Malpedia Library

2014-03-18 ⋅ ESET Research ⋅ Pierre-Marc Bureau
Operation Windigo – the vivisection of a large Linux server‑side credential‑stealing malware campaign
Boaxxe Glupteba

2014-03-01 ⋅ ESET Research ⋅ Alexis Dorais-Joncas, Benjamin Vanheuverzwijn, Joan Calvet, Marc-Etienne M.Léveillé, Olivier Bilodeau, Pierre-Marc Bureau
OPERATION WINDIGO
Ebury

2014-02-21 ⋅ ESET Research ⋅ Marc-Etienne M.Léveillé
An In‑depth Analysis of Linux/Ebury
Ebury

2013-12-18 ⋅ ESET Research ⋅ Jean-Ian Boutin
Qadars – a banking Trojan with the Netherlands in its sights
Qadars

2013-12-05 ⋅ ESET Research ⋅ ESET Research
Did you sayAdvanced Persistent Threats?
Terminator RAT

2013-09-25 ⋅ ESET Research ⋅ Pierre-Marc Bureau
Win32/Napolar – A new bot on the block
Solarbot

2013-07-30 ⋅ ESET Research ⋅ welivesecurity
Versatile and infectious: Win64/Expiro is a cross‑platform file infector
Expiro

2013-05-02 ⋅ ESET Research ⋅ Stephen Cobb
The stealthiness of Linux/Cdorked: a clarification
CDorked

2013-04-26 ⋅ ESET Research ⋅ Pierre-Marc Bureau
Linux/Cdorked.A: New Apache backdoor being used in the wild to serve Blackhole
CDorked

2013-03-13 ⋅ ESET Research ⋅ Aleksandr Matrosov
How Theola malware uses a Chrome plugin for banking fraud
Sinowal

2013-02-04 ⋅ ESET Research ⋅ Aleksandr Matrosov
What do Win32/Redyms and TDL4 have in common?
Redyms

2013-01-24 ⋅ ESET Research ⋅ Sébastien Duquette
Linux/SSHDoor.A Backdoored SSH daemon that steals passwords
SSHDoor

2012-12-19 ⋅ ESET Research ⋅ Aleksandr Matrosov
Win32/Spy.Ranbyus modifying Java code in RBS Ukraine systems
Ranbyus

2012-12-18 ⋅ ESET Research ⋅ Pierre-Marc Bureau
Malicious Apache module used for content injection: Linux/Chapro.A
Chapro

2012-07-13 ⋅ ESET Research ⋅ Aleksandr Matrosov
Rovnix bootkit framework updated
Rovnix