Malpedia Library

2017-08-18 ⋅ Trend Micro ⋅ John Sanchez
KOVTER: An Evolving Malware Gone Fileless
Kovter

2017-08-18 ⋅ Twitter (@VK_intel) ⋅ Vitali Kremez
Tweet on extracted config from Gootkit
SnatchLoader

2017-08-18 ⋅ Malwarebytes ⋅ Malwarebytes Labs
Inside the Kronos malware – part 1
Kronos

2017-08-17 ⋅ Proofpoint ⋅ Darien Huss
Turla APT actor refreshes KopiLuwak JavaScript backdoor for use in G20-themed attack
KopiLuwak

2017-08-17 ⋅ Trend Micro ⋅ Trend Micro
HBO Twitter and Facebook Accounts Hacked by OurMine
OurMine

2017-08-16 ⋅ Benkow Lab ⋅ Benoît Ancel
Quick look at another Alina fork: XBOT-POS
XBot POS

2017-08-16 ⋅ Bleeping Computer ⋅ Lawrence Abrams
Locky Ransomware switches to the Lukitus extension for Encrypted Files
Locky

2017-08-16 ⋅ Bleeping Computer ⋅ Lawrence Abrams
SyncCrypt Ransomware Hides Inside JPG Files, Appends .KK Extension
SyncCrypt

2017-08-15 ⋅ Microsoft Security Intelligence
Trojan:Win32/Neconyd.A
Neconyd

2017-08-15 ⋅ Fortinet ⋅ Jasper Manuel
A Quick Look at a New KONNI RAT Variant
Konni

2017-08-15 ⋅ Kaspersky Labs ⋅ GReAT
ShadowPad in corporate networks
ShadowPad

2017-08-15 ⋅ Group-IB ⋅ Vesta Matveeva
Secrets of Cobalt
Cobalt

2017-08-14 ⋅ Proofpoint ⋅ Kafeine
Threat actor goes on a Chrome extension hijacking spree
js.wd

2017-08-14 ⋅ Palo Alto Networks Unit 42 ⋅ Anthony Kasza
The Blockbuster Saga Continues
HOPLIGHT

2017-08-13 ⋅ Adam Chester
Analysis of APT28 hospitality malware (Part 2)
Seduploader

2017-08-11 ⋅ Threatpost ⋅ Tom Spring
Ukrainian Man Arrested, Charged in NotPetya Distribution
EternalPetya

2017-08-11 ⋅ FireEye ⋅ Ben Read, Lindsay Smith
APT28 Targets Hospitality Sector, Presents Threat to Travelers
Seduploader

2017-08-10 ⋅ PhishLabs ⋅ Amanda Kline
Globe Imposter Ransomware Makes a New Run
GlobeImposter

2017-08-10 ⋅ ⋅ botfrei Blog ⋅ Tom Berchem
Weltweite Spamwelle verbreitet teuflische Variante des Locky
Locky

2017-08-09 ⋅ CSE ⋅ CSE Canada
Hackers are Humans too
Satellite Turla