Malpedia Library

2017-02-15 ⋅ Adventures in Security ⋅ Nick Hoffman
The Rambo Backdoor
Rambo

2017-02-15 ⋅ Morphick ⋅ Jeremy Humble, Nick Hoffman
Deep Dive on the DragonOK Rambo Backdoor
Rambo DragonOK

2017-02-15 ⋅ Forbes ⋅ Thomas Brewster
Inside OilRig -- Tracking Iran's Busiest Hacker Crew On Its Global Rampage
OilRig

2017-02-15 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
Magic Hound Campaign Attacks Saudi Targets
APT35 Cleaver

2017-02-15 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
Magic Hound Campaign Attacks Saudi Targets
Leash MPKBot pupy Rocket Kitten

2017-02-14 ⋅ Fortinet ⋅ Floser Bacurio, Joie Salvio
REMCOS: A New RAT In The Wild
Remcos

2017-02-14 ⋅ Palo Alto Networks Unit 42 ⋅ Robert Falcone
XAgentOSX: Sofacy’s XAgent macOS Tool
X-Agent

2017-02-13 ⋅ RSA ⋅ RSA Research
KINGSLAYER – A SUPPLY CHAIN ATTACK
CodeKey PlugX

2017-02-12 ⋅ BAE Systems ⋅ BAE Systems Applied Intelligence
Lazarus & Watering-hole attacks
Ratankba

2017-02-12 ⋅ Symantec ⋅ A L Johnson
Attackers target dozens of global banks with new malware
Ratankba Lazarus Group

2017-02-12 ⋅ Symantec ⋅ A L Johnson
Attackers target dozens of global banks with new malware
Joanap Ratankba Sierra(Alfa,Bravo, ...) Lazarus Group

2017-02-10 ⋅ Wapack Labs ⋅ Anonymous
Rebranding iSpy Keylogger: Gear Informer
GearInformer

2017-02-10 ⋅ Department of Homeland Security ⋅ Communications Integration Center, National Cybersecurity
AR-17-20045 - Enhanced Analysis of GRIZZLY STEPPE Activity
APT29

2017-02-07 ⋅ Bleeping Computer ⋅ Lawrence Abrams
Erebus Ransomware Utilizes a UAC Bypass and Request a $90 Ransom Payment
Erebus

2017-02-07 ⋅ Sixgill ⋅ Sixgill
PROTON - A New MAC OS RAT
Proton RAT

2017-02-06 ⋅ Iran Threats ⋅ Claudio Guarnieri, Collin Anderson
iKittens: Iranian Actor Resurfaces with Malware for Mac (MacDownloader)
MacDownloader Charming Kitten

2017-02-05 ⋅ IDF ⋅ IDF
Hamas Uses Fake Facebook Profiles to Target Israeli Soldiers
GlanceLove

2017-02-04 ⋅ ⋅ de Volkskrant ⋅ Huib Modderkolk
Russen faalden bij hackpogingen ambtenaren op Nederlandse ministeries
APT28

2017-01-31 ⋅ SANS ISC InfoSec Forums ⋅ Johannes
Malicious Office files using fileless UAC bypass to drop KEYBASE malware
KeyBase

2017-01-31 ⋅ Malwarebytes ⋅ Malwarebytes Labs
Locky Bart ransomware and backend server analysis
Locky