Malpedia Library

2017-05-12 ⋅ Comae ⋅ Matt Suiche
WannaCry — The largest ransom-ware infection in History
WannaCryptor

2017-05-12 ⋅ Kaspersky Labs ⋅ GReAT
WannaCry ransomware used in widespread attacks all over the world
WannaCryptor

2017-05-10 ⋅ Cybereason ⋅ Amit Serper
Proton.B: What this Mac malware actually does
Proton RAT

2017-05-09 ⋅ VMWare Carbon Black ⋅ Jared Myers
Carbon Black Threat Research Dissects Red Leaves Malware, Which Leverages DLL Side Loading
RedLeaves

2017-05-09 ⋅ ESET Research ⋅ ESET Research
Sednit adds two zero‑day exploits using ‘Trump’s attack on Syria’ as a decoy
Seduploader

2017-05-05 ⋅ Bitdefender ⋅ Adrian Schipur, Alexandru Maximciuc, Bogdan Botezatu, Cristina Vatamanu
Inside Netrepser – a JavaScript-based Targeted Attack
Netrepser

2017-05-04 ⋅ Check Point Software Technologies Ltd ⋅ Ofer Caspi
OSX Malware is Catching Up, and it wants to Read Your HTTPS Traffic
Dok

2017-05-03 ⋅ Github (francisck) ⋅ Francisco Donoso
DanderSpirtz documentation
DanderSpritz

2017-05-03 ⋅ Palo Alto Networks Unit 42 ⋅ Brandon Levene, Robert Falcone, Tyler Halfpop
Kazuar: Multiplatform Espionage Backdoor with API Access
Turla

2017-05-03 ⋅ FireEye ⋅ DJ Palombo, Jon Erickson, Matthew McWhirt
To SDB, Or Not To SDB: FIN7 Leveraging Shim Databases for Persistence
FIN7

2017-05-03 ⋅ Palo Alto Networks Unit 42 ⋅ Brandon Levene, Robert Falcone, Tyler Halfpop
Kazuar: Multiplatform Espionage Backdoor with API Access
Kazuar

2017-05-02 ⋅ 360 Core Security ⋅ ratty3697
HackSpy-Trojan-Exploit
HackSpy

2017-05-02 ⋅ Cylance ⋅ Threat Research Team
Philadelphia Ransomware

2017-05-02 ⋅ Alexander Adamov
Targeted attack against the Ukrainian military
Darktrack RAT

2017-05-02 ⋅ Threatpost ⋅ Tom Spring
Shamoon Collaborator Greenbug Adopts New Communication Tool
Greenbug

2017-05-01 ⋅ IssueMakersLab ⋅ IssueMakersLab
Operation GoldenAxe
Rifdoor

2017-04-28 ⋅ Kaspersky Labs ⋅ Alexey Shulmin, Sergey Yunakovsky
Use of DNS Tunneling for C&C Communications
SOUNDBITE

2017-04-27 ⋅ Morphisec ⋅ Michael Gorelik
Iranian Fileless Attack Infiltrates Israeli Organizations
Helminth OilRig

2017-04-27 ⋅ Morphisec ⋅ Michael Gorelik
Iranian Fileless Attack Infiltrates Israeli Organizations
OilRig

2017-04-26 ⋅ Youtube (Kaspersky) ⋅ Kaspersky
China's Evolving Cyber Operations: A Look into APT19's Shift in Tactics
Cobalt Strike APT19