Malpedia Library

2017-11-01 ⋅ Palo Alto Networks Unit 42 ⋅ Brandon Levene, Brandon Young, Dominik Reichel
Everybody Gets One: QtBot Used to Distribute Trickbot and Locky
QtBot

2017-11-01 ⋅ Kaspersky Labs ⋅ GReAT
Silence – a new Trojan attacking financial organizations
Silence Silence group

2017-11-01 ⋅ Intezer ⋅ Jay Rosenberg
Silence of the Moles
Silence

2017-10-31 ⋅ McAfee ⋅ Xiaobing Lin
Expiro Malware Is Back and Even Harder to Remove
Expiro

2017-10-31 ⋅ Malwarebytes ⋅ Pieter Arntz
Analyzing malware by API calls
Vflooder

2017-10-31 ⋅ Bleeping Computer ⋅ Lawrence Abrams
ONI Ransomware Used in Month-Long Attacks Against Japanese Companies
Oni

2017-10-30 ⋅ Trend Micro ⋅ Jason Gu, Seven Shen, Veo Zhang
Coin Miner Mobile Malware Returns, Hits Google Play
Cpuminer

2017-10-30 ⋅ Kaspersky Labs ⋅ Ghareeb Saad, Mohamad Amin Hasbini
Gaza Cybergang – updated activity in 2017:
Molerats

2017-10-30 ⋅ ESET Research ⋅ Frédéric Vachon
Windigo Still not Windigone: An Ebury Update
Ebury

2017-10-29 ⋅ quangnh89
Sality Configuration Extractor (sality_extractor.py)
Sality

2017-10-27 ⋅ ⋅ ID Ransomware ⋅ Andrew Ivanov
XiaoBa Ransomware
XiaoBa

2017-10-27 ⋅ Palo Alto Networks Unit 42 ⋅ Unit42
Tracking Subaat: Targeted Phishing Attack Leads to Threat Actor’s Repository
The Gorgon Group

2017-10-27 ⋅ Independent.co.uk ⋅ Adam Withnall
British security minister says North Korea was behind WannaCry hack on NHS
WannaCryptor

2017-10-27 ⋅ F-Secure ⋅ F-Secure Global
The big difference with Bad Rabbit
EternalPetya

2017-10-27 ⋅ Bellingcat ⋅ Collin Anderson
Bahamut Revisited, More Cyber Espionage in the Middle East and South Asia
Bahamut Bahamut Bahamut

2017-10-27 ⋅ Palo Alto Networks Unit 42 ⋅ Unit 42
Tracking Subaat: Targeted Phishing Attack Leads to Threat Actor’s Repository

2017-10-27 ⋅ Cisco Talos ⋅ Cisco Talos
Threat Round Up for Oct 20 - Oct 27
MyloBot

2017-10-26 ⋅ RiskIQ ⋅ Yonathan Klijnsma
New htpRAT Gives Complete Remote Control Capabilities to Chinese Cyber Threat Actors
htpRAT

2017-10-26 ⋅ Macworld ⋅ Liviu Arsene
Keranger: the first “in-the-wild” ransomware for Macs. But certainly not the last
KeRanger

2017-10-26 ⋅ Twitter (@siri_urz) ⋅ S!Ri
Tweet on PDB path
Zezin