Malpedia Library

2017-07-11 ⋅ 401 TRG ⋅ Nate Marx, Tom Hegel
Winnti (LEAD/APT17) Evolution - Going Open Source

2017-07-05 ⋅ Bleeping Computer ⋅ Lawrence Abrams
New Azer CryptoMix Ransomware Variant Released
CryptoMix

2017-06-27 ⋅ Palo Alto Networks Unit 42 ⋅ Esmid Idrizovic, Tom Lancaster
Paranoid PlugX
PlugX

2017-06-16 ⋅ FireEye ⋅ FireEye
FIN10: Anatomy of a Cyber Extortion Operation
FIN10

2017-06-14 ⋅ ThreatConnect ⋅ ThreatConnect Research Team
Phantom of the Opaera: New KASPERAGENT Malware Campaign
KasperAgent AridViper

2017-05-16 ⋅ Threatpost ⋅ Tom Spring
DocuSign Phishing Campaign Includes Hancitor Downloader

2017-05-02 ⋅ Threatpost ⋅ Tom Spring
Shamoon Collaborator Greenbug Adopts New Communication Tool
Greenbug

2017-04-25 ⋅ Proofpoint ⋅ Proofpoint Staff
Philadelphia Ransomware Brings Customization to Commodity Malware
Philadephia Ransom

2017-04-05 ⋅ Palo Alto Networks Unit 42 ⋅ Tom Lancaster, Tomer Bar
Targeted Attacks in the Middle East Using KASPERAGENT and MICROPSIA
KasperAgent Micropsia

2017-04-05 ⋅ Palo Alto Networks Unit 42 ⋅ Tom Lancaster, Tomer Bar
Targeted Attacks in the Middle East Using KASPERAGENT and MICROPSIA
vamp

2017-04-03 ⋅ JPCERT/CC ⋅ Shusei Tomonaga
RedLeaves - Malware Based on Open Source RAT
PlugX RedLeaves Trochilus RAT

2017-04-03 ⋅ ⋅ JPCERT/CC ⋅ Shusei Tomonaga
オープンソースのRATを改良したマルウエアRedLeaves
RedLeaves

2017-03-29 ⋅ Forcepoint ⋅ Roland Dela Paz
Trojanized Adobe installer used to install DragonOK’s new custom backdoor
KHRAT DragonOK

2017-03-15 ⋅ Bleeping Computer ⋅ Lawrence Abrams
Revenge Ransomware, a CryptoMix Variant, Being Distributed by RIG Exploit Kit
CryptoShield

2017-02-28 ⋅ Security Intelligence ⋅ Magal Baz, Or Safran
Dridex’s Cold War: Enter AtomBombing
Dridex

2017-02-21 ⋅ JPCERT/CC ⋅ Shusei Tomonaga
PlugX + Poison Ivy = PlugIvy? - PlugX Integrating Poison Ivy’s Code
PlugX

2017-02-10 ⋅ ⋅ JPCERT/CC ⋅ Shusei Tomonaga
PowerSploit
ChChes