Malpedia Library

2017-01-05 ⋅ ClearSky ⋅ ClearSky Research Team
Iranian Threat Agent OilRig Delivers Digitally Signed Malware, Impersonates University of Oxford
OilRig

2017-01-04 ⋅ Bleeping Computer ⋅ Catalin Cimpanu
FireCrypt Ransomware Comes With a DDoS Component
FireCrypt

2017-01-03 ⋅ CrySyS Lab ⋅ Boldizsar Bencsath
Technical details on the Fancy Bear Android malware (poprd30.apk)
X-Agent

2017-01-01 ⋅ Council on Foreign Relations ⋅ Cyber Operations Tracker
WhiteBear
White Bear

2017-01-01 ⋅ Objective-See ⋅ Patrick Wardle
Mac Malware of 2016
KeRanger Keydnap Komplex Laoshu MacInstaller MacVX Mokes WireLurker XSLCmd

2017-01-01 ⋅ FireEye ⋅ Bart Inglot, Byrne Ghavalas
ATTACKER ANTICS: Illustrations of Ingenuity
KOMPROGO SOUNDBITE

2017-01-01 ⋅ Cisco Talos ⋅ Paul Rascagnères, Warren Mercer
Introducing ROKRAT
RokRAT

2017-01-01 ⋅ Positive Technologies ⋅ Positive Technologies
COBALT STRIKES BACK: AN EVOLVING MULTINATIONAL THREAT TO FINANCE
Cobalt

2016-12-29 ⋅ Errata Security ⋅ Robert Graham
Some notes on IoCs
PAS

2016-12-28 ⋅ Kaspersky Labs ⋅ Nikita Buchka
Switcher: Android joins the ‘attack-the-router’ club
Switcher

2016-12-23 ⋅ United States District Court for the Western District of Washington ⋅ United States District Court for the Western District of Washington
United States v. lavandos@dr.com :: APPLICATION FOR A SEARCH WARRANT
Dharma

2016-12-22 ⋅ GovCERT.ch ⋅ GovCERT.ch
Tofsee Spambot features .ch DGA - Reversal and Countermesaures
Tofsee

2016-12-20 ⋅ Trend Micro ⋅ David Sancho, Numaan Huq
Alice: A Lightweight, Compact, No-Nonsense ATM Malware
Project Alice

2016-12-20 ⋅ ESET Research ⋅ Michal Malík, Peter Kálnai
New Linux/Rakos threat: devices and servers under SSH scan (again)
Rakos

2016-12-20 ⋅ ESET Research ⋅ Michal Malík, Peter Kálnai
New Linux/Rakos threat: devices and servers under SSH scan (again)

2016-12-15 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
Let It Ride: The Sofacy Group’s DealersChoice Attacks Continue
APT28

2016-12-14 ⋅ Kaspersky Labs ⋅ Kaspersky
Kaspersky Security Bulletin 2016. Review of the year. Overall statistics for 2016
Operation Ghoul

2016-12-14 ⋅ Microsoft ⋅ Microsoft Defender ATP Research Team
Twin zero-day attacks: PROMETHIUM and NEODYMIUM target individuals in Europe
PROMETHIUM

2016-12-14 ⋅ Microsoft ⋅ Microsoft Defender ATP Research Team
Twin zero-day attacks: PROMETHIUM and NEODYMIUM target individuals in Europe
NEODYMIUM

2016-12-13 ⋅ ESET Research ⋅ Anton Cherepanov
The rise of TeleBots: Analyzing disruptive KillDisk attacks
KillDisk TeleBot Sandworm