Ransomware with YARA
Mortis

2024-01-18 ⋅ Morphisec ⋅ Arnold Osipov
Chae$ Chronicles: Version 4.1 Dedicated to Morphisec Researchers
Chaes

2024-01-18 ⋅ Google ⋅ Google Threat Analysis Group, Wesley Shields
Russian threat group COLDRIVER expands its targeting of Western officials to include the use of malware
RCS SPICA

2024-01-17 ⋅ Rapid7 ⋅ Natalie Zargarov
Whispers of Atlantida: Safeguarding Your Digital Treasure
Atlantida

2024-01-17 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
New TTPs observed in Mint Sandstorm campaign targeting high-profile individuals at universities and research orgs
MediaPI APT35

2024-01-17 ⋅ dark read ⋅ Dark Reading
Nearly 7K WordPress Sites Compromised by Balada Injector

2024-01-17 ⋅ splunk ⋅ Splunk Threat Research Team
Enter The Gates: An Analysis of the DarkGate AutoIt Loader
DarkGate

2024-01-17 ⋅ Trellix ⋅ Max Kersten
Kuiper Ransomware’s Evolution
Kuiper Kuiper Kuiper

2024-01-16 ⋅ ANY.RUN ⋅ Jane, khr0x, Maksim Mikhailov
A Full Analysis of the Pure Malware Family: Unique and Growing Threat
PureCrypter PureLogs Stealer

2024-01-16 ⋅ NOZOMI Network Labs ⋅ Nozomi Networks Labs
P2PInfect Worm Evolves to Target a New Platform
P2Pinfect