Malpedia Library

2024-04-19 ⋅ ThreatMon ⋅ ThreatMon, ThreatMon Malware Research Team
APT44: The Famous Sandworm of Russia

2024-04-09 ⋅ sysdig ⋅ Sysdig Threat Research Team
RUBYCARP: A Detailed Analysis of a Sophisticated Decade-Old Botnet Group
PerlBot RUBYCARP

2024-04-04 ⋅ Proofpoint ⋅ Proofpoint Threat Research Team, Team Cymru, TEAM CYMRU S2 THREAT RESEARCH
Latrodectus: This Spider Bytes Like Ice
IcedID Latrodectus

2024-04-03 ⋅ ThreatMon ⋅ Kerime Gencay
XZ Utils Backdoor Research Report CVE-2024-3094
xzbot

2024-03-21 ⋅ Proofpoint ⋅ Proofpoint Threat Research Team
Security Brief: TA450 Uses Embedded Links in PDF Attachments in Latest Campaign

2024-03-05 ⋅ Team Cymru ⋅ S2 Research Team
Coper / Octo - A Conductor for Mobile Mayhem… With Eight Limbs?
Coper

2024-03-05 ⋅ Reliaquest ⋅ RELIAQUEST THREAT RESEARCH TEAM
Anxun and Chinese APT Activity
ShadowPad

2024-02-27 ⋅ splunk ⋅ Splunk Threat Research Team, Teoderick Contreras
Unveiling Phemedrone Stealer: Threat Analysis and Detections
Phemedrone Stealer

2024-02-22 ⋅ Sekoia ⋅ Livia Tibirna, Pierre-Antoine D., Quentin Bourgue, Threat & Detection Research Team
Scattered Spider laying new eggs
BlackCat

2024-02-02 ⋅ Stairwell ⋅ Threat Research at Stairwell
Proactive response: AnyDesk, any breach
Agent Tesla

2024-01-19 ⋅ Phylum ⋅ Phylum Research Team
npm Package Found Delivering Sophisticated RAT
Unidentified 113 (RAT)

2024-01-17 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
New TTPs observed in Mint Sandstorm campaign targeting high-profile individuals at universities and research orgs
MediaPI APT35

2024-01-17 ⋅ splunk ⋅ Splunk Threat Research Team
Enter The Gates: An Analysis of the DarkGate AutoIt Loader
DarkGate

2024-01-15 ⋅ Russian Panda Research Blog ⋅ RussianPanda
From Russia With Code: Disarming Atomic Stealer
AMOS

2024-01-09 ⋅ Avast Decoded ⋅ Threat Research Team
Avast Updates Babuk Ransomware Decryptor in Cooperation with Cisco Talos and Dutch Police
Babuk

2024-01-05 ⋅ HUNT & HACKETT ⋅ Hunt & Hackett Research Team
Turkish espionage campaigns in the Netherlands
SnappyTCP

2023-12-28 ⋅ Russian Panda Research Blog ⋅ RussianPanda
MetaStealer Part 2, Google Cookie Refresher Madness and Stealer Drama
MetaStealer

2023-12-26 ⋅ Russian Panda Research Blog ⋅ RussianPanda
Pure Logs Stealer Fails to Impress
PureLogs Stealer

2023-12-06 ⋅ splunk ⋅ Splunk Threat Research Team
Unmasking the Enigma: A Historical Dive into the World of PlugX Malware
PlugX

2023-12-05 ⋅ Proofpoint ⋅ Crista Giering, Greg Lesnewich, Proofpoint Threat Research Team
TA422’s Dedicated Exploitation Loop—the Same Week After Week