Malpedia Library

Click here to download all references as Bib-File.•

2017-10-04 ⋅ Security 0wnage ⋅ Mo Bustami
Continued Activity targeting the Middle East
POWERSTATS

2017-10-04 ⋅ CrowdStrike ⋅ Karan Sood
Protecting the Software Supply Chain: Deep Insights into the CCleaner Backdoor
CCleaner Backdoor

2017-10-04 ⋅ Twitter (@JohnLaTwC) ⋅ John Lambert
Tweet on Turla JS backdoor
Maintools.js

2017-10-02 ⋅ Intezer ⋅ Jay Rosenberg
Evidence Aurora Operation Still Active Part 2: More Ties Uncovered Between CCleaner Hack & Chinese Hackers
CCleaner Backdoor

2017-09-28 ⋅ Palo Alto Networks Unit 42 ⋅ Josh Grunzweig, Robert Falcone
Threat Actors Target Government of Belarus Using CMSTAR Trojan
BYEBY CMSTAR Vicious Panda

2017-09-28 ⋅ Palo Alto Networks Unit 42 ⋅ Josh Grunzweig, Robert Falcone
Threat Actors Target Government of Belarus Using CMSTAR Trojan
BYEBY CMSTAR

2017-09-28 ⋅ ESET Research ⋅ Michal Poslušný, Peter Kálnai
Money‑making machine: Monero‑mining malware
Monero Miner

2017-09-27 ⋅ Proofpoint ⋅ Proofpoint Staff
Threat Actor Profile: TA505, From Dridex to GlobeImposter
TA505

2017-09-26 ⋅ Malwarebytes ⋅ Malwarebytes Labs
Elaborate scripting-fu used in espionage attack against Saudi Arabia Government entity
POWERSTATS

2017-09-25 ⋅ Kaspersky Labs ⋅ Alexey Shulmin, Dmitry Karasovsky, Vasily Berdnikov
A simple example of a complex cyberattack
Microcin Vicious Panda

2017-09-25 ⋅ Kaspersky Labs ⋅ Alexey Shulmin, Dmitry Karasovsky, Vasily Berdnikov
A simple example of a complex cyberattack
Microcin

2017-09-25 ⋅ Palo Alto Networks Unit 42 ⋅ Jeff White
Analyzing the Various Layers of AgentTesla’s Packing
Agent Tesla

2017-09-20 ⋅ FireEye ⋅ Jacqueline O’Leary, Josiah Kimble, Kelli Vanderlee, Nalani Fraser
Insights into Iranian Cyber Espionage: APT33 Targets Aerospace and Energy Sectors and has Ties to Destructive Malware
DROPSHOT Nanocore RAT NetWire RC SHAPESHIFT TURNEDUP APT33

2017-09-20 ⋅ Intezer ⋅ Jay Rosenberg
Evidence Aurora Operation Still Active: Supply Chain Attack Through CCleaner
CCleaner Backdoor

2017-09-19 ⋅ Kaspersky ⋅ Vladislav Pintiysky, Vyacheslav Rusakov
A Modern Hypervisor as a Basis for a Sandbox

2017-09-19 ⋅ Twitter (@craiu) ⋅ Costin Raiu
Tweet on Shared Code between CCleaner and APT17 Missl backdoor
CCleaner Backdoor

2017-09-19 ⋅ Cymmetria ⋅ Cymmetria
Unveiling Patchwork – a targeted attack caught with cyber deception
QUILTED TIGER

2017-09-18 ⋅ Kaspersky Labs ⋅ Alexander Liskin, Andrey Kryukov, Anton Ivanov
An (un)documented Word feature abused by attackers
Inception Framework

2017-09-18 ⋅ ThreatConnect ⋅ Paul Vann
Casting a Light on BlackEnergy
BlackEnergy

2017-09-18 ⋅ Morphisec ⋅ Michael Gorelik
Morphisec Discovers CCleaner Backdoor Saving Millions of Avast Users
CCleaner Backdoor