Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-09-07 ⋅ Github (pan-unit42) ⋅ Brad Duncan
Collection of recent Dridex IOCs
Cutwail Dridex
2020-08-21 ⋅ Palo Alto Networks Unit 42 ⋅ Brad Duncan
Wireshark Tutorial: Decrypting HTTPS Traffic
Dridex
2020-07-24 ⋅ Palo Alto Networks Unit 42 ⋅ Brad Duncan
Evolution of Valak, from Its Beginnings to Mass Distribution
Valak
2020-05-28 ⋅ Palo Alto Networks Unit 42 ⋅ Brad Duncan
Goodbye Mworm, Hello Nworm: TrickBot Updates Propagation Module
TrickBot
2020-04-03 ⋅ Palo Alto Networks Unit 42 ⋅ Brad Duncan
GuLoader: Malspam Campaign Installing NetWire RAT
CloudEyE NetWire RC
2020-02-13 ⋅ Palo Alto Networks Unit 42 ⋅ Brad Duncan
Wireshark Tutorial: Examining Qakbot Infections
QakBot
2020-01-23 ⋅ SANS ISC InfoSec Forums ⋅ Brad Duncan
German language malspam pushes Ursnif
ISFB
2019-12-23 ⋅ Palo Alto Networks Unit 42 ⋅ Brad Duncan
Wireshark Tutorial: Examining Ursnif Infections
ISFB
2019-12-19 ⋅ Twitter (@malware_traffic) ⋅ Brad Duncan
Tweet on Valak Malware
Valak
2019-11-22 ⋅ Palo Alto Networks Unit 42 ⋅ Brad Duncan
Trickbot Updates Password Grabber Module
TrickBot
2019-11-08 ⋅ Palo Alto Networks Unit 42 ⋅ Brad Duncan
Wireshark Tutorial: Examining Trickbot Infections
TrickBot
2019-07-11 ⋅ InfoSec Handlers Diary Blog ⋅ Brad Duncan
Recent AZORult activity
Azorult
2019-06-25 ⋅ SANS ⋅ Brad Duncan
Rig Exploit Kit sends Pitou.B Trojan
Pitou
2019-05-22 ⋅ Palo Alto Networks Unit 42 ⋅ Brad Duncan
Shade Ransomware Hits High-Tech, Wholesale, Education Sectors in U.S, Japan, India, Thailand, Canada
Troldesh
2019-02-20 ⋅ SANS ISC InfoSec Forums ⋅ Brad Duncan
More Russian language malspam pushing Shade (Troldesh) ransomware
Troldesh
2019-01-23 ⋅ Brad Duncan, Mike Harbison
Russian Language Malspam Pushing Redaman Banking Malware
RTM
2019-01-17 ⋅ SANS ISC InfoSec Forums ⋅ Brad Duncan
Emotet infections and follow-up malware
Emotet
2018-12-19 ⋅ Malware Traffic Analysis ⋅ Brad Duncan
MALSPAM PUSHING THE MYDOOM WORM IS STILL A THING
MyDoom
2018-12-04 ⋅ Brad Duncan
Malspam pushing Lokibot malware
Loki Password Stealer (PWS)
2018-03-07 ⋅ InfoSec Handlers Diary Blog ⋅ Brad Duncan
Ransomware news: GlobeImposter gets a facelift, GandCrab is still out there
Gandcrab GlobeImposter