Malpedia Library

2017-05-29 ⋅ Lokalhost.pl ⋅ Maciej Kotowicz
Gozi Tree
DreamBot Gozi ISFB Powersniff

2017-05-27 ⋅ Netlab ⋅ suqitian
From PDNS: Another fix length of 7, a-z. tlds: [ru, com]
MyloBot

2017-05-26 ⋅ PWC ⋅ Bart Parys
TrickBot’s bag of tricks
TrickBot

2017-05-25 ⋅ Github (stamparm) ⋅ Miroslav Stampar
EternalRocks (a.k.a. MicroBotMassiveNet)
EternalRocks

2017-05-25 ⋅ Kaspersky Labs ⋅ Nikita Slepogin
Dridex: A History of Evolution
Dridex Feodo

2017-05-25 ⋅ Symantec ⋅ Security Response
Lazarus: History of mysterious group behind infamous cyber attacks
Lazarus Group

2017-05-25 ⋅ Flashpoint ⋅ Flashpoint
Linguistic Analysis of WannaCry Ransomware Messages Suggests Chinese-Speaking Authors
WannaCryptor

2017-05-24 ⋅ CERT.PL ⋅ Paweł Srokosz
Analysis of Emotet v4
Emotet

2017-05-24 ⋅ Cybereason ⋅ Assaf Dahan
Operation Cobalt Kitty: A large-scale APT in Asia carried out by the OceanLotus Group
APT32

2017-05-24 ⋅ BrightTALK (FireEye) ⋅ Nick Carr
APT32: New Cyber Espionage Group
APT32

2017-05-23 ⋅ ESET Research ⋅ Anton Cherepanov
XData ransomware making rounds amid global WannaCryptor scare
Sandworm

2017-05-23 ⋅ ESET Research ⋅ Anton Cherepanov
XData ransomware making rounds amid global WannaCryptor scare
XData

2017-05-23 ⋅ ThreatVector ⋅ Cylance Threat Research Team
Quakbot
QakBot

2017-05-23 ⋅ Cisco ⋅ Vanja Svajcer
Modified Zyklon and plugins from India
Zyklon

2017-05-23 ⋅ SC Magazine UK ⋅ Max Metzger
Ocean Lotus Group/APT 32 identified as Vietnamese APT group
APT32

2017-05-22 ⋅ Symantec ⋅ Symantec Security Response
WannaCry: Ransomware attacks show strong links to Lazarus group
AlphaNC BravoNC Duuzer Sierra(Alfa,Bravo, ...) WannaCryptor

2017-05-19 ⋅ Malwarebytes ⋅ Adam McNeil
How did the WannaCry ransomworm spread?
WannaCryptor

2017-05-19 ⋅ Comae ⋅ Matt Suiche
WannaCry — Decrypting files with WanaKiwi + Demos
WannaCryptor

2017-05-18 ⋅ Minerva ⋅ Gal Bitensky
UIWIX – Evasive Ransomware Exploiting ETERNALBLUE
Uiwix

2017-05-17 ⋅ Fortinet ⋅ Hua Liu, Xiaopeng Zhang
New Loki Variant Being Spread via PDF File
Loki Password Stealer (PWS)