Malpedia Library

Click here to download all references as Bib-File.•

2017-12-14 ⋅ MITRE ATT&CK ⋅ Various
SOUNDBITE
SOUNDBITE

2017-12-14 ⋅ FireEye ⋅ Blake Johnson, Christopher Glyer, Dan Caban, Dan Scali, Marina Krotofil, Nathan Brubaker
Attackers Deploy New ICS Attack Framework “TRITON” and Cause Operational Disruption to Critical Infrastructure
Triton TEMP.Veles

2017-12-14 ⋅ Trend Micro ⋅ David Sancho, Fernando Mercês
Dissecting PRILEX and CUTLET MAKER ATM Malware Families
Prilex

2017-12-13 ⋅ Vitali Kremez Blog ⋅ Vitali Kremez
Update: Let's Learn: Reversing FIN6 "GratefulPOS" aka "FrameworkPOS" Point-of-Sale Malware in-Depth
Grateful POS

2017-12-13 ⋅ Lastline ⋅ Alexander Sevtsov
Tyupkin ATM Malware: Take The Money Now Or Never!
Tyupkin

2017-12-12 ⋅ Bleeping Computer ⋅ Catalin Cimpanu
MoneyTaker Hacker Group Steals Millions from US and Russian Banks
MoneyTaker

2017-12-11 ⋅ United States Department of Justice ⋅ United States Department of Justice
United States of America v. MIHAI ALEXANDRU ISVANCA and EVELINE CISMARU
Cerber Dharma

2017-12-11 ⋅ Group-IB ⋅ Group-IB
MoneyTaker 1.5 YEARS OF SILENT OPERATIONS
Citadel Kronos Meterpreter

2017-12-11 ⋅ Zerophage ⋅ Zerophage
Malware – Snatch Loader: Reloaded
SnatchLoader

2017-12-11 ⋅ Bleeping Computer ⋅ Catalin Cimpanu
BrickerBot Author Retires Claiming to Have Bricked over 10 Million IoT Devices
BrickerBot

2017-12-11 ⋅ Trend Micro ⋅ Cedric Pernet, Daniel Lunghi, Jaromír Hořejší
Untangling the Patchwork Cyberespionage Group
Quasar RAT

2017-12-09 ⋅ BlueHat Security Conference ⋅ Billy Leonard, Google Threat Analysis Group
10 Years of Targeted Credential Phishing

2017-12-08 ⋅ RSA ⋅ Kent Beckman
GratefulPOS credit card stealing malware - just in time for the shopping season
Grateful POS

2017-12-07 ⋅ Fortinet ⋅ Floser Bacurio, Joie Salvio
A Peculiar Case of Orcus RAT Targeting Bitcoin Investors
Orcus RAT

2017-12-07 ⋅ FireEye ⋅ Jacqueline O’Leary, Manish Sardiwal, Nalani Fraser, Nick Richard, Vincent Cannon, Yogesh Londhe
New Targeted Attack in the Middle East by APT34, a Suspected Iranian Threat Group, Using CVE-2017-11882 Exploit
OilRig

2017-12-06 ⋅ Botconf ⋅ Raimir Holanda, Renato Marinho
Exploring a P2P Transient Botnet - From Discovery to Enumeration
Rakos

2017-12-06 ⋅ The Citizen Lab ⋅ Bill Marczak, Geoffrey Alexander, John Scott-Railton, Ron Deibert, Sarah McKune
Champing at the Cyberbit Ethiopian Dissidents Targeted with New Commercial Spyware
PC Surveillance System

2017-12-05 ⋅ 360 netlab ⋅ 360 Netlab
Warning: Satori, a Mirai Branch Is Spreading in Worm Style on Port 37215 and 52869
Satori

2017-12-05 ⋅ Certego ⋅ Matteo Lodi
Nearly undetectable Qarallax RAT spreading via spam

2017-12-04 ⋅ Microsoft ⋅ Microsoft Defender ATP Research Team, Microsoft Digital Crimes Unit
Microsoft teams up with law enforcement and other partners to disrupt Gamarue (Andromeda)
Andromeda