Malpedia Library

2018-01-17 ⋅ Bleeping Computer ⋅ Catalin Cimpanu
Exobot Author Calls It Quits and Sells Off Banking Trojan Source Code
ExoBot

2018-01-17 ⋅ Malwarebytes ⋅ hasherezade
A coin miner with a “Heaven’s Gate”
Coinminer

2018-01-17 ⋅ ⋅ ESET Research ⋅ Cassius Puodzius
Zumanek: novo malware tenta roubar credenciais de serviços das vítimas
Zumanek

2018-01-17 ⋅ NCSC UK ⋅ NCSC UK
Turla group malware
Nautilus Neuron

2018-01-17 ⋅ SANS ISC ⋅ brad
Reviewing the spam filters: Malspam pushing Gozi-ISFB
ISFB

2018-01-17 ⋅ FireEye ⋅ Swapnil Patil, Yogesh Londhe
Microsoft Office Vulnerabilities Used to Distribute Zyklon Malware in Recent Campaign
Zyklon

2018-01-17 ⋅ 360 netlab ⋅ RootKiter
Art of Steal: Satori Variant is Robbing ETH BitCoin by Replacing Wallet Address
Satori

2018-01-16 ⋅ Opcode Security research ⋅ ntopcode
Anatomy of the thread suspension mechanism in Windows (Windows Internals)

2018-01-16 ⋅ Cisco Talos ⋅ Paul Rascagnères, Warren Mercer
Korea In The Crosshairs
Freenki Loader RokRAT APT37

2018-01-16 ⋅ Midnight Blue Labs ⋅ Carlo Meijer, Jos Wetzels
Analyzing the TRITON industrial malware
Triton

2018-01-16 ⋅ Cisco Talos ⋅ Jungsoo An, Paul Rascagnères, Warren Mercer
Korea In The Crosshairs
Freenki Loader PoohMilk Loader RokRAT APT37

2018-01-16 ⋅ Kaspersky Labs ⋅ Alexey Firsh, Nikita Buchka
Skygofree: Following in the footsteps of HackingTeam
Skygofree

2018-01-16 ⋅ RiskIQ ⋅ Yonathan Klijnsma
First Activities of Cobalt Group in 2018: Spear Phishing Russian Banks
Cobalt

2018-01-16 ⋅ Cylance ⋅ Cylance Threat Research Team
Threat Spotlight: LockPOS Point of Sale Malware
LockPOS

2018-01-16 ⋅ enSilo ⋅ Alon Hadar
GlobeImposter Ransomware
GlobeImposter

2018-01-15 ⋅ Trend Micro ⋅ Alfredo Oliveira, Gilbert Sison, Jay Yaneza, Rheniel Ramos
New KillDisk Variant Hits Financial Organizations in Latin America
KillDisk (Lazarus) Lazarus Group

2018-01-15 ⋅ Acronis ⋅ Acronis Security
GlobeImposter ransomware: A holiday gift from the Necurs botnet
GlobeImposter

2018-01-15 ⋅ VirIT ⋅ Gianfranco Tonello
Bootkits are not dead. Pitou is back!
Pitou

2018-01-13 ⋅ The Washington Post ⋅ Ellen Nakashima
Russian military was behind ‘NotPetya’ cyberattack in Ukraine, CIA concludes
EternalPetya