Malpedia Library

Click here to download all references as Bib-File.•

2017-12-15 ⋅ hasherezade
Unpacking Magniber ransomware with PE-sieve (former: 'hook_finder')
Magniber

2017-12-14 ⋅ FireEye ⋅ Blake Johnson, Christopher Glyer, Dan Caban, Dan Scali, Marina Krotofil, Nathan Brubaker
Attackers Deploy New ICS Attack Framework “TRITON” and Cause Operational Disruption to Critical Infrastructure
Triton TEMP.Veles

2017-12-13 ⋅ ZDNet ⋅ Zack Whittaker
Maker of sneaky Mac adware sends security researcher cease-and-desist letters
Pirrit

2017-12-12 ⋅ Bleeping Computer ⋅ Catalin Cimpanu
MoneyTaker Hacker Group Steals Millions from US and Russian Banks
MoneyTaker

2017-12-11 ⋅ Palo Alto Networks Unit 42 ⋅ Robert Falcone
OilRig Performs Tests on the TwoFace Webshell
TwoFace

2017-12-08 ⋅ Malwarebytes ⋅ Thomas Reed
Interesting disguise employed by new Mac malware HiddenLotus
HiddenLotus

2017-12-08 ⋅ ESET Research ⋅ Filip Kafka
StrongPity2 spyware replaces FinFisher in MitM campaign – ISP involved?
StrongPity

2017-12-07 ⋅ Fortinet ⋅ Floser Bacurio, Joie Salvio
A Peculiar Case of Orcus RAT Targeting Bitcoin Investors
Orcus RAT

2017-12-07 ⋅ FireEye ⋅ Jacqueline O’Leary, Manish Sardiwal, Nalani Fraser, Nick Richard, Vincent Cannon, Yogesh Londhe
New Targeted Attack in the Middle East by APT34, a Suspected Iranian Threat Group, Using CVE-2017-11882 Exploit
OilRig

2017-12-05 ⋅ ClearSky Research Team
Charming Kitten: Iranian Cyber Espionage Against Human Rights Activists, Academic Researchers and Media Outlets
DownPaper

2017-12-04 ⋅ RSA ⋅ Jack Wesley Riley
The Shadows of Ghosts Inside the response of a unique Carbanak intrusion
GOTROJ MimiKatz

2017-12-04 ⋅ ⋅ Macnica ⋅ Macnica
New method of macro malware disguised as defense-related files
RedLeaves

2017-12-03 ⋅ Karsten Hahn
Malware Analysis - ROKRAT Unpacking from Injected Shellcode

2017-11-28 ⋅ RiskIQ ⋅ Yonathan Klijnsma
Gaffe Reveals Full List of Targets in Spear Phishing Attack Using Cobalt Strike Against Financial Institutions
Cobalt

2017-11-28 ⋅ FireEye ⋅ Abhay Vaish, Sandor Nemes
Newly Observed Ursnif Variant Employs Malicious TLS Callback Technique to Achieve Process Injection
ISFB

2017-11-28 ⋅ SentinelOne ⋅ Arnaud Abbati
OSX.CPUMEANER: New Cryptocurrency Mining Trojan Targets MacOS
CpuMeaner

2017-11-27 ⋅ Blacklake ⋅ Brian Krebs
WHO WAS THE NSA CONTRACTOR ARRESTED FOR LEAKING THE ‘SHADOW BROKERS’ HACKING TOOLS?
The Shadow Brokers

2017-11-24 ⋅ Bleeping Computer ⋅ Catalin Cimpanu
Mirai Activity Picks up Once More After Publication of PoC Exploit Code
Mirai

2017-11-22 ⋅ Flashpoint ⋅ Vitali Kremez
Trickbot Gang Evolves, Incorporates Account Checking Into Hybrid Attack Model
TrickBot

2017-11-21 ⋅ Vitali Kremez
Let's Learn: Trickbot Socks5 Backconnect Module In Detail
TrickBot