Malpedia Library

Click here to download all references as Bib-File.•

2017-10-26 ⋅ FireEye ⋅ Barry Vengerik, Ben Read, Brian Mordosky, Christopher Glyer, Ian Ahl, Matt Williams, Michael Matonis, Nick Carr
BACKSWING - Pulling a BADRABBIT Out of a Hat
EternalPetya

2017-10-25 ⋅ RiskIQ ⋅ Yonathan Klijnsma
Down the Rabbit Hole: Tracking the BadRabbit Ransomware to a Long Ongoing Campaign of Target Selection
EternalPetya

2017-10-24 ⋅ ESET Research ⋅ Marc-Etienne M.Léveillé
Bad Rabbit: Not‑Petya is back with improved ransomware
EternalPetya

2017-10-20 ⋅ Symantec ⋅ Critical Attack Discovery and Intelligence Team
Dragonfly: Western energy sector targeted by sophisticated attack group
Dorshel Goodor Heriplor Karagany Listrix ENERGETIC BEAR

2017-10-20 ⋅ Lookout ⋅ Michael Flossman
JadeRAT mobile surveillanceware spikes in espionage activity
JadeRAT

2017-10-20 ⋅ ESET Research ⋅ ESET Research
OSX/Proton spreading again through supply‑chain attack
Proton RAT

2017-10-20 ⋅ Symantec ⋅ Security Response Attack Investigation Team
Dragonfly: Western energy sector targeted by sophisticated attack group
Dorshel Heriplor Karagany Listrix

2017-10-20 ⋅ Symantec ⋅ Security Response Attack Investigation Team
Dragonfly: Western energy sector targeted by sophisticated attack group
ENERGETIC BEAR

2017-10-19 ⋅ Proofpoint ⋅ Kafeine, Pierre T
APT28 racing to exploit CVE-2017-11292 Flash vulnerability before patches are deployed
Seduploader

2017-10-16 ⋅ Proofpoint ⋅ Axel F, Pierre T
Leviathan: Espionage actor spearphishes maritime and defense targets
NanHaiShu SeDll APT40

2017-10-16 ⋅ Kaspersky Labs ⋅ GReAT
BlackOasis APT and new targeted attacks leveraging zero-day exploit
FinFisher RAT BlackOasis

2017-10-16 ⋅ Akamai ⋅ Akamei
UPnProxy: Blackhat Proxies via NAT Injections
Inception Framework

2017-10-13 ⋅ Morphisec ⋅ Michael Gorelik
FIN7 Dissected: Hackers Accelerate Pace of Innovation
FIN7

2017-10-13 ⋅ Morphisec ⋅ Michael Gorelik
FIN7 Dissected: Hackers Accelerate Pace of Innovation

2017-10-11 ⋅ SecurityIntelligence ⋅ Limor Kessem
TrickBot Takes to Latin America, Continues to Expand Its Global Reach

2017-10-11 ⋅ Wraith Hacker Blog ⋅ Wraith Hacker
More info on 'Evolved DNSMessenger'
DNSMessenger

2017-10-09 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
OilRig Group Steps Up Attacks with New Delivery Documents and New Injector Trojan
OilRig

2017-10-06 ⋅ CERT.PL ⋅ Jarosław Jedynak, Maciej Kotowicz
Peering into spam botnets
Emotet Kelihos Necurs SendSafe Tofsee

2017-10-05 ⋅ FireEye ⋅ Nart Villeneuve, Randi Eitzman, Sandor Nemes, Tyler Dean
Significant FormBook Distribution Campaigns Impacting the U.S. and South Korea
Formbook

2017-10-05 ⋅ Trend Micro ⋅ Jaromír Hořejší
SYSCON Backdoor Uses FTP as a C&C Channel
Syscon