Malpedia Library

Click here to download all references as Bib-File.•

2017-08-17 ⋅ Proofpoint ⋅ Darien Huss
Turla APT actor refreshes KopiLuwak JavaScript backdoor for use in G20-themed attack
KopiLuwak

2017-08-16 ⋅ Benkow Lab ⋅ Benoît Ancel
Quick look at another Alina fork: XBOT-POS
XBot POS

2017-08-15 ⋅ Fortinet ⋅ Jasper Manuel
A Quick Look at a New KONNI RAT Variant
Konni

2017-08-15 ⋅ Kaspersky Labs ⋅ GReAT
ShadowPad in corporate networks
ShadowPad

2017-08-15 ⋅ Group-IB ⋅ Vesta Matveeva
Secrets of Cobalt
Cobalt

2017-08-14 ⋅ Proofpoint ⋅ Kafeine
Threat actor goes on a Chrome extension hijacking spree
js.wd

2017-08-11 ⋅ Threatpost ⋅ Tom Spring
Ukrainian Man Arrested, Charged in NotPetya Distribution
EternalPetya

2017-08-11 ⋅ FireEye ⋅ Ben Read, Lindsay Smith
APT28 Targets Hospitality Sector, Presents Threat to Travelers
Seduploader

2017-08-08 ⋅ Kaspersky Labs ⋅ GReAT
APT Trends report Q2 2017
IndigoZebra

2017-08-08 ⋅ Objective-See ⋅ Patrick Wardle
WTF is Mughthesec!?
Mughthesec

2017-08-07 ⋅ Independent.ie ⋅ Cathal McMahon
'State-sponsored' hackers targeted EirGrid electricity network in 'devious attack'
ENERGETIC BEAR

2017-08-07 ⋅ Intezer ⋅ Omri Ben Bassat
New Variants of Agent.BTZ/ComRAT Found: The Threat That Hit The Pentagon In 2008 Still Evolving; Part 1/2
Agent.BTZ

2017-08-04 ⋅ PhishLabs ⋅ Jason Davison
Smoke Loader Adds Additional Obfuscation Methods to Mitigate Analysis
SmokeLoader

2017-08-03 ⋅ Cisco Talos ⋅ Matthew Molyett
Taking the FIRST look at Crypt0l0cker
Crypt0l0cker

2017-08-02 ⋅ RSA Link ⋅ Ahmed Sonbol
Malspam delivers Xtreme RAT 8-1-2017
Xtreme RAT

2017-08-02 ⋅ Trend Micro ⋅ Michael Villanueva
A Look at JS_POWMET, a Completely Fileless Malware
Powmet

2017-08-01 ⋅ ESET Research ⋅ Gazing at Gazer, Turla’s new second stage backdoor
Gazing at Gazer Turla’s new second stage backdoor
Turla

2017-08-01 ⋅ Malwarebytes ⋅ Malwarebytes Labs
TrickBot comes up with new tricks: attacking Outlook and browsing data
TrickBot

2017-07-31 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
TwoFace Webshell: Persistent Access Point for Lateral Movement
TwoFace OilRig

2017-07-31 ⋅ Proofpoint ⋅ Darien Huss, Matthew Mesa
FIN7/Carbanak threat actor unleashes Bateleur JScript backdoor
Bateleur FIN7