Malpedia Library

2017-04-05 ⋅ Palo Alto Networks Unit 42 ⋅ Tom Lancaster, Tomer Bar
Targeted Attacks in the Middle East Using KASPERAGENT and MICROPSIA
vamp

2017-04-05 ⋅ Fortninet ⋅ Artem Semenchenko, Jasper Manuel
In-Depth Look at New Variant of MONSOON APT Backdoor, Part 2
BadNews

2017-04-04 ⋅ PWC UK ⋅ PWC UK
Operation Cloud Hopper
APT10

2017-04-04 ⋅ Kaspersky Labs ⋅ Kaspersky Lab
Chasing Lazarus: A Hunt for the Infamous Hackers to Prevent Large Bank Robberies
Lazarus Group

2017-04-04 ⋅ Kaspersky Labs ⋅ Sergey Golovanov
ATMitch: remote administration of ATMs
ATMitch

2017-04-04 ⋅ GitHub (matthewdunwoody) ⋅ Matthew Dunwoody
POSHSPY backdoor code
POSHSPY

2017-04-03 ⋅ Kaspersky Labs ⋅ Costin Raiu, Daniel Moore, Juan Andrés Guerrero-Saade, Thomas Rid
Penquin’s Moonlit Maze
Penquin Turla

2017-04-03 ⋅ Kaspersky Labs ⋅ GReAT
Lazarus under the Hood
Alreay DYEPACK HOTWAX NESTEGG RatankbaPOS REDSHAWL WORMHOLE Lazarus Group

2017-04-03 ⋅ Threatpost ⋅ Michael Mimoso
Lazarus APT Spinoff Linked to Banking Hacks
Lazarus Group

2017-04-03 ⋅ Kaspersky Labs ⋅ Nikolay Pankov
Moonlight Maze: Lessons from history
Turla

2017-04-03 ⋅ Cisco Talos ⋅ Matthew Molyett, Paul Rascagnères, Warren Mercer
Introducing ROKRAT
RokRAT

2017-04-03 ⋅ Google ⋅ Jason Woloz, Ken Bodzak, Megan Ruthven, Neel Mehta, Rich Cannings, Wentao Chang
An Investigation of Chrysaor Malware on Android
Chrysaor

2017-04-03 ⋅ VOA ⋅ VOA
IAAF Says It Has Been Hacked, Athlete Medical Info Accessed
APT28

2017-04-03 ⋅ FireEye ⋅ Matthew Dunwoody
Dissecting One of APT29’s Fileless WMI and PowerShell Backdoors (POSHSPY)
POSHSPY APT29

2017-04-03 ⋅ Kaspersky Labs ⋅ GReAT
Lazarus under the Hood
Alreay DYEPACK

2017-04-03 ⋅ Malware Breakdown ⋅ Malware Breakdown
Shadow Server Domains Leading to RIG Exploit Kit Dropping Smoke Loader
SmokeLoader

2017-04-03 ⋅ Google ⋅ Jason Woloz, Ken Bodzak, Megan Ruthven, Neel Mehta, Rich Cannings, Wentao Chang
An investigation of Chrysaor Malware on Android
Chrysaor

2017-04-03 ⋅ Kaspersky Labs ⋅ Costin Raiu, Daniel Moore, Juan Andrés Guerrero-Saade, Thomas Rid
Moonlight Maze Technical Report (Appendix B)
Penquin Turla

2017-04-03 ⋅ Malware Breakdown ⋅ MalwareBreakdown
Shadow Server Domains Leading to RIG Exploit Kit Dropping Smoke Loader. Downloaded Neutrino Bot (AKA Kasidet).
Neutrino

2017-04-01 ⋅ Lookout ⋅ Lookout
Pegasus for Android: Technical Analysis and Findings of Chrysaor
Chrysaor