Malpedia Library

Click here to download all references as Bib-File.•

2017-10-27 ⋅ Cisco Talos ⋅ Cisco Talos
Threat Round Up for Oct 20 - Oct 27
MyloBot

2017-10-26 ⋅ RiskIQ ⋅ Yonathan Klijnsma
New htpRAT Gives Complete Remote Control Capabilities to Chinese Cyber Threat Actors
htpRAT

2017-10-26 ⋅ Twitter (@siri_urz) ⋅ S!Ri
Tweet on PDB path
Zezin

2017-10-26 ⋅ FireEye ⋅ Barry Vengerik, Ben Read, Brian Mordosky, Christopher Glyer, Ian Ahl, Matt Williams, Michael Matonis, Nick Carr
BACKSWING - Pulling a BADRABBIT Out of a Hat
EternalPetya

2017-10-25 ⋅ RiskIQ ⋅ Yonathan Klijnsma
Down the Rabbit Hole: Tracking the BadRabbit Ransomware to a Long Ongoing Campaign of Target Selection
EternalPetya

2017-10-25 ⋅ NetScout ⋅ Dennis Schwarz
SnatchLoader Reloaded
SnatchLoader

2017-10-24 ⋅ ClearSky ⋅ ClearSky Research Team
Iranian Threat Agent Greenbug Impersonates Israeli High-Tech and Cyber Security Companies
ISMDoor

2017-10-24 ⋅ Cisco Talos ⋅ Nick Biasini
Threat Spotlight: Follow the Bad Rabbit
EternalPetya

2017-10-24 ⋅ ClearSky ⋅ ClearSky Research Team
Iranian Threat Agent Greenbug Impersonates Israeli High-Tech and Cyber Security Companies
Greenbug

2017-10-20 ⋅ Symantec ⋅ Critical Attack Discovery and Intelligence Team
Dragonfly: Western energy sector targeted by sophisticated attack group
Dorshel Goodor Heriplor Karagany Listrix ENERGETIC BEAR

2017-10-20 ⋅ Lookout ⋅ Michael Flossman
JadeRAT mobile surveillanceware spikes in espionage activity
JadeRAT

2017-10-20 ⋅ ESET Research ⋅ ESET Research
OSX/Proton spreading again through supply‑chain attack
Proton RAT

2017-10-20 ⋅ Symantec ⋅ Security Response Attack Investigation Team
Dragonfly: Western energy sector targeted by sophisticated attack group
Dorshel Heriplor Karagany Listrix

2017-10-20 ⋅ Symantec ⋅ Security Response Attack Investigation Team
Dragonfly: Western energy sector targeted by sophisticated attack group
ENERGETIC BEAR

2017-10-19 ⋅ CERT.PL ⋅ Jarosław Jedynak
A deeper look at Tofsee modules
Tofsee

2017-10-19 ⋅ Proofpoint ⋅ Kafeine, Pierre T
APT28 racing to exploit CVE-2017-11292 Flash vulnerability before patches are deployed
Seduploader

2017-10-17 ⋅ Minerva Labs ⋅ Minerva Labs Research Team
WaterMiner – a New Evasive Crypto-Miner
WaterMiner

2017-10-16 ⋅ ⋅ AhnLab ⋅ ASEC
Operation Bitter Biscuit

2017-10-16 ⋅ Proofpoint ⋅ Axel F, Pierre T
Leviathan: Espionage actor spearphishes maritime and defense targets
NanHaiShu SeDll APT40

2017-10-16 ⋅ Kaspersky Labs ⋅ GReAT
BlackOasis APT and new targeted attacks leveraging zero-day exploit
FinFisher RAT BlackOasis