Malpedia Library

2017-01-05 ⋅ Palo Alto Networks Unit 42 ⋅ Josh Grunzweig
DragonOK Updates Toolset and Targets Multiple Geographic Regions
IsSpace SysGet

2017-01-05 ⋅ Palo Alto Networks Unit 42 ⋅ Josh Grunzweig
DragonOK Updates Toolset and Targets Multiple Geographic Regions
DragonOK

2016-12-15 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
Let It Ride: The Sofacy Group’s DealersChoice Attacks Continue
APT28

2016-11-30 ⋅ Palo Alto Networks Unit 42 ⋅ Robert Falcone
Shamoon 2: Return of the Disttrack Wiper
DistTrack

2016-11-22 ⋅ Palo Alto Networks Unit 42 ⋅ Jen Miller-Osborn, Robert Falcone, Tom Lancaster, Vicky Ray
Tropic Trooper Targets Taiwanese Government and Fossil Fuel Provider With Poison Ivy
APT23

2016-11-22 ⋅ Palo Alto Networks Unit 42 ⋅ Jen Miller-Osborn, Robert Falcone, Tom Lancaster, Vicky Ray
Tropic Trooper Targets Taiwanese Government and Fossil Fuel Provider With Poison Ivy
Winsloader Yahoyah APT23

2016-10-25 ⋅ Palo Alto Networks Unit 42 ⋅ Anthony Kasza
Houdini’s Magic Reappearance

2016-10-25 ⋅ Palo Alto Networks Unit 42 ⋅ Anthony Kasza
Houdini’s Magic Reappearance
Houdini

2016-10-17 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
‘DealersChoice’ is Sofacy’s Flash Player Exploit Platform
APT28

2016-10-04 ⋅ Palo Alto Networks Unit 42 ⋅ Josh Grunzweig, Robert Falcone
OilRig Malware Campaign Updates Toolset and Expands Targets
Helminth

2016-10-04 ⋅ Palo Alto Networks Unit 42 ⋅ Josh Grunzweig, Robert Falcone
OilRig Malware Campaign Updates Toolset and Expands Targets
OilRig

2016-09-28 ⋅ Palo Alto Networks Unit 42 ⋅ Micah Yates, Tom Lancaster
Confucius Says…Malware Families Get Further By Abusing Legitimate Websites
Confucius SNEEPY

2016-09-26 ⋅ Palo Alto Networks Unit 42 ⋅ Dani Creus, Robert Falcone, Tyler Halfpop
Sofacy’s ‘Komplex’ OS X Trojan
APT28

2016-09-26 ⋅ Palo Alto Networks Unit 42 ⋅ Dani Creus, Robert Falcone, Tyler Halfpop
Sofacy’s ‘Komplex’ OS X Trojan
Komplex

2016-09-15 ⋅ Palo Alto Networks Unit 42 ⋅ Kaoru Hayashi
MILE TEA: Cyber Espionage Campaign Targets Asia Pacific Businesses and Government Agencies
Elirks Logedrut Micrass

2016-09-13 ⋅ Palo Alto Networks Unit 42 ⋅ Claud Xiao
DualToy: New Windows Trojan Sideloads Risky Apps to Android and iOS Devices
DualToy

2016-09-13 ⋅ Palo Alto Networks Unit 42 ⋅ Claud Xiao
DualToy: New Windows Trojan Sideloads Risky Apps to Android and iOS Devices
DualToy DualToy

2016-08-30 ⋅ Palo Alto Networks Unit 42 ⋅ Jeff White
Pythons and Unicorns and Hancitor…Oh My! Decoding Binaries Through Emulation

2016-08-22 ⋅ Palo Alto Networks Unit 42 ⋅ Jeff White
VB Dropper and Shellcode for Hancitor Reveal New Techniques Behind Uptick
Hancitor