Malpedia Library

2016-09-13 ⋅ Palo Alto Networks Unit 42 ⋅ Claud Xiao
DualToy: New Windows Trojan Sideloads Risky Apps to Android and iOS Devices
DualToy DualToy

2016-08-30 ⋅ Palo Alto Networks Unit 42 ⋅ Jeff White
Pythons and Unicorns and Hancitor…Oh My! Decoding Binaries Through Emulation

2016-08-22 ⋅ Palo Alto Networks Unit 42 ⋅ Jeff White
VB Dropper and Shellcode for Hancitor Reveal New Techniques Behind Uptick
Hancitor

2016-08-16 ⋅ Palo Alto Networks Unit 42 ⋅ Josh Grunzweig, Robert Falcone
Aveo Malware Family Targets Japanese Speaking Users
Aveo

2016-08-02 ⋅ Palo Alto Networks Unit 42 ⋅ Vicky Ray
Orcus – Birth of an unusual plugin builder RAT
Orcus RAT

2016-07-26 ⋅ Palo Alto Networks Unit 42 ⋅ Jen Miller-Osborn, Robert Falcone
Attack Delivers ‘9002’ Trojan Through Google Drive

2016-07-08 ⋅ Palo Alto Networks Unit 42 ⋅ Josh Grunzweig
Investigating the LuminosityLink Remote Access Trojan Configuration
Luminosity RAT

2016-06-28 ⋅ Palo Alto Networks Unit 42 ⋅ Lior Efraim, Simon Conant, Tomer Bar
Prince of Persia – Game Over
Infy Infy

2016-06-23 ⋅ Palo Alto Networks Unit 42 ⋅ Kaoru Hayashi
Tracking Elirks Variants in Japan: Similarities to Previous Attacks
Elirks

2016-06-14 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
New Sofacy Attacks Against US Government Agency
Seduploader APT28

2016-06-14 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
New Sofacy Attacks Against US Government Agency

2016-06-14 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
New Sofacy Attacks Against US Government Agency
APT28

2016-05-26 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
The OilRig Campaign: Attacks on Saudi Arabian Organizations Deliver Helminth Backdoor
OilRig

2016-05-26 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
The OilRig Campaign: Attacks on Saudi Arabian Organizations Deliver Helminth Backdoor
Helminth

2016-05-24 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Josh Grunzweig, Mike Scott
New Wekby Attacks Use DNS Requests As Command and Control Mechanism
Roseam

2016-05-22 ⋅ Palo Alto Networks Unit 42 ⋅ Brandon Levene, Jen Miller-Osborn, Micah Yates, Mike Scott, Tom Keigher
Operation Ke3chang Resurfaces With New TidePool Malware
APT15

2016-05-22 ⋅ Palo Alto Networks Unit 42 ⋅ Brandon Levene, Jen Miller-Osborn, Micah Yates, Mike Scott, Tom Keigher
Operation Ke3chang Resurfaces With New TidePool Malware
Tidepool

2016-05-09 ⋅ Palo Alto Networks Unit 42 ⋅ Kaoru Hayashi, Vicky Ray
KRBanker Targets South Korea Through Adware and Exploit Kits
KrBanker

2016-05-02 ⋅ Palo Alto Networks Unit 42 ⋅ Simon Conant, Tomer Bar
Prince of Persia: Infy Malware Active In Decade of Targeted Attacks
Infy Infy

2016-05-02 ⋅ Palo Alto Networks Unit 42 ⋅ Simon Conant, Tomer Bar
Prince of Persia: Infy Malware Active In Decade of Targeted Attacks
Infy