Malpedia Library

2017-04-03 ⋅ FireEye ⋅ Matthew Dunwoody
Dissecting One of APT29’s Fileless WMI and PowerShell Backdoors (POSHSPY)
POSHSPY APT29

2017-03-30 ⋅ Palo Alto Networks Unit 42 ⋅ Jen Miller-Osborn, Josh Grunzweig
Trochilus and New MoonWind RATs Used In Attack Against Thai Organizations
MoonWind

2017-03-30 ⋅ Palo Alto Networks Unit 42 ⋅ Jen Miller-Osborn, Josh Grunzweig
Trochilus and New MoonWind RATs Used In Attack Against Thai Organizations
APT9

2017-03-30 ⋅ ESET Research ⋅ ESET Research
Carbon Paper: Peering into Turla’s second stage backdoor
Cobra Carbon System Turla

2017-03-29 ⋅ Forcepoint ⋅ Roland Dela Paz
Trojanized Adobe installer used to install DragonOK’s new custom backdoor
KHRAT DragonOK

2017-03-29 ⋅ Imperva ⋅ Dima Bekerman
New Mirai Variant Launches 54 Hour DDoS Attack against US College
Mirai

2017-03-28 ⋅ Department of Justice ⋅ Office of Public Affairs
Russian Citizen Pleads Guilty for Involvement in Global Botnet Conspiracy
Ebury

2017-03-28 ⋅ Trend Micro ⋅ Gilbert Sison
Cerber Starts Evading Machine Learning
Cerber

2017-03-26 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
Shamoon 2: Delivering Disttrack
DistTrack

2017-03-23 ⋅ Twitter (PhysicalDrive0) ⋅ PhysicalDrive0
Tweet on XAgent for macOS
X-Agent

2017-03-22 ⋅ Cylance ⋅ Cylance Threat Research Team
El Machete's Malware Attacks Cut Through LATAM
Machete El Machete

2017-03-22 ⋅ Cylance ⋅ Threat Research Team
El Machete's Malware Attacks Cut Through LATAM
El Machete

2017-03-21 ⋅ Wired ⋅ Chad Hagen, Garrett M. Graff
Inside the Hunt for Russia’s Most Notorious Hacker
Gameover P2P Murofet Zeus

2017-03-21 ⋅ DomainTools ⋅ DomainTools
Hunt Case Study: Hunting Campaign Indicators on Privacy Protected Attack Infrastructure
CopyKittens

2017-03-21 ⋅ Wired ⋅ Garrett M. Graff
Inside the Hunt for Russia's Most Notorious Hacker
Gameover P2P

2017-03-17 ⋅ Fortinet ⋅ David Wang, He Xu
Grabbot is Back to Nab Your Data
GrabBot

2017-03-17 ⋅ Malwarebytes ⋅ Malwarebytes Labs
Diamond Fox – part 1: introduction and unpacking
DiamondFox

2017-03-16 ⋅ Threatpost ⋅ Michael Mimoso
Fileless Malware Campaigns Tied to Same Attacker
FIN7

2017-03-15 ⋅ Github (MinervaLabsResearch) ⋅ Minerva Labs
Vaccinating against Spora ransomware: a proof-of-concept tool by Minerva
Spora

2017-03-14 ⋅ Kaspersky Labs ⋅ Anton Ivanov, Fedor Sinitsyn
PetrWrap: the new Petya-based ransomware used in targeted attacks
PetrWrap