Malpedia Library

2017-03-31 ⋅ Cisco Talos ⋅ Alexander Chiu
Threat Round-up for Mar 24 - Mar 31
win.wabot

2017-03-30 ⋅ ClearSky ⋅ ClearSky Research Team
Jerusalem Post and other Israeli websites compromised by Iranian threat agent CopyKitten
CopyKittens

2017-03-30 ⋅ Artem Baranov
EquationDrug rootkit analysis (mstcp32.sys)
EquationDrug

2017-03-30 ⋅ Palo Alto Networks Unit 42 ⋅ Jen Miller-Osborn, Josh Grunzweig
Trochilus and New MoonWind RATs Used In Attack Against Thai Organizations
MoonWind

2017-03-30 ⋅ Palo Alto Networks Unit 42 ⋅ Jen Miller-Osborn, Josh Grunzweig
Trochilus and New MoonWind RATs Used In Attack Against Thai Organizations
APT9

2017-03-29 ⋅ Imperva ⋅ Dima Bekerman
New Mirai Variant Launches 54 Hour DDoS Attack against US College
Mirai

2017-03-28 ⋅ Cylance ⋅ Cylance Threat Research Team
Threat Spotlight: GhostAdmin Malware
GhostAdmin

2017-03-27 ⋅ Microsoft ⋅ Microsoft Defender ATP Research Team
Detecting and mitigating elevation-of-privilege exploit for CVE-2017-0005
APT31

2017-03-23 ⋅ FireEye ⋅ Christopher Truncer
WMImplant – A WMI Based Agentless Post-Exploitation RAT Developed in PowerShell
WMImplant

2017-03-22 ⋅ Trend Micro ⋅ Cedric Pernet
Winnti Abuses GitHub for C&C Communications
EASYNIGHT APT41

2017-03-22 ⋅ Cylance ⋅ Cylance Threat Research Team
El Machete's Malware Attacks Cut Through LATAM
Machete El Machete

2017-03-22 ⋅ Cylance ⋅ Threat Research Team
El Machete's Malware Attacks Cut Through LATAM
El Machete

2017-03-22 ⋅ Trend Micro ⋅ Cedric Pernet
Winnti Abuses GitHub for C&C Communications
Winnti

2017-03-21 ⋅ DomainTools ⋅ DomainTools
Hunt Case Study: Hunting Campaign Indicators on Privacy Protected Attack Infrastructure
CopyKittens

2017-03-17 ⋅ Fortinet ⋅ David Wang, He Xu
Grabbot is Back to Nab Your Data
GrabBot

2017-03-16 ⋅ Threatpost ⋅ Michael Mimoso
Fileless Malware Campaigns Tied to Same Attacker
FIN7

2017-03-15 ⋅ Trend Micro ⋅ Trend Micro Cyber Safety Solutions Team
MajikPOS Combines PoS Malware and RATs to Pull Off its Malicious Tricks
MajikPos

2017-03-15 ⋅ Github (MinervaLabsResearch) ⋅ Minerva Labs
Vaccinating against Spora ransomware: a proof-of-concept tool by Minerva
Spora

2017-03-14 ⋅ ClearSky ⋅ ClearSky Research Team
Operation Electric Powder – Who is targeting Israel Electric Company?
Molerat Loader

2017-03-14 ⋅ Arnaud Delmas ⋅ Arnaud Delmas
Analyzing and Deobfuscating FlokiBot Banking Trojan
FlokiBot