Malpedia Library

2026-01-23 ⋅ BlackPoint ⋅ Jack Patrick, Sam Decker
Novel Fake CAPTCHA Chain Delivering Amatera Stealer
ACR Stealer Amatera

2026-01-23 ⋅ Medium Ireneusz Tarnowski ⋅ Ireneusz Tarnowski
SpyNote: Comprehensive Analysis of an Android Remote Access Trojan
SpyNote

2026-01-22 ⋅ Check Point Research ⋅ Check Point Research
KONNI Adopts AI to Generate PowerShell Backdoors

2026-01-22 ⋅ Red Asgard ⋅ Red Asgard Threat Research Team
Hunting Lazarus Part II: When the Dead Drop Moved to the Blockchain
StoatWaffle

2026-01-21 ⋅ Team Cymru ⋅ william thomas
Scattered Spider Attacks | Infrastructure and TTP Analysis

2026-01-20 ⋅ ⋅ Rostelecom-Solar ⋅ Pandora Hive Mind
ShadowRelay – a unique backdoor in the public sector
ShadowPad SNAPPYBEE

2026-01-20 ⋅ Checkpoint ⋅ Checkpoint Research
VoidLink: Evidence That the Era of Advanced AI-Generated Malware Has Begun
VoidLink

2026-01-20 ⋅ Abstract Security ⋅ Abstract Security Threat Research Organization
Contagious Interview: Tracking the VS Code Tasks Infection Vector
BeaverTail InvisibleFerret

2026-01-20 ⋅ KrebsOnSecurity ⋅ Brian Krebs
Kimwolf Botnet Lurking in Corporate, Govt. Networks
Kimwolf Aisuru

2026-01-20 ⋅ FalconFeeds ⋅ FalconFeeds
Inside Iran’s APT Network: Profiling the Most Active Iranian State‑Linked Threat Actors

2026-01-19 ⋅ kmsec ⋅ Kieran Miyamoto
npm package bigmathix and the BigSquatRat campaign behind it

2026-01-18 ⋅ malware source code ⋅ smelly
Smokest Stealer, a new malware family? Maybe?
Smokest Stealer

2026-01-16 ⋅ Huntress Labs ⋅ Anna Pham, Dani Lopez, Tanner Filip
Dissecting CrashFix: KongTuke's New Toy
KongTuke ModeloRAT

2026-01-16 ⋅ WithSecure ⋅ Mohammad Kazem Hassan Nejad
To the past and beyond: Andariel’s latest arsenal and cyberattacks
GopherRAT JelusRAT PetitPotato

2026-01-16 ⋅ sysdig ⋅ Sysdig Threat Research Team
VoidLink threat analysis: Sysdig discovers C2-compiled kernel rootkits
VoidLink

2026-01-15 ⋅ CyberArk ⋅ Ari Novick
UNO reverse card: stealing cookies from cookie stealers
Stealc

2026-01-15 ⋅ ANALYST1 ⋅ Anastasia Sentsova
Infrastructure in the Shadows: How Two Leaks Unmasked the Criminal Network of Yalishanda aka Media Land, and BlackBasta
Black Basta Black Basta

2026-01-15 ⋅ Sansec ⋅ Sansec Forensics Team
Keylogger targets 200,000+ employees at major US bank

2026-01-15 ⋅ Expel ⋅ AARON WALTON
Planned failure: Gootloader’s malformed ZIP actually works perfectly
GootLoader

2026-01-14 ⋅ Dark Web Informer ⋅ Dark Web Informer
Almaex Iranian Cryptocurrency Exchange Breach Allegedly Exposes Over 50,000 User Records
LulzIntel