Malpedia Library

Click here to download all references as Bib-File.•

2017-04-03 ⋅ JPCERT/CC ⋅ Shusei Tomonaga
RedLeaves - Malware Based on Open Source RAT
PlugX RedLeaves Trochilus RAT

2017-04-03 ⋅ Threatpost ⋅ Michael Mimoso
Lazarus APT Spinoff Linked to Banking Hacks
Lazarus Group

2017-04-03 ⋅ Cisco Talos ⋅ Matthew Molyett, Paul Rascagnères, Warren Mercer
Introducing ROKRAT
RokRAT

2017-04-03 ⋅ Google ⋅ Jason Woloz, Ken Bodzak, Megan Ruthven, Neel Mehta, Rich Cannings, Wentao Chang
An Investigation of Chrysaor Malware on Android
Chrysaor

2017-04-03 ⋅ VOA ⋅ VOA
IAAF Says It Has Been Hacked, Athlete Medical Info Accessed
APT28

2017-04-03 ⋅ ⋅ JPCERT/CC ⋅ Shusei Tomonaga
オープンソースのRATを改良したマルウエアRedLeaves
RedLeaves

2017-04-03 ⋅ FireEye ⋅ Matthew Dunwoody
Dissecting One of APT29’s Fileless WMI and PowerShell Backdoors (POSHSPY)
POSHSPY APT29

2017-04-03 ⋅ Kaspersky Labs ⋅ GReAT
Lazarus under the Hood
Alreay DYEPACK

2017-04-03 ⋅ Google ⋅ Jason Woloz, Ken Bodzak, Megan Ruthven, Neel Mehta, Rich Cannings, Wentao Chang
An investigation of Chrysaor Malware on Android
Chrysaor

2017-04-01 ⋅ PricewaterhouseCoopers ⋅ PricewaterhouseCoopers
Operation Cloud Hopper: Technical Annex
ChChes PlugX Quasar RAT RedLeaves Trochilus RAT

2017-03-31 ⋅ Cisco Talos ⋅ Alexander Chiu
Threat Round-up for Mar 24 - Mar 31
win.wabot

2017-03-30 ⋅ ClearSky ⋅ ClearSky Research Team
Jerusalem Post and other Israeli websites compromised by Iranian threat agent CopyKitten
CopyKittens

2017-03-30 ⋅ Artem Baranov
EquationDrug rootkit analysis (mstcp32.sys)
EquationDrug

2017-03-30 ⋅ Palo Alto Networks Unit 42 ⋅ Jen Miller-Osborn, Josh Grunzweig
Trochilus and New MoonWind RATs Used In Attack Against Thai Organizations
MoonWind

2017-03-30 ⋅ Palo Alto Networks Unit 42 ⋅ Jen Miller-Osborn, Josh Grunzweig
Trochilus and New MoonWind RATs Used In Attack Against Thai Organizations
APT9

2017-03-29 ⋅ Imperva ⋅ Dima Bekerman
New Mirai Variant Launches 54 Hour DDoS Attack against US College
Mirai

2017-03-28 ⋅ Cylance ⋅ Cylance Threat Research Team
Threat Spotlight: GhostAdmin Malware
GhostAdmin

2017-03-27 ⋅ Microsoft ⋅ Microsoft Defender ATP Research Team
Detecting and mitigating elevation-of-privilege exploit for CVE-2017-0005
APT31

2017-03-23 ⋅ FireEye ⋅ Christopher Truncer
WMImplant – A WMI Based Agentless Post-Exploitation RAT Developed in PowerShell
WMImplant

2017-03-22 ⋅ Trend Micro ⋅ Cedric Pernet
Winnti Abuses GitHub for C&C Communications
EASYNIGHT APT41