Malpedia Library

2021-04-30 ⋅ Twitter (@3xp0rtblog) ⋅ 3xp0rt
Tweet on Zenar Miner

2021-04-26 ⋅ getrevue ⋅ Twitter (@80vul)
Hunting Cobalt Strike DNS redirectors by using ZoomEye
Cobalt Strike

2021-04-23 ⋅ Twitter (@vikas891) ⋅ Vikas Singh
Tweet on DOPPEL SPIDER using Intensive/Multiple Injected Cobalt Strike Beacons with varied polling intervals
Cobalt Strike DoppelPaymer

2021-04-22 ⋅ Twitter (@AltShiftPrtScn) ⋅ Peter Mackenzie
Twwet On TTPs seen in IR used by DOPPEL SPIDER
Cobalt Strike DoppelPaymer

2021-04-22 ⋅ Twitter (@ET_Labs) ⋅ ET Labs
Tweet on Lunar Builder exfiltrating data via Discord webhook

2021-04-22 ⋅ Twitter (@AffableKraut) ⋅ Eric Brandel
A thread on possibly new magecart skimmer
magecart

2021-04-21 ⋅ Twitter (@alberto__segura) ⋅ Alberto Segura
Tweet on FluBot Version 4.0
FluBot

2021-04-20 ⋅ Twitter (@iiyonite) ⋅ Stefan Soesanto
Tweet on Uniti 61419
Tick

2021-04-19 ⋅ Twitter (@_alex_il_) ⋅ Alex Ilgayev
Tweet on QakBot's additional decryption mechanism
QakBot

2021-04-18 ⋅ Twitter (@ViriBack) ⋅ ViriBack
Tweet on Seth Loader

2021-04-15 ⋅ Twitter (@felixw3000) ⋅ Felix
Tweet on Dridex's evasion technique
Dridex

2021-04-13 ⋅ Twitter (@ESETresearch) ⋅ ESET Research
Tweet on TSCookie for FreeBSD platform
TSCookie

2021-04-12 ⋅ Twitter (@inversecos) ⋅ inversecos
Tweet on TTPs associated with Hades Ransomware
Hades

2021-04-12 ⋅ Twitter (@elisalem9) ⋅ Eli Salem
Tweets on QakBot
QakBot

2021-04-08 ⋅ Twitter (@3xp0rtblog) ⋅ 3xp0rt
Tweet on Bloody Stealer
BloodyStealer

2021-03-31 ⋅ Twitter (@hatr) ⋅ Hakan Tanriverdi
Tweet on Ghostwriter
Ghostwriter

2021-03-31 ⋅ Twitter (@ClearskySec) ⋅ ClearSky Cyber Security
Tweet on Adamantium stealer
Adamantium Thief

2021-03-27 ⋅ Github (StrangerealIntel) ⋅ Twitter (@Arkbird_SOLG)
Terraloader: Congrats, you have a new fake job!
TerraLoader

2021-03-26 ⋅ Twitter (@3xp0rtblog) ⋅ 3xp0rt
Tweet on Cypress Stealer

2021-03-25 ⋅ Twitter (@ESETresearch) ⋅ ESET Research
Tweet on iOS/Spy.Postlo.A malware