Malpedia Library

Click here to download all references as Bib-File.•

2017-10-11 ⋅ Wraith Hacker Blog ⋅ Wraith Hacker
More info on 'Evolved DNSMessenger'
DNSMessenger

2017-10-10 ⋅ Kaspersky Labs ⋅ Konstantin Zykov
ATMii: a small but effective ATM robber
ATMii

2017-10-10 ⋅ MalwareBreakdown ⋅ MalwareBreakdown
Malvertising Campaign Uses RIG EK to Drop Quant Loader which Downloads FormBook.
QuantLoader

2017-10-09 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
OilRig Group Steps Up Attacks with New Delivery Documents and New Injector Trojan
OilRig

2017-10-06 ⋅ CERT.PL ⋅ Jarosław Jedynak, Maciej Kotowicz
Peering into spam botnets
Emotet Kelihos Necurs SendSafe Tofsee

2017-10-06 ⋅ Blueliv ⋅ Blueliv
TrickBot banking trojan using EFLAGS as an anti-hook technique
TrickBot

2017-10-05 ⋅ Virus Bulletin ⋅ Catalin Valeriu Lita, Doina Cosovan
Linking Xpaj and Nymaim
Nymaim

2017-10-05 ⋅ Angel Alonso-Parrizas
Analysis of a malicious DOC used by Turla APT group; hunting persistence via PowerShell
KopiLuwak

2017-10-05 ⋅ Virus Bulletin ⋅ Anton Cherepanov, Robert Lipovsky
Industroyer: Biggest threat to industrial control systems since Stuxnet
Industroyer

2017-10-05 ⋅ Palo Alto Networks Unit 42 ⋅ Esmid Idrizovic, Juan Cortes
FreeMilk: A Highly Targeted Spear Phishing Campaign
APT37

2017-10-05 ⋅ FireEye ⋅ Nart Villeneuve, Randi Eitzman, Sandor Nemes, Tyler Dean
Significant FormBook Distribution Campaigns Impacting the U.S. and South Korea
Formbook

2017-10-05 ⋅ Palo Alto Networks Unit 42 ⋅ Esmid Idrizovic, Juan Cortes
FreeMilk: A Highly Targeted Spear Phishing Campaign
Freenki Loader PoohMilk Loader

2017-10-05 ⋅ Trend Micro ⋅ Jaromír Hořejší
SYSCON Backdoor Uses FTP as a C&C Channel
Syscon

2017-10-04 ⋅ Security 0wnage ⋅ Mo Bustami
Continued Activity targeting the Middle East
POWERSTATS

2017-10-04 ⋅ CrowdStrike ⋅ Karan Sood
Protecting the Software Supply Chain: Deep Insights into the CCleaner Backdoor
CCleaner Backdoor

2017-10-04 ⋅ Twitter (@JohnLaTwC) ⋅ John Lambert
Tweet on Turla JS backdoor
Maintools.js

2017-10-03 ⋅ Seqrite ⋅ Pavankumar Chaudhari
Evolution of jRAT JAVA Malware
AdWind

2017-10-03 ⋅ NetScout ⋅ TJ Nelson
The Flusihoc Dynasty, A Long Standing DDoS Botnet
Flusihoc

2017-10-02 ⋅ Intezer ⋅ Jay Rosenberg
Evidence Aurora Operation Still Active Part 2: More Ties Uncovered Between CCleaner Hack & Chinese Hackers
CCleaner Backdoor

2017-10-01 ⋅ Threat Fabric ⋅ Niels Croese, Pham Duy Phuc, Wesley Gahr
LokiBot - The first hybrid Android malware
LokiBot