Malpedia Library

Click here to download all references as Bib-File.•

2017-10-30 ⋅ Kaspersky Labs ⋅ Ghareeb Saad, Mohamad Amin Hasbini
Gaza Cybergang – updated activity in 2017:
Molerats

2017-10-30 ⋅ ESET Research ⋅ Frédéric Vachon
Windigo Still not Windigone: An Ebury Update
Ebury

2017-10-29 ⋅ quangnh89
Sality Configuration Extractor (sality_extractor.py)
Sality

2017-10-27 ⋅ Palo Alto Networks Unit 42 ⋅ Unit42
Tracking Subaat: Targeted Phishing Attack Leads to Threat Actor’s Repository
The Gorgon Group

2017-10-27 ⋅ Independent.co.uk ⋅ Adam Withnall
British security minister says North Korea was behind WannaCry hack on NHS
WannaCryptor

2017-10-27 ⋅ Palo Alto Networks Unit 42 ⋅ Unit 42
Tracking Subaat: Targeted Phishing Attack Leads to Threat Actor’s Repository

2017-10-26 ⋅ RiskIQ ⋅ Yonathan Klijnsma
New htpRAT Gives Complete Remote Control Capabilities to Chinese Cyber Threat Actors
htpRAT

2017-10-26 ⋅ Macworld ⋅ Liviu Arsene
Keranger: the first “in-the-wild” ransomware for Macs. But certainly not the last
KeRanger

2017-10-26 ⋅ FireEye ⋅ Barry Vengerik, Ben Read, Brian Mordosky, Christopher Glyer, Ian Ahl, Matt Williams, Michael Matonis, Nick Carr
BACKSWING - Pulling a BADRABBIT Out of a Hat
EternalPetya

2017-10-25 ⋅ RiskIQ ⋅ Yonathan Klijnsma
Down the Rabbit Hole: Tracking the BadRabbit Ransomware to a Long Ongoing Campaign of Target Selection
EternalPetya

2017-10-24 ⋅ ESET Research ⋅ Marc-Etienne M.Léveillé
Bad Rabbit: Not‑Petya is back with improved ransomware
EternalPetya

2017-10-20 ⋅ Symantec ⋅ Critical Attack Discovery and Intelligence Team
Dragonfly: Western energy sector targeted by sophisticated attack group
Dorshel Goodor Heriplor Karagany Listrix ENERGETIC BEAR

2017-10-20 ⋅ Lookout ⋅ Michael Flossman
JadeRAT mobile surveillanceware spikes in espionage activity
JadeRAT

2017-10-20 ⋅ ESET Research ⋅ ESET Research
OSX/Proton spreading again through supply‑chain attack
Proton RAT

2017-10-20 ⋅ Symantec ⋅ Security Response Attack Investigation Team
Dragonfly: Western energy sector targeted by sophisticated attack group
Dorshel Heriplor Karagany Listrix

2017-10-20 ⋅ Symantec ⋅ Security Response Attack Investigation Team
Dragonfly: Western energy sector targeted by sophisticated attack group
ENERGETIC BEAR

2017-10-19 ⋅ Proofpoint ⋅ Kafeine, Pierre T
APT28 racing to exploit CVE-2017-11292 Flash vulnerability before patches are deployed
Seduploader

2017-10-16 ⋅ Proofpoint ⋅ Axel F, Pierre T
Leviathan: Espionage actor spearphishes maritime and defense targets
NanHaiShu SeDll APT40

2017-10-16 ⋅ Kaspersky Labs ⋅ GReAT
BlackOasis APT and new targeted attacks leveraging zero-day exploit
FinFisher RAT BlackOasis

2017-10-16 ⋅ Akamai ⋅ Akamei
UPnProxy: Blackhat Proxies via NAT Injections
Inception Framework