Malpedia Library

2017-03-01 ⋅ SecurityIntelligence ⋅ Gadi Ostrovsky, Limor Kessem
GootKit Developers Dress It Up With Web Traffic Proxy
GootKit

2017-02-15 ⋅ Morphick ⋅ Jeremy Humble, Nick Hoffman
Deep Dive on the DragonOK Rambo Backdoor
Rambo DragonOK

2017-01-26 ⋅ SecurityIntelligence ⋅ Limor Kessem
Around the World With Zeus Sphinx: From Canada to Australia and Back
Zloader

2017-01-10 ⋅ SecurityIntelligence ⋅ Limor Kessem, Lior Keshet
Client Maximus: New Remote Overlay Malware Highlights Rising Malcode Sophistication in Brazil
Client Maximus

2016-09-27 ⋅ Best Security Research ⋅ Alex Dimchev
New Voldemort/Nagini Ransomware Virus Infection
Nagini

2016-09-20 ⋅ SecurityIntelligence ⋅ Denis Laskov, Hanan Natan, Limor Kessem
Meanwhile in Britain, Qadars v3 Hardens Evasion, Targets 18 UK Banks
Qadars

2016-09-09 ⋅ InfoArmor ⋅ Andrew Komarov
GOVRAT V2.0 - Attacking US military and government
GovRAT

2016-08-16 ⋅ SecurityIntelligence ⋅ Denis Laskov, Limor Kessem, Ziv Eli
Brazil Can’t Catch a Break: After Panda Comes the Sphinx
Zeus OpenSSL

2016-08-13 ⋅ CrowdStrike ⋅ Chris Scott, Wendi Whitmore
Detecting and Responding: Pandas and Bears
FOXY PANDA POISONUS PANDA

2016-08-01 ⋅ Electronic Frontier Foundation ⋅ Claudio Guarnieri, Cooper Quintin, Eva Galperin, Morgan Marquis-Boire
Operation Manul
jRAT Bandook

2016-07-08 ⋅ SecurityIntelligence ⋅ Limor Kessem
GootKit: Bobbing and Weaving to Avoid Prying Eyes
GootKit

2016-05-26 ⋅ Symantec ⋅ Security Response
SWIFT attackers’ malware linked to more financial attacks
Contopee DYEPACK Sierra(Alfa,Bravo, ...) Lazarus Group

2016-05-26 ⋅ Symantec ⋅ Symantec Security Response
SWIFT attackers’ malware linked to more financial attacks
Contopee Lazarus Group

2016-04-27 ⋅ Kaspersky Labs ⋅ GReAT
Freezer Paper around Free Meat (Repackaging Open Source BeEF for Tracking and More)
Charming Kitten

2016-04-14 ⋅ SecurityIntelligence ⋅ Limor Kessem, Lior Keshet
Meet GozNym: The Banking Malware Offspring of Gozi ISFB and Nymaim
ISFB Nymaim GozNym

2016-04-06 ⋅ Proofpoint ⋅ Chris Wakelin
Locky Ransomware Is Becoming More Sophisticated - Cybercriminals Continue Email Campaign Innovation
Rockloader

2016-01-01 ⋅ CrowdStrike ⋅ Christopher Scott, Wendi Whitmore
Detecting and Responding: Pandas and Bears
ELOQUENT PANDA UNION PANDA

2015-12-08 ⋅ The Citizenlab ⋅ Claudio Guarnieri, John Scott-Railton, Marion Marschalek, Morgan Marquis-Boire
Packrat: Seven Years of a South American Threat Actor
AdWind Adzok CyberGate Xtreme RAT Packrat

2015-11-17 ⋅ SpiderLabs Blog ⋅ Eric Merritt
New Memory Scraping Technique in Cherry Picker PoS Malware
CherryPicker POS

2015-11-05 ⋅ Kudelski Security ⋅ kscert
Sphinx Moth: Expanding our knowledge of the “Wild Neutron” / “Morpho” APT
WildNeutron