Malpedia Library

2017-11-08 ⋅ ⋅ Freebuf ⋅ Security Leopard
Analysis of an active USB flash drive virus
MyloBot

2017-11-08 ⋅ SecurityIntelligence ⋅ Gadi Ostrovsky, Limor Kessem
Overlay RAT Malware Uses AutoIt Scripting to Bypass Antivirus Detection
Overlay RAT

2017-11-07 ⋅ Symantec ⋅ Symantec Security Response
Sowbug: Cyber espionage group targets South American and Southeast Asian governments
Felismus StarLoader Sowbug

2017-10-27 ⋅ Independent.co.uk ⋅ Adam Withnall
British security minister says North Korea was behind WannaCry hack on NHS
WannaCryptor

2017-10-24 ⋅ ClearSky ⋅ ClearSky Research Team
Iranian Threat Agent Greenbug Impersonates Israeli High-Tech and Cyber Security Companies
ISMDoor

2017-10-24 ⋅ ClearSky ⋅ ClearSky Research Team
Iranian Threat Agent Greenbug Impersonates Israeli High-Tech and Cyber Security Companies
Greenbug

2017-10-23 ⋅ KrebsOnSecurity ⋅ Brian Krebs
Reaper: Calm Before the IoT Security Storm?
IoT Reaper

2017-10-20 ⋅ Symantec ⋅ Security Response Attack Investigation Team
Dragonfly: Western energy sector targeted by sophisticated attack group
Dorshel Heriplor Karagany Listrix

2017-10-20 ⋅ Symantec ⋅ Security Response Attack Investigation Team
Dragonfly: Western energy sector targeted by sophisticated attack group
ENERGETIC BEAR

2017-10-11 ⋅ SecurityIntelligence ⋅ Limor Kessem
TrickBot Takes to Latin America, Continues to Expand Its Global Reach

2017-10-04 ⋅ Security 0wnage ⋅ Mo Bustami
Continued Activity targeting the Middle East
POWERSTATS

2017-09-25 ⋅ Avast ⋅ Threat Intelligence Team
Additional information regarding the recent CCleaner APT security incident
CCleaner Backdoor

2017-09-19 ⋅ Security Intelligence ⋅ Larry Loeb
Security Utility Abuses Supply Chain for a Malware Attack
CCleaner Backdoor

2017-09-15 ⋅ Microsoft Security Intelligence ⋅ Microsoft
Trojan:Win32/Enviserv.A
Enviserv

2017-09-15 ⋅ Microsoft Security Intelligence ⋅ Jireh Sanico
TrojanDownloader:Win32/Banload
Banload

2017-09-06 ⋅ SecurityAffairs ⋅ Pierluigi Paganini
ShadowBrokers are back demanding nearly $4m and offering 2 dumps per month
The Shadow Brokers

2017-09-01 ⋅ Security Affairs ⋅ Pierluigi Paganini
Vxer is offering Cobian RAT in the underground, but it is backdoored
Cobian RAT

2017-08-24 ⋅ Blaze's Security Blog ⋅ BartBlaze
Crystal Finance Millennium used to spread malware
Chthonic SmokeLoader

2017-08-20 ⋅ MyOnlineSecurity ⋅ MyOnlineSecurity
return of fake UPS cannot deliver malspam with an updated nemucod ransomware and Kovter payload
Cold$eal Locky

2017-08-18 ⋅ My Online Security ⋅ My Online Security
Your order no 8194788 has been processed malspam delivers malware
SnatchLoader