Malpedia Library

2024-03-18 ⋅ Securonix ⋅ D. Iuzvyk, O. Kolesnikov, T. Peck
Analysis of New DEEP#GOSU Attack Campaign Likely Associated with North Korean Kimsuky Targeting Victims with Stealthy Malware
RandomQuery

2024-03-18 ⋅ Trend Micro ⋅ Daniel Lunghi, Joseph C Chen
Earth Krahang Exploits Intergovernmental Trust to Launch Cross-Government Attacks
DinodasRAT PlugX Reshell ShadowPad Earth Krahang

2024-03-18 ⋅ Perception Point ⋅ Ariel Davidpur, Peleg Cabra
Operation PhantomBlu: New and Evasive Method Delivers NetSupport RAT
NetSupportManager RAT

2024-03-18 ⋅ ThreatMon ⋅ Kerime Gencay
Planet Stealer Malware Analysis Report (Paywall)

2024-03-15 ⋅ cyber5w ⋅ M4lcode
Matanbuchus Loader Detailed Analysis
Matanbuchus

2024-03-13 ⋅ Medium walmartglobaltech ⋅ Jason Reaves, Joshua Platt
NewBot Loader
NewBot Loader

2024-03-13 ⋅ Trend Micro ⋅ Aliakbar Zahravi, Peter Girnus, Simon Zuckerbraun
CVE-2024-21412: DarkGate Operators Exploit Microsoft Windows SmartScreen Bypass in Zero-Day Campaign
DarkGate

2024-03-12 ⋅ ⋅ Alyac ⋅ YALYX4
North Kimsuky organization's policy advisor camouflaged spear phishing beware

2024-03-11 ⋅ CyberInt ⋅ Adi Bleih
GuLoader Downloaded: A Look at the Latest Iteration
CloudEyE

2024-03-11 ⋅ Dr.Web ⋅ Dr.Web
Study of a targeted attack on a Russian enterprise in the mechanical-engineering sector
WhiteSnake Stealer

2024-03-11 ⋅ YouTube (Embee Research) ⋅ Embee_research
Xworm Script Analysis and Deobfuscation
XWorm

2024-03-07 ⋅ Malware Traffic Analysis ⋅ Brad Duncan
2024-03-07 (THURSDAY): LATRODECTUS INFECTION LEADS TO LUMMA STEALER
Lumma Stealer Unidentified 111 (Latrodectus)

2024-03-05 ⋅ CIP ⋅ paloalto Networks: Unit42, State Service of Special Communication and Information Protection of Ukraine (CIP)
Semi-Annual Chronicles of UAC-0006 Operations
SmokeLoader

2024-03-05 ⋅ Reliaquest ⋅ RELIAQUEST THREAT RESEARCH TEAM
Anxun and Chinese APT Activity
ShadowPad

2024-03-05 ⋅ Medium walmartglobaltech ⋅ Jason Reaves, Joshua Platt
Unknown Nim Loader using PSBypassCLM
Unidentified 115 (Nim Loader)