Malpedia Library

2017-05-05 ⋅ Malwarebytes ⋅ Thomas Reed
Snake malware ported from Windows to Mac
Uroburos

2017-05-05 ⋅ Github (R3MRUM) ⋅ R3MRUM
loki-parse
Loki Password Stealer (PWS)

2017-05-04 ⋅ Fidelis Cybersecurity ⋅ Jason Reaves
Blackmoon Rising: Banking Trojan Back with New Framework
KrBanker

2017-05-04 ⋅ Forbes ⋅ Thomas Brewster
Behind The Mystery Of Russia's 'Dyre' Hackers Who Stole Millions From American Business
Dyre

2017-05-04 ⋅ Check Point Software Technologies Ltd ⋅ Ofer Caspi
OSX Malware is Catching Up, and it wants to Read Your HTTPS Traffic
Dok

2017-05-03 ⋅ IEEE ⋅ Alok Tongaonkar, Gaspar Modelo-Howard, Lorenzo De Carli, Ruben Torres, Somesh Jha
Botnet Protocol Inference in the Presence of Encrypted Traffic
Ramnit Sality ZeroAccess

2017-05-03 ⋅ RSA Link ⋅ Ahmed Sonbol
Hunting pack use case: RedLeaves malware
RedLeaves

2017-05-03 ⋅ Cisco Talos ⋅ Paul Rascagnères
KONNI: A Malware Under The Radar For Years
Konni

2017-05-03 ⋅ Palo Alto Networks Unit 42 ⋅ Brandon Levene, Robert Falcone, Tyler Halfpop
Kazuar: Multiplatform Espionage Backdoor with API Access
Turla

2017-05-03 ⋅ FireEye ⋅ DJ Palombo, Jon Erickson, Matthew McWhirt
To SDB, Or Not To SDB: FIN7 Leveraging Shim Databases for Persistence
FIN7

2017-05-03 ⋅ Palo Alto Networks Unit 42 ⋅ Brandon Levene, Robert Falcone, Tyler Halfpop
Kazuar: Multiplatform Espionage Backdoor with API Access
Kazuar

2017-05-03 ⋅ Fox-IT ⋅ Jelle Vergeer, Krijn de Mik, Maarten van Dantzig, Mitchel Sahertian, Yun Zheng Hu
Snake: Coming soon in Mac OS X flavour
Uroburos

2017-05-03 ⋅ Fortinet ⋅ Xiaopeng Zhang
Deep Analysis of New Emotet Variant - Part 1
Emotet

2017-05-02 ⋅ 360 Core Security ⋅ ratty3697
HackSpy-Trojan-Exploit
HackSpy

2017-05-02 ⋅ Intrusiontruth ⋅ Intrusiontruth
Who is Mr Wu?

2017-05-02 ⋅ Cylance ⋅ Threat Research Team
Philadelphia Ransomware

2017-05-02 ⋅ Alexander Adamov
Targeted attack against the Ukrainian military
Darktrack RAT

2017-05-02 ⋅ Threatpost ⋅ Tom Spring
Shamoon Collaborator Greenbug Adopts New Communication Tool
Greenbug

2017-05-01 ⋅ IssueMakersLab ⋅ IssueMakersLab
Operation GoldenAxe
Rifdoor

2017-05-01 ⋅ Kaspersky Labs ⋅ Kaspersky
Crouching Yeti (Energetic Bear) Malware
ENERGETIC BEAR