Malpedia Library

2017-12-04 ⋅ RSA ⋅ Jack Wesley Riley
The Shadows of Ghosts Inside the response of a unique Carbanak intrusion
GOTROJ MimiKatz

2017-11-16 ⋅ Github (mdsecactivebreach) ⋅ Vincent Yiu
CACTUSTORCH: Payload Generation for Adversary Simulations
CACTUSTORCH

2017-11-13 ⋅ SecurityIntelligence ⋅ Limor Kessem, Maor Wiesen, Tal Darsan, Tomer Agayev
New Banking Trojan IcedID Discovered by IBM X-Force Research
IcedID IcedID Downloader

2017-09-26 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
Striking Oil: A Closer Look at Adversary Infrastructure
OilRig

2017-09-26 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
Striking Oil: A Closer Look at Adversary Infrastructure
RGDoor

2017-08-02 ⋅ RSA Link ⋅ Ahmed Sonbol
Malspam delivers Xtreme RAT 8-1-2017
Xtreme RAT

2017-05-03 ⋅ RSA Link ⋅ Ahmed Sonbol
Hunting pack use case: RedLeaves malware
RedLeaves

2017-02-13 ⋅ RSA ⋅ RSA Research
KINGSLAYER – A SUPPLY CHAIN ATTACK
CodeKey PlugX

2016-12-22 ⋅ GovCERT.ch ⋅ GovCERT.ch
Tofsee Spambot features .ch DGA - Reversal and Countermesaures
Tofsee

2016-09-13 ⋅ Laanwj
The curious case of BLATSTING's RSA implementation
Equationgroup (Sorting)

2016-06-15 ⋅ Fox-IT ⋅ Fox IT
Mofang: A politically motivated information stealing adversary
Mofang

2016-05-17 ⋅ Fox-IT ⋅ Danny Heppener, Erik de Jong, Krijn de Mik, Lennart Haagsma, Maarten van Dantzig, Martin van Hensbergen, Mitchel Sahertian, Yonathan Klijnsma, Yun Zheng Hu
Mofang: A politically motivated information stealing adversary
Shim RAT Mofang

2016-05-03 ⋅ William Showalter
A Universal Windows Bootkit
APT41

2016-03-30 ⋅ Secureworks ⋅ Counter Threat Unit ResearchTeam
Ransomware Deployed by Adversary with Established Foothold
MimiKatz reGeorg SamSam BOSS SPIDER

2016-03-02 ⋅ RSA Conference ⋅ Vanja Svajcer
Dissecting Derusbi
Derusbi

2016-01-22 ⋅ RSA Link ⋅ Norton Santos
PlugX APT Malware
PlugX

2016-01-22 ⋅ RSA ⋅ Norton Santos
Sykipot APT Malware
sykipot

2015-11-25 ⋅ RSA ⋅ RSA
Detecting GlassRAT using Security Analytics and ECAT
GlassRAT

2014-09-22 ⋅ SecurityIntelligence ⋅ Assaf Regev, Tal Darsan
Tinba Malware Reloaded and Attacking Banks Around the World
Tinba

2014-08-27 ⋅ Kaspersky Labs ⋅ Kaspersky
NetTraveler Gets a Makeover for 10th Anniversary
APT21