Malpedia Library

2017-09-20 ⋅ FireEye ⋅ Jacqueline O’Leary, Josiah Kimble, Kelli Vanderlee, Nalani Fraser
Insights into Iranian Cyber Espionage: APT33 Targets Aerospace and Energy Sectors and has Ties to Destructive Malware
DROPSHOT Nanocore RAT NetWire RC SHAPESHIFT TURNEDUP APT33

2017-09-20 ⋅ Intezer ⋅ Jay Rosenberg
Evidence Aurora Operation Still Active: Supply Chain Attack Through CCleaner
CCleaner Backdoor

2017-09-19 ⋅ Security Intelligence ⋅ Larry Loeb
Security Utility Abuses Supply Chain for a Malware Attack
CCleaner Backdoor

2017-09-19 ⋅ Kaspersky ⋅ Vladislav Pintiysky, Vyacheslav Rusakov
A Modern Hypervisor as a Basis for a Sandbox

2017-09-19 ⋅ Twitter (@craiu) ⋅ Costin Raiu
Tweet on Shared Code between CCleaner and APT17 Missl backdoor
CCleaner Backdoor

2017-09-19 ⋅ Cymmetria ⋅ Cymmetria
Unveiling Patchwork – a targeted attack caught with cyber deception
QUILTED TIGER

2017-09-18 ⋅ Kaspersky Labs ⋅ Alexander Liskin, Andrey Kryukov, Anton Ivanov
An (un)documented Word feature abused by attackers
Inception Framework

2017-09-18 ⋅ ThreatConnect ⋅ Paul Vann
Casting a Light on BlackEnergy
BlackEnergy

2017-09-18 ⋅ Morphisec ⋅ Michael Gorelik
Morphisec Discovers CCleaner Backdoor Saving Millions of Avast Users
CCleaner Backdoor

2017-09-18 ⋅ Cisco Talos ⋅ Craig Williams, Edmund Brumaghin, Matthew Molyett, Ross Gibb, Warren Mercer
CCleanup: A Vast Number of Machines at Risk
CCleaner Backdoor

2017-09-15 ⋅ Dell Cameron
Welp, Vevo Just Got Hacked
OurMine

2017-09-07 ⋅ HackRead ⋅ Ahmed Waqas
New NSA Data Dump: ShadowBrokers Release UNITEDRAKE Malware
The Shadow Brokers

2017-09-06 ⋅ SecurityAffairs ⋅ Pierluigi Paganini
ShadowBrokers are back demanding nearly $4m and offering 2 dumps per month
The Shadow Brokers

2017-09-05 ⋅ InfoSec Handlers Diary Blog ⋅ Johannes Ullrich
The Mirai Botnet: A Look Back and Ahead At What's Next

2017-09-04 ⋅ Graham Cluley Blog ⋅ Graham Cluley
Despite appearances, WikiLeaks wasn’t hacked
OurMine

2017-09-01 ⋅ Security Affairs ⋅ Pierluigi Paganini
Vxer is offering Cobian RAT in the underground, but it is backdoored
Cobian RAT

2017-08-31 ⋅ Zscaler ⋅ Abhay Yadav, Atinderpal Singh, Deepen Desai
Cobian RAT - A backdoored RAT
Cobian RAT

2017-08-31 ⋅ Palo Alto Networks Unit 42 ⋅ Alex Hinchliffe, Jen Miller-Osborn
Updated KHRAT Malware Used in Cambodia Attacks

2017-08-30 ⋅ ESET Research ⋅ Graham Cluley
New ESET research uncovers Gazer, the stealthy backdoor that spies on embassies
Gazer

2017-08-26 ⋅ Bleeping Computer ⋅ Catalin Cimpanu
US Arrests Chinese Man Involved With Sakula Malware Used in OPM and Anthem Hacks
APT19