Malpedia Library

2020-05-28 ⋅ Twitter (@stvemillertime) ⋅ Steve Miller
Tweet on TClient / FIRESHADOW used by Tropic Trooper
TClient

2020-05-28 ⋅ Twitter (@Andrew___Morris) ⋅ Andrew Morris
Tweet on Sandworm threat actor exploiting CVE-2019-10149

2020-05-28 ⋅ Twitter (@BushidoToken) ⋅ BushidoToken
Tweet on OZH RAT
OZH RAT

2020-05-25 ⋅ Twitter (@JAMESWT_MHT) ⋅ JamesWT
Tweet on FuckUnicorn instance of HiddenTear
HiddenTear

2020-05-15 ⋅ Twitter (@nunohaien) ⋅ Tillmann Werner
Twitter Thread on attacks on high-performance computing labs
Loerbas

2020-05-15 ⋅ Twitter (@stvemillertime) ⋅ Steve Miller
Tweet on SOGU development timeline, including TIGERPLUG IOCs
PlugX

2020-05-12 ⋅ Twitter (@James_inthe_box) ⋅ James_inthe_box
Tweet on Himera Loader
Himera Loader

2020-05-12 ⋅ Twitter (@cocaman) ⋅ Corsin Camichel
Tweet on AbSent Loader
AbSent Loader

2020-05-11 ⋅ Intezer ⋅ Twitter (IntezerLabs)
Tweet on LD-PRELOAD userland rootkit
Kinsing

2020-05-08 ⋅ Twitter (@sysopfb) ⋅ Jason Reaves
Tweet on GuLoader anti analysis techniques
CloudEyE

2020-05-07 ⋅ Twitter (@ESETresearch) ⋅ ESET Research
Tweet on PeddleCheap packed with Winnti packer
PeddleCheap

2020-05-06 ⋅ Twitter (@moranned) ⋅ Ned Moran
Tweet on side effects of Doxing in the context OilRig

2020-05-04 ⋅ Twitter (@VK_intel) ⋅ Vitali Kremez
GuLoader API Loader Algorithm
CloudEyE

2020-04-30 ⋅ Twitter (@pancak3lullz) ⋅ @pancak3lullz
First public tweet on MASS Logger
MASS Logger

2020-04-29 ⋅ Twitter (@VK_intel) ⋅ Vitali Kremez
Some Insight into GuLoader family
CloudEyE

2020-04-29 ⋅ Twitter (@h4ckak) ⋅ Ring4sky
More IOCs related to PhantomLance
PhantomLance

2020-04-27 ⋅ Twitter (@GrujaRS) ⋅ GrujaRS
Tweet about spotting goCryptoLocker in the wild
goCryptoLocker

2020-04-21 ⋅ Twitter (@VK_intel) ⋅ Vitali Kremez
Tweet on Signed GuLoader
CloudEyE

2020-04-20 ⋅ Twitter (@LukasStefanko) ⋅ Lukáš Štefanko
Tweet on Rogue / Dark Shades
Dark Shades

2020-04-15 ⋅ Twitter (MalwareHunterTeam) ⋅ MalwareHunterTeam
Tweet on SpyMax sample
SpyMax