Malpedia Library

2017-04-05 ⋅ Palo Alto Networks Unit 42 ⋅ Tom Lancaster, Tomer Bar
Targeted Attacks in the Middle East Using KASPERAGENT and MICROPSIA
vamp

2017-04-05 ⋅ Fortninet ⋅ Artem Semenchenko, Jasper Manuel
In-Depth Look at New Variant of MONSOON APT Backdoor, Part 2
BadNews

2017-04-04 ⋅ PWC UK ⋅ PWC UK
Operation Cloud Hopper
APT10

2017-04-04 ⋅ Kaspersky Labs ⋅ Kaspersky Lab
Chasing Lazarus: A Hunt for the Infamous Hackers to Prevent Large Bank Robberies
Lazarus Group

2017-04-04 ⋅ Kaspersky Labs ⋅ Sergey Golovanov
ATMitch: remote administration of ATMs
ATMitch

2017-04-04 ⋅ GitHub (matthewdunwoody) ⋅ Matthew Dunwoody
POSHSPY backdoor code
POSHSPY

2017-04-03 ⋅ Kaspersky Labs ⋅ Costin Raiu, Daniel Moore, Juan Andrés Guerrero-Saade, Thomas Rid
Penquin’s Moonlit Maze
Penquin Turla

2017-04-03 ⋅ Kaspersky Labs ⋅ GReAT
Lazarus under the Hood
Alreay DYEPACK HOTWAX NESTEGG RatankbaPOS REDSHAWL WORMHOLE Lazarus Group

2017-04-03 ⋅ JPCERT/CC ⋅ Shusei Tomonaga
RedLeaves - Malware Based on Open Source RAT
PlugX RedLeaves Trochilus RAT

2017-04-03 ⋅ Malware Traffic Analysis ⋅ Brad Duncan
DHL Invoice Malspam/Photo Malspam
Pushdo

2017-04-03 ⋅ Threatpost ⋅ Michael Mimoso
Lazarus APT Spinoff Linked to Banking Hacks
Lazarus Group

2017-04-03 ⋅ Kaspersky Labs ⋅ Nikolay Pankov
Moonlight Maze: Lessons from history
Turla

2017-04-03 ⋅ Cisco Talos ⋅ Matthew Molyett, Paul Rascagnères, Warren Mercer
Introducing ROKRAT
RokRAT

2017-04-03 ⋅ Google ⋅ Jason Woloz, Ken Bodzak, Megan Ruthven, Neel Mehta, Rich Cannings, Wentao Chang
An Investigation of Chrysaor Malware on Android
Chrysaor

2017-04-03 ⋅ VOA ⋅ VOA
IAAF Says It Has Been Hacked, Athlete Medical Info Accessed
APT28

2017-04-03 ⋅ ⋅ JPCERT/CC ⋅ Shusei Tomonaga
オープンソースのRATを改良したマルウエアRedLeaves
RedLeaves

2017-04-03 ⋅ Github (nccgroup) ⋅ David Cannings
Technical Notes on RedLeaves
RedLeaves

2017-04-03 ⋅ FireEye ⋅ Matthew Dunwoody
Dissecting One of APT29’s Fileless WMI and PowerShell Backdoors (POSHSPY)
POSHSPY APT29

2017-04-03 ⋅ Kaspersky Labs ⋅ GReAT
Lazarus under the Hood
Alreay DYEPACK

2017-04-03 ⋅ Malware Breakdown ⋅ Malware Breakdown
Shadow Server Domains Leading to RIG Exploit Kit Dropping Smoke Loader
SmokeLoader