Malpedia Library

2018-07-31 ⋅ Sophos Naked Security ⋅ Mark Stockley
SamSam: The (almost) $6 million ransomware
SamSam

2018-07-26 ⋅ Accenture Security ⋅ Bart Parys, Michael Yip
GOLDFIN: A Persistent Campaign Targeting CIS Countries with SOCKSBOT
SocksBot

2018-07-26 ⋅ IEEE Symposium on Security and Privacy (SP) ⋅ Alex C. Snoeren, Damon McCoy, Danny Yuxing Huang, Elie Bursztein, Jonathan Levin, Kirill Levchenko, Kylie McRoberts, Luca Invernizzi, Maxwell Matthaios Aliapoulios, Vector Guo Li
Tracking Ransomware End-to-end
Cerber Locky WannaCryptor

2018-07-25 ⋅ Symantec ⋅ Critical Attack Discovery and Intelligence Team, Network Protection Security Labs
Leafminer: New Espionage Campaigns Targeting Middle Eastern Regions
Imecab MimiKatz Sorgu RASPITE

2018-07-25 ⋅ Symantec ⋅ Network Protection Security Labs, Security Response Attack Investigation Team
Leafminer: New Espionage Campaigns Targeting Middle Eastern Regions
Imecab Sorgu RASPITE

2018-07-23 ⋅ CSS ⋅ Cyber Security Strategists
A long-term espionage campaign in Syria
APT-C-27

2018-07-20 ⋅ NCCIC ⋅ Communications Integration Center, National Cybersecurity
Alert (TA18-201A) Emotet Malware
Emotet

2018-07-18 ⋅ Symantec ⋅ Security Response Attack Investigation Team
The Evolution of Emotet: From Banking Trojan to Threat Distributor
Emotet

2018-07-03 ⋅ Cyware ⋅ Samantha Black
Iranian APT Charming Kitten impersonates ClearSky, the security firm that uncovered its campaigns
Charming Kitten

2018-06-19 ⋅ Symantec ⋅ Security Response Attack Investigation Team
Thrip: Espionage Group Hits Satellite, Telecoms, and Defense Companies
Catchamas Rikamanu Spedear WMI Ghost Thrip

2018-06-19 ⋅ ⋅ Security Leopard
"Hidden Bee" strikes: Kingsoft Internet Security intercepts the world's first Bootkit-class mining botnet
Hidden Bee

2018-06-06 ⋅ ClearSky ⋅ ClearSky Cyber Security
Iranian APT group ‘MuddyWater’ Adds Exploits to Their Arsenal
POWERSTATS

2018-06-02 ⋅ ⋅ Freebuf ⋅ 安全豹
"Hidden Bee" strikes: Kingsoft Internet Security intercepts the world's first bootkit-level mining botnet (Part 1)
Hidden Bee

2018-05-23 ⋅ Symantec ⋅ Symantec Security Response Team
VPNFilter: New Router Malware with Destructive Capabilities
VPNFilter

2018-05-12 ⋅ Security 0wnage ⋅ UnknownUnknown
PRB-Backdoor - A Fully Loaded PowerShell Backdoor with Evil Intentions
prb_backdoor

2018-05-09 ⋅ COUNT UPON SECURITY ⋅ Luis Rocha
Malware Analysis - PlugX - Part 2
PlugX

2018-05-08 ⋅ Security 0wnage ⋅ Mo Bustami
Clearing the MuddyWater - Analysis of new MuddyWater Samples
POWERSTATS

2018-04-23 ⋅ Accenture Security ⋅ Bart Parys
HOGFISH REDLEAVES CAMPAIGN: HOGFISH (APT10) targets Japan with RedLeaves implants in “new battle”
RedLeaves

2018-04-23 ⋅ Accenture Security ⋅ Bart Parys
HOGFISH REDLEAVES CAMPAIGN: HOGFISH (APT10) targets Japan with RedLeaves implants in “new battle”
RedLeaves APT10

2018-04-23 ⋅ Symantec ⋅ Security Response Attack Investigation Team
New Orangeworm attack group targets the healthcare sector in the U.S., Europe, and Asia
Kwampirs Orangeworm