Malpedia Library

2017-04-04 ⋅ PWC UK ⋅ PWC UK
Operation Cloud Hopper
APT10

2017-04-04 ⋅ Kaspersky Labs ⋅ Kaspersky Lab
Chasing Lazarus: A Hunt for the Infamous Hackers to Prevent Large Bank Robberies
Lazarus Group

2017-04-04 ⋅ Kaspersky Labs ⋅ Sergey Golovanov
ATMitch: remote administration of ATMs
ATMitch

2017-04-04 ⋅ GitHub (matthewdunwoody) ⋅ Matthew Dunwoody
POSHSPY backdoor code
POSHSPY

2017-04-03 ⋅ Kaspersky Labs ⋅ Costin Raiu, Daniel Moore, Juan Andrés Guerrero-Saade, Thomas Rid
Penquin’s Moonlit Maze
Penquin Turla

2017-04-03 ⋅ Kaspersky Labs ⋅ GReAT
Lazarus under the Hood
Alreay DYEPACK HOTWAX NESTEGG RatankbaPOS REDSHAWL WORMHOLE Lazarus Group

2017-04-03 ⋅ Threatpost ⋅ Michael Mimoso
Lazarus APT Spinoff Linked to Banking Hacks
Lazarus Group

2017-04-03 ⋅ Kaspersky Labs ⋅ Nikolay Pankov
Moonlight Maze: Lessons from history
Turla

2017-04-03 ⋅ Cisco Talos ⋅ Matthew Molyett, Paul Rascagnères, Warren Mercer
Introducing ROKRAT
RokRAT

2017-04-03 ⋅ Google ⋅ Jason Woloz, Ken Bodzak, Megan Ruthven, Neel Mehta, Rich Cannings, Wentao Chang
An Investigation of Chrysaor Malware on Android
Chrysaor

2017-04-03 ⋅ VOA ⋅ VOA
IAAF Says It Has Been Hacked, Athlete Medical Info Accessed
APT28

2017-04-03 ⋅ FireEye ⋅ Matthew Dunwoody
Dissecting One of APT29’s Fileless WMI and PowerShell Backdoors (POSHSPY)
POSHSPY APT29

2017-04-03 ⋅ Kaspersky Labs ⋅ GReAT
Lazarus under the Hood
Alreay DYEPACK

2017-04-03 ⋅ Malware Breakdown ⋅ Malware Breakdown
Shadow Server Domains Leading to RIG Exploit Kit Dropping Smoke Loader
SmokeLoader

2017-04-03 ⋅ Google ⋅ Jason Woloz, Ken Bodzak, Megan Ruthven, Neel Mehta, Rich Cannings, Wentao Chang
An investigation of Chrysaor Malware on Android
Chrysaor

2017-04-03 ⋅ Kaspersky Labs ⋅ Costin Raiu, Daniel Moore, Juan Andrés Guerrero-Saade, Thomas Rid
Moonlight Maze Technical Report (Appendix B)
Penquin Turla

2017-04-03 ⋅ Malware Breakdown ⋅ MalwareBreakdown
Shadow Server Domains Leading to RIG Exploit Kit Dropping Smoke Loader. Downloaded Neutrino Bot (AKA Kasidet).
Neutrino

2017-04-01 ⋅ Lookout ⋅ Lookout
Pegasus for Android: Technical Analysis and Findings of Chrysaor
Chrysaor

2017-03-30 ⋅ ClearSky ⋅ ClearSky Research Team
Jerusalem Post and other Israeli websites compromised by Iranian threat agent CopyKitten
CopyKittens

2017-03-30 ⋅ Artem Baranov
EquationDrug rootkit analysis (mstcp32.sys)
EquationDrug