Malpedia Library

2026-05-19 ⋅ Trend Micro ⋅ Aldrin Ceriola, Gabriel Nicoleta, Jovit Samaniego, Mohamed Fahmy
Inside SHADOW-WATER-063’s Banana RAT: From Build Server to Banking Fraud
Banana RAT SHADOW-WATER-063

2026-05-18 ⋅ Microsoft ⋅ Microsoft Defender Security Research Team
How Storm-2949 turned a compromised identity into a cloud-wide breach
Storm-2949

2026-05-18 ⋅ Zynap ⋅ Oscar Gallego
Zynap’s Next-Gen Sandbox Redefines Automatic Malware Analysis
Black Basta HijackLoader

2026-05-18 ⋅ Gen Threat Labs ⋅ Gen Threat Labs
X.com - Gen Threat Labs - AuraStealer (version 1.8.0)
Aura Stealer

2026-05-17 ⋅ neso.re ⋅ neso
ClickFix x HijackLoader: Dissecting a Live Stealer Campaign
HijackLoader

2026-05-17 ⋅ Github (zanez) ⋅ Irvin Martínez González
Analysis on Malware that attacks Israel's Water treatment facilities
ZionSiphon

2026-05-16 ⋅ Symantec ⋅ Threat Hunter Team
Fast16: Pre-Stuxnet Sabotage Tool Was Built to Subvert Nuclear Weapons Simulations
fast16

2026-05-16 ⋅ Derp ⋅ Matt Kirkland
Vidar v1.5 in Go: same family, new language, heavy sandbox checks
Vidar

2026-05-14 ⋅ eSentire ⋅ eSentire Threat Response Unit (TRU)
Amatera Stealer 4.0.2 Beta: What's New in This Variant
Amatera

2026-05-14 ⋅ ESET Research ⋅ ESET Research
FrostyNeighbor: Fresh mischief and digital shenanigans
Cobalt Strike PicassoLoader

2026-05-14 ⋅ ANY.RUN ⋅ Moises Cerqueira
LATAM Under Siege: Agent Tesla’s 18-Month Credential Theft Campaign Against Chilean Enterprises
Agent Tesla

2026-05-14 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Kazuar: Anatomy of a nation-state botnet
Kazuar

2026-05-13 ⋅ Rapid7 ⋅ Anna Širokova
When IT Support Calls: Dissecting a ModeloRAT Campaign from Teams to Domain Compromise
ModeloRAT

2026-05-13 ⋅ HarfangLab ⋅ HarfangLab CTR
Gamaredon’s infection chain: Spoofed emails, GammaDrop and GammaLoad
GammDrop GammaLoad

2026-05-13 ⋅ Check Point Research ⋅ Checkpoint Research
THUS SPOKE…THE GENTLEMEN
Gentlemen

2026-05-13 ⋅ 0x3oBAD ⋅ Abdullah Islam
MustangPanda New Backdoor LotusLite
LOTUSLITE

2026-05-12 ⋅ Symantec ⋅ Threat Hunter Team
Jewelbug: APT Group Runs Espionage and Crypto Fraud Operations Side by Side
Earth Alux REF7707

2026-05-11 ⋅ Qianxin ⋅ QiAnXin XLab Team
Threat Actor Mr_Rot13 Actively Exploits CVE-2026-41940 for Backdoor Deployment
Mr_Rot13