Malpedia Library

2018-02-07 ⋅ Palo Alto Networks Unit 42 ⋅ Brad Duncan, Vicky Ray
Compromised Servers & Fraud Accounts: Recent Hancitor Attacks
Hancitor

2018-02-01 ⋅ Malware Traffic Analysis ⋅ Brad Duncan
Quick Test Drive of Trickbot (It now has a Monero Module)
TrickBot

2018-01-04 ⋅ Malware Traffic Analysis ⋅ Brad Duncan
MALSPAM PUSHING PCRAT/GH0ST
Ghost RAT

2017-12-22 ⋅ Malware Traffic Analysis ⋅ Brad Duncan
MALSPAM USES CVE-2017-0199 TO DISTRIBUTE REMCOS RAT
Remcos

2017-11-23 ⋅ Malware Traffic Analysis ⋅ Brad Duncan
NECURS BOTNET MALSPAM PUSHES "SCARAB" RANSOMWARE
Scarab Ransomware

2017-11-02 ⋅ Malware Traffic Analysis ⋅ Brad Duncan
2017-11-02 - ADVENTURES WITH SMOKE LOADER
Lethic

2017-10-13 ⋅ Malware Traffic Analysis ⋅ Brad Duncan
Blank Slate Malspam Stops Pushing Locky, Starts Pushing Sage 2.2 Randsomware
SAGE

2017-09-01 ⋅ Palo Alto Networks Unit 42 ⋅ Brad Duncan
EITest: HoeflerText Popups Targeting Google Chrome Users Now Push RAT Malware
NetSupportManager RAT

2017-07-04 ⋅ Malware Traffic Analysis ⋅ Brad Duncan
MALSPAM WITH JAVA-BASED RAT
AdWind

2017-06-27 ⋅ SANS ⋅ Brad Duncan
Checking out the new Petya variant
EternalPetya

2017-05-16 ⋅ Malware Traffic Analysis ⋅ Brad Duncan
2017-05-16 - MORE EXAMPLES OF MALSPAM PUSHING JAFF RANSOMWARE
Jaff

2017-05-09 ⋅ Malware Traffic Analysis ⋅ Brad Duncan
RIG EK SENDS BUNITU TROJAN
Bunitu

2017-04-03 ⋅ Malware Traffic Analysis ⋅ Brad Duncan
DHL Invoice Malspam/Photo Malspam
Pushdo

2017-01-21 ⋅ SANS ISC InfoSec Forums ⋅ Brad Duncan
Sage 2.0 Ransomware
SAGE

2017-01-17 ⋅ Malware Traffic Analysis ⋅ Brad Duncan
EITEST RIG-V FROM 92.53.127.86 SENDS SPORA RANSOMWARE
Spora

2017-01-17 ⋅ Twitter (@malware_traffic) ⋅ Brad Duncan
Tweet on Vreikstadi Malspam
Vreikstadi

2016-05-09 ⋅ Malware Traffic Analysis ⋅ Brad Duncan
PseudoDarkLeech Angler EK from 185.118.66.154 sends Bedep/CryptXXX
Bedep Unidentified 025 (Clickfraud)