Malpedia Library

2018-02-21 ⋅ Möbius Strip Reverse Engineering ⋅ Rolf Rolles
FinSpy VM Unpacking Tutorial Part 3: Devirtualization. Phase #1: Deobfuscating FinSpy VM Bytecode Programs
FinFisher RAT

2018-02-21 ⋅ Möbius Strip Reverse Engineering ⋅ Rolf Rolles
FinSpy VM Unpacking Tutorial Part 3: Devirtualization. Phase #4: Second Attempt At Devirtualization
FinFisher RAT

2018-02-21 ⋅ GitHub (RolfRolles) ⋅ Rolf Rolles
FinSpyVM (Static Unpacker for FinSpyVM)
FinFisher RAT

2018-02-21 ⋅ Möbius Strip Reverse Engineering ⋅ Rolf Rolles
FinSpy VM Unpacking Tutorial Part 3: Devirtualization
FinFisher RAT

2018-02-21 ⋅ Twitter (@mstoned7) ⋅ CHA Minseok
Tweet on DPRK APT groups
APT37

2018-02-21 ⋅ Avast ⋅ Threat Intelligence Team
Avast tracks down Tempting Cedar Spyware
TemptingCedar Spyware

2018-02-21 ⋅ Lastline ⋅ Alexander Sevtsov, Stefano Ortolani
Olympic Destroyer: A new Candidate in South Korea
Olympic Destroyer

2018-02-20 ⋅ Kaspersky Labs ⋅ GReAT
A Slice of 2017 Sofacy Activity
X-Agent Seduploader X-Agent Zebrocy Zebrocy (AutoIT) APT28

2018-02-20 ⋅ FireEye ⋅ FireEye
APT37 (REAPER) The Overlooked North Korean Actor
PoorWeb RokRAT APT37

2018-02-20 ⋅ Joe Security's Blog ⋅ Joe Security
Latest Elise APT comes packed with Sandbox Evasions
Elise

2018-02-20 ⋅ FireEye ⋅ FireEye
APT37 (Reaper): The Overlooked North Korean Actor
APT37

2018-02-17 ⋅ Objective-See ⋅ Patrick Wardle
Tearing Apart the Undetected (OSX)Coldroot RAT
Coldroot RAT

2018-02-16 ⋅ Fortinet ⋅ Xiaopeng Zhang
New jRAT/Adwind Variant Being Spread With Package Delivery Scam
AdWind

2018-02-15 ⋅ Secureworks ⋅ Counter Threat Unit ResearchTeam
SamSam Ransomware Campaigns
MimiKatz reGeorg SamSam BOSS SPIDER

2018-02-15 ⋅ Secureworks ⋅ Counter Threat Unit ResearchTeam
SamSam: Converting Opportunity into Profit
SamSam BOSS SPIDER

2018-02-15 ⋅ SecurityIntelligence ⋅ Limor Kessem, Magal Baz, Ophir Harpaz
TrickBot’s Cryptocurrency Hunger: Tricking the Bitcoin Out of Wallets
TrickBot

2018-02-15 ⋅ ⋅ MBSD ⋅ Satoshi Sugawara, Takashi Yoshikawa
Olympic Destroyer
Olympic Destroyer

2018-02-15 ⋅ RSA ⋅ Ahmed Sonbol
Malspam delivers Keybase keylogger
KeyBase

2018-02-13 ⋅ RSA ⋅ Kevin Stear
Lotus Blossom Continues ASEAN Targeting
LOTUS PANDA

2018-02-13 ⋅ Endgame ⋅ Devon Kerr
Stopping Olympic Destroyer: New Process Injection Insights
Olympic Destroyer