Malpedia Library

Click here to download all references as Bib-File.•

2017-10-30 ⋅ ESET Research ⋅ Frédéric Vachon
Windigo Still not Windigone: An Ebury Update
Ebury

2017-10-29 ⋅ quangnh89
Sality Configuration Extractor (sality_extractor.py)
Sality

2017-10-27 ⋅ Palo Alto Networks Unit 42 ⋅ Unit42
Tracking Subaat: Targeted Phishing Attack Leads to Threat Actor’s Repository
The Gorgon Group

2017-10-27 ⋅ Bellingcat ⋅ Collin Anderson
Bahamut Revisited, More Cyber Espionage in the Middle East and South Asia
Bahamut Bahamut Bahamut

2017-10-27 ⋅ Palo Alto Networks Unit 42 ⋅ Unit 42
Tracking Subaat: Targeted Phishing Attack Leads to Threat Actor’s Repository

2017-10-27 ⋅ Cisco Talos ⋅ Cisco Talos
Threat Round Up for Oct 20 - Oct 27
MyloBot

2017-10-26 ⋅ RiskIQ ⋅ Yonathan Klijnsma
New htpRAT Gives Complete Remote Control Capabilities to Chinese Cyber Threat Actors
htpRAT

2017-10-26 ⋅ Twitter (@siri_urz) ⋅ S!Ri
Tweet on PDB path
Zezin

2017-10-26 ⋅ FireEye ⋅ Barry Vengerik, Ben Read, Brian Mordosky, Christopher Glyer, Ian Ahl, Matt Williams, Michael Matonis, Nick Carr
BACKSWING - Pulling a BADRABBIT Out of a Hat
EternalPetya

2017-10-25 ⋅ RiskIQ ⋅ Yonathan Klijnsma
Down the Rabbit Hole: Tracking the BadRabbit Ransomware to a Long Ongoing Campaign of Target Selection
EternalPetya

2017-10-25 ⋅ NetScout ⋅ Dennis Schwarz
SnatchLoader Reloaded
SnatchLoader

2017-10-24 ⋅ ClearSky ⋅ ClearSky Research Team
Iranian Threat Agent Greenbug Impersonates Israeli High-Tech and Cyber Security Companies
ISMDoor

2017-10-24 ⋅ Cisco Talos ⋅ Nick Biasini
Threat Spotlight: Follow the Bad Rabbit
EternalPetya

2017-10-24 ⋅ ClearSky ⋅ ClearSky Research Team
Iranian Threat Agent Greenbug Impersonates Israeli High-Tech and Cyber Security Companies
Greenbug

2017-10-20 ⋅ Symantec ⋅ Critical Attack Discovery and Intelligence Team
Dragonfly: Western energy sector targeted by sophisticated attack group
Dorshel Goodor Heriplor Karagany Listrix ENERGETIC BEAR

2017-10-20 ⋅ Lookout ⋅ Michael Flossman
JadeRAT mobile surveillanceware spikes in espionage activity
JadeRAT

2017-10-20 ⋅ ESET Research ⋅ ESET Research
OSX/Proton spreading again through supply‑chain attack
Proton RAT

2017-10-20 ⋅ Symantec ⋅ Security Response Attack Investigation Team
Dragonfly: Western energy sector targeted by sophisticated attack group
Dorshel Heriplor Karagany Listrix

2017-10-20 ⋅ Symantec ⋅ Security Response Attack Investigation Team
Dragonfly: Western energy sector targeted by sophisticated attack group
ENERGETIC BEAR

2017-10-19 ⋅ CERT.PL ⋅ Jarosław Jedynak
A deeper look at Tofsee modules
Tofsee