Malpedia Library

2017-09-26 ⋅ Threat Vector ⋅ Cylance Threat Research Team
Defray Ransomware Hits Healthcare and Education
Defray

2017-09-26 ⋅ Malwarebytes ⋅ Malwarebytes Labs
Elaborate scripting-fu used in espionage attack against Saudi Arabia Government entity
POWERSTATS

2017-09-26 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
Striking Oil: A Closer Look at Adversary Infrastructure
RGDoor

2017-09-26 ⋅ ISC ⋅ Renato Marinho
XPCTRA Malware Steals Banking and Digital Wallet User's Credentials
XPCTRA

2017-09-25 ⋅ Kaspersky Labs ⋅ Alexey Shulmin, Dmitry Karasovsky, Vasily Berdnikov
A simple example of a complex cyberattack
Microcin Vicious Panda

2017-09-25 ⋅ Avast ⋅ Threat Intelligence Team
Additional information regarding the recent CCleaner APT security incident
CCleaner Backdoor

2017-09-25 ⋅ Kaspersky Labs ⋅ Alexey Shulmin, Dmitry Karasovsky, Vasily Berdnikov
A simple example of a complex cyberattack
Microcin

2017-09-22 ⋅ Threatpost ⋅ Tom Spring
EternalBlue Exploit Used in Retefe Banking Trojan Campaign
Retefe

2017-09-22 ⋅ Kaspersky Labs ⋅ John Snow
NRansom: Ransomware that demands your nudes
nRansom

2017-09-21 ⋅ Avast ⋅ Threat Intelligence Team
Avast Threat Labs analysis of CCleaner incident
CCleaner Backdoor

2017-09-20 ⋅ Cisco Talos ⋅ Craig Williams, Earl Carter, Edmund Brumaghin, Matthew Molyett, Matthew Olney, Paul Rascagnères, Warren Mercer
CCleaner Command and Control Causes Concern
CCleaner Backdoor

2017-09-20 ⋅ Avast ⋅ Ondrej Vlcek, Vince Steckler
Progress on CCleaner Investigation
CCleaner Backdoor

2017-09-20 ⋅ Wired ⋅ Andy Greenberg
The CCleaner Malware Fiasco Targeted at Least 18 Specific Tech Firms
CCleaner Backdoor

2017-09-20 ⋅ Intezer ⋅ Jay Rosenberg
Evidence Aurora Operation Still Active: Supply Chain Attack Through CCleaner
CCleaner Backdoor

2017-09-19 ⋅ Security Intelligence ⋅ Larry Loeb
Security Utility Abuses Supply Chain for a Malware Attack
CCleaner Backdoor

2017-09-19 ⋅ Cymmetria ⋅ Cymmetria
Unveiling Patchwork – a targeted attack caught with cyber deception
QUILTED TIGER

2017-09-18 ⋅ Kaspersky Labs ⋅ Alexander Liskin, Andrey Kryukov, Anton Ivanov
An (un)documented Word feature abused by attackers
Inception Framework

2017-09-18 ⋅ ThreatConnect ⋅ Paul Vann
Casting a Light on BlackEnergy
BlackEnergy

2017-09-18 ⋅ Cisco Talos ⋅ Craig Williams, Edmund Brumaghin, Matthew Molyett, Ross Gibb, Warren Mercer
CCleanup: A Vast Number of Machines at Risk
CCleaner Backdoor

2017-09-13 ⋅ Intezer ⋅ Omri Ben Bassat
New Variants of Agent.BTZ/ComRAT Found: The Threat That Hit The Pentagon In 2008 Still Evolving; Part 2/2
Agent.BTZ