Malpedia Library

2026-05-18 ⋅ Zynap ⋅ Oscar Gallego
Zynap’s Next-Gen Sandbox Redefines Automatic Malware Analysis
Black Basta HijackLoader

2026-05-18 ⋅ Gen Threat Labs ⋅ Gen Threat Labs
X.com - Gen Threat Labs - AuraStealer (version 1.8.0)
Aura Stealer

2026-05-14 ⋅ ANY.RUN ⋅ Moises Cerqueira
LATAM Under Siege: Agent Tesla’s 18-Month Credential Theft Campaign Against Chilean Enterprises
Agent Tesla

2026-05-14 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Kazuar: Anatomy of a nation-state botnet
Kazuar

2026-05-13 ⋅ Check Point Research ⋅ Checkpoint Research
THUS SPOKE…THE GENTLEMEN
Gentlemen

2026-04-22 ⋅ Gen Digital Inc ⋅ Gen Digital Inc.
When Malware Authors Study Algebra: The Group Theory Inside Bedep's DGA
Bedep

2026-04-14 ⋅ Gen ⋅ Gen Threat Labs
Chasing an Angry Spark

2026-04-11 ⋅ Breakglass Intelligence ⋅ Breakglass Intelligence
We Dumped a Live Kimsuky C2 and Recovered Every Stage of the Kill Chain: CHM Dropper, VBScript Stager, PowerShell Keylogger
RandomQuery RandomQuery

2026-04-07 ⋅ NCSC UK ⋅ NCSC UK
UK exposes Russian military intelligence hijacking vulnerable routers for cyber attacks

2026-04-07 ⋅ Talos Intelligence ⋅ Ashley Shen
New Lua-based malware “LucidRook” observed in targeted attacks against Taiwanese organizations
LucidKnight LucidPawn LucidRook UAT-10362

2026-04-07 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
SOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks

2026-04-07 ⋅ Gen Digital ⋅ Jan Rubín, Vojtěch Krejsa
Remus: Unmasking The 64-bit Variant of the Infamous Lumma Stealer
Lumma Stealer Remus Tenzor

2026-03-20 ⋅ IC3 ⋅ FBI, IC3
I-032026-PSA: Russian Intelligence Services Target Commercial Messaging Application Accounts

2026-03-19 ⋅ Gen ⋅ Vojtěch Krejsa
VoidStealer: Debugging Chrome to Steal Its Secrets
VoidStealer

2026-03-18 ⋅ Google ⋅ Google Threat Intelligence Group
The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors
GHOSTBLADE UNC6748

2026-03-18 ⋅ Google ⋅ Google Threat Intelligence Group
The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors
GHOSTBLADE

2026-03-17 ⋅ Seqrite ⋅ Sathwik Ram Prakki
Operation GhostMail: Russian APT exploits Zimbra Webmail to Target Ukraine State Agency
ZimReaper

2026-03-12 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Storm-2561 uses SEO poisoning to distribute fake VPN clients for credential theft
Storm-2561

2026-03-06 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
AI as tradecraft: How threat actors operationalize AI
OtterCookie

2026-03-03 ⋅ Google ⋅ Google Threat Intelligence Group
Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit
Coruna