Malpedia Library

2018-01-25 ⋅ Palo Alto Networks Unit 42 ⋅ Robert Falcone
OilRig uses RGDoor IIS Backdoor on Targets in the Middle East
RGDoor

2018-01-23 ⋅ Möbius Strip Reverse Engineering ⋅ Rolf Rolles
A Walk-Through Tutorial, with Code, on Statically Unpacking the FinSpy VM: Part One, x86 Deobfuscation
FinFisher RAT

2018-01-23 ⋅ RiskIQ ⋅ Yonathan Klijnsma
Espionage Campaign Leverages Spear Phishing, RATs Against Turkish Defense Contractors
Remcos

2018-01-22 ⋅ Acronis ⋅ Acronis Security
Paradise Ransomware strikes again
Paradise

2018-01-22 ⋅ ZDNet ⋅ Danny Palmer
This hacking gang just updated the malware it uses against UK targets
Turla

2018-01-18 ⋅ Lookout ⋅ Andrew Blaich, Apurva Kumar, Cooper Quintin, Eva Galperin, Jeremy Richards, Michael Flossman
Dark Caracal: Cyber-espionage at a Global Scal
CrossRAT Bandook Dark Caracal

2018-01-17 ⋅ 360 netlab ⋅ RootKiter
Art of Steal: Satori Variant is Robbing ETH BitCoin by Replacing Wallet Address
Satori

2018-01-16 ⋅ Kaspersky Labs ⋅ Alexey Firsh, Nikita Buchka
Skygofree: Following in the footsteps of HackingTeam
Skygofree

2018-01-16 ⋅ RiskIQ ⋅ Yonathan Klijnsma
First Activities of Cobalt Group in 2018: Spear Phishing Russian Banks
Cobalt

2018-01-15 ⋅ Acronis ⋅ Acronis Security
GlobeImposter ransomware: A holiday gift from the Necurs botnet
GlobeImposter

2018-01-15 ⋅ VirIT ⋅ Gianfranco Tonello
Bootkits are not dead. Pitou is back!
Pitou

2018-01-13 ⋅ The Washington Post ⋅ Ellen Nakashima
Russian military was behind ‘NotPetya’ cyberattack in Ukraine, CIA concludes
EternalPetya

2018-01-12 ⋅ Medium ⋅ Jacob Pimental
Sonja Analysis
Snojan

2018-01-12 ⋅ Stormshield ⋅ Rémi Jullian
Analyzing an Agent Tesla campaign: from a word document to the attacker credentials
Agent Tesla

2018-01-11 ⋅ Youtube (OALabs) ⋅ Sergei Frankoff
Unpacking Pykspa Malware With Python and IDA Pro - Subscriber Request Part 1
Pykspa

2018-01-10 ⋅ Wired ⋅ Louise Matsakis
Hack Brief: Russian Hackers Release Apparent IOC Emails in Wake of Olympic Ban
APT28

2018-01-10 ⋅ Freebuf ⋅ Tencent Computer Manager
Analysis of BlackTech's latest APT attack
PLEAD

2018-01-10 ⋅ U.S. Department of Justice
Phillip Durachinsky Indictment
FruitFly

2018-01-09 ⋅ Jacquais
BestKorea
BestKorea

2018-01-06 ⋅ CERT.PL ⋅ Paweł Srokosz
Ostap malware analysis (Backswap dropper)
ostap