Malpedia Library

2017-09-26 ⋅ Malwarebytes ⋅ Malwarebytes Labs
Elaborate scripting-fu used in espionage attack against Saudi Arabia Government entity
POWERSTATS

2017-09-26 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
Striking Oil: A Closer Look at Adversary Infrastructure
RGDoor

2017-09-26 ⋅ ISC ⋅ Renato Marinho
XPCTRA Malware Steals Banking and Digital Wallet User's Credentials
XPCTRA

2017-09-25 ⋅ Kaspersky Labs ⋅ Alexey Shulmin, Dmitry Karasovsky, Vasily Berdnikov
A simple example of a complex cyberattack
Microcin Vicious Panda

2017-09-25 ⋅ Kaspersky Labs ⋅ Alexey Shulmin, Dmitry Karasovsky, Vasily Berdnikov
A simple example of a complex cyberattack
Microcin

2017-09-25 ⋅ Palo Alto Networks Unit 42 ⋅ Jeff White
Analyzing the Various Layers of AgentTesla’s Packing
Agent Tesla

2017-09-22 ⋅ Threatpost ⋅ Tom Spring
EternalBlue Exploit Used in Retefe Banking Trojan Campaign
Retefe

2017-09-22 ⋅ Kaspersky Labs ⋅ John Snow
NRansom: Ransomware that demands your nudes
nRansom

2017-09-21 ⋅ Zerophage
Rig EK via Rulan drops an Infostealer
Sysraw Stealer

2017-09-21 ⋅ FireEye ⋅ Nick Carr, Stuart Davis
APT33: New Insights into Iranian Cyber Espionage Group
APT33

2017-09-21 ⋅ Malwarebytes ⋅ Jérôme Segura
Fake IRS notice delivers customized spying tool
RMS

2017-09-21 ⋅ ESET Research ⋅ Filip Kafka
New FinFisher surveillance campaigns: Internet providers involved?
FinFisher RAT

2017-09-20 ⋅ 360 netlab ⋅ RootKiter
Is Hajime botnet dead?
Hajime

2017-09-20 ⋅ FireEye ⋅ Jacqueline O’Leary, Josiah Kimble, Kelli Vanderlee, Nalani Fraser
Insights into Iranian Cyber Espionage: APT33 Targets Aerospace and Energy Sectors and has Ties to Destructive Malware
DROPSHOT Nanocore RAT NetWire RC SHAPESHIFT TURNEDUP APT33

2017-09-20 ⋅ Avast ⋅ Ondrej Vlcek, Vince Steckler
Progress on CCleaner Investigation
CCleaner Backdoor

2017-09-20 ⋅ Intezer ⋅ Jay Rosenberg
Evidence Aurora Operation Still Active: Supply Chain Attack Through CCleaner
CCleaner Backdoor

2017-09-20 ⋅ NetScout ⋅ Dennis Schwarz
The Formidable FormBook Form Grabber
Formbook

2017-09-19 ⋅ Security Intelligence ⋅ Larry Loeb
Security Utility Abuses Supply Chain for a Malware Attack
CCleaner Backdoor

2017-09-19 ⋅ Kaspersky ⋅ Vladislav Pintiysky, Vyacheslav Rusakov
A Modern Hypervisor as a Basis for a Sandbox

2017-09-19 ⋅ Twitter (@craiu) ⋅ Costin Raiu
Tweet on Shared Code between CCleaner and APT17 Missl backdoor
CCleaner Backdoor