Malpedia Library

2018-01-16 ⋅ Opcode Security research ⋅ ntopcode
Anatomy of the thread suspension mechanism in Windows (Windows Internals)

2017-12-13 ⋅ Bleeping Computer ⋅ Lawrence Abrams
WORK Cryptomix Ransomware Variant Released
CryptoMix

2017-11-14 ⋅ Palo Alto Networks Unit 42 ⋅ Tom Lancaster
Muddying the Water: Targeted Attacks in the Middle East
POWERSTATS MuddyWater

2017-11-13 ⋅ SecurityIntelligence ⋅ Limor Kessem, Maor Wiesen, Tal Darsan, Tomer Agayev
New Banking Trojan IcedID Discovered by IBM X-Force Research
IcedID IcedID Downloader

2017-11-01 ⋅ Virus Bulletin ⋅ Patrick Wardle
Offensive malware analysis: dissecting OSX/FruitFly.B via a custom C&C server
FruitFly

2017-10-16 ⋅ 401TRG ⋅ Tom Hegel
An Update on Winnti (LEAD/APT17)

2017-09-22 ⋅ Threatpost ⋅ Tom Spring
EternalBlue Exploit Used in Retefe Banking Trojan Campaign
Retefe

2017-09-21 ⋅ Malwarebytes ⋅ Jérôme Segura
Fake IRS notice delivers customized spying tool
RMS

2017-08-22 ⋅ ESET Research ⋅ Tomáš Gardoň
Gamescom 2017: It’s all fun and games until black hats step in
Joao

2017-08-11 ⋅ Threatpost ⋅ Tom Spring
Ukrainian Man Arrested, Charged in NotPetya Distribution
EternalPetya

2017-08-10 ⋅ ⋅ botfrei Blog ⋅ Tom Berchem
Weltweite Spamwelle verbreitet teuflische Variante des Locky
Locky

2017-08-01 ⋅ Palo Alto Networks Unit 42 ⋅ Simon Conant, Tomer Bar
Prince of Persia – Ride the Lightning: Infy returns as “Foudre”
Infy

2017-08-01 ⋅ Palo Alto Networks Unit 42 ⋅ Simon Conant, Tomer Bar
Prince of Persia – Ride the Lightning: Infy returns as “Foudre”
Infy Infy

2017-07-11 ⋅ 401 TRG ⋅ Nate Marx, Tom Hegel
Winnti (LEAD/APT17) Evolution - Going Open Source

2017-07-05 ⋅ Bleeping Computer ⋅ Lawrence Abrams
New Azer CryptoMix Ransomware Variant Released
CryptoMix

2017-06-27 ⋅ Palo Alto Networks Unit 42 ⋅ Esmid Idrizovic, Tom Lancaster
Paranoid PlugX
PlugX

2017-06-16 ⋅ FireEye ⋅ FireEye
FIN10: Anatomy of a Cyber Extortion Operation
FIN10

2017-06-14 ⋅ ThreatConnect ⋅ ThreatConnect Research Team
Phantom of the Opaera: New KASPERAGENT Malware Campaign
KasperAgent AridViper

2017-05-16 ⋅ Threatpost ⋅ Tom Spring
DocuSign Phishing Campaign Includes Hancitor Downloader

2017-05-02 ⋅ Threatpost ⋅ Tom Spring
Shamoon Collaborator Greenbug Adopts New Communication Tool
Greenbug