Malpedia Library

2016-10-27 ⋅ Kaspersky Labs ⋅ Alexey Shulmin, Sergey Yunakovsky
Inside the Gootkit C&C server
GootKit

2016-10-27 ⋅ Bleeping Computer ⋅ Lawrence Abrams
In-Dev Ransomware forces you do to Survey before unlocking Computer
FileIce

2016-10-27 ⋅ Trend Micro ⋅ Joey Chen, MingYen Hsieh
BLACKGEAR Espionage Campaign Evolves, Adds Japan To Target List
Blackgear

2016-10-27 ⋅ Twitter (@struppigel) ⋅ Karsten Hahn
Tweet on procleaner.exe
ScreenLocker

2016-10-26 ⋅ Unknown ⋅ Chris Doman
Moonlight – Targeted attacks in the Middle East
Houdini NjRAT Molerats

2016-10-25 ⋅ NetScout ⋅ ASERT Team
TrickBot Banker Insights
Godzilla Loader TrickBot

2016-10-25 ⋅ Palo Alto Networks Unit 42 ⋅ Anthony Kasza
Houdini’s Magic Reappearance

2016-10-25 ⋅ Palo Alto Networks Unit 42 ⋅ Anthony Kasza
Houdini’s Magic Reappearance
Houdini

2016-10-24 ⋅ Lastline ⋅ lastline Labs Team
Evasive Malware Detects and Defeats Virtual Machine Analysis

2016-10-24 ⋅ Malwarebytes ⋅ Malwarebytes Labs
Introducing TrickBot, Dyreza’s successor
TrickBot

2016-10-21 ⋅ Forcepoint ⋅ Rolanda Dela Paz
BITTER: a targeted attack against Pakistan
Bitter RAT

2016-10-20 ⋅ Fortinet ⋅ Bing Liu
TheMoon - A P2P botnet targeting Home Routers
TheMoon

2016-10-20 ⋅ Twitter (@benkow_) ⋅ Benoît Ancel
Tweet on nexter91 Panel
Nexster Bot

2016-10-20 ⋅ Twitter (@malwrhunterteam) ⋅ MalwareHunterTeam
Tweet on Ransomware
Unidentified 024 (Ransomware)

2016-10-20 ⋅ ⋅ Andrew Ivanov
RotorCrypt (RotoCrypt) Ransomware Tar Ransomware
RotorCrypt

2016-10-20 ⋅ ESET Research ⋅ ESET Research
En Route with Sednit Part 2: Observing the Comings and Goings
X-Agent Sedreco X-Agent XTunnel

2016-10-20 ⋅ Twitter (@malwrhunterteam) ⋅ MalwareHunterTeam
Tweet on Quasar RAT
Quasar RAT

2016-10-18 ⋅ Cylance ⋅ Cylance Threat Research Team
Digitally Signed Malware Targeting Gaming Companies
Excalibur

2016-10-18 ⋅ Cylance ⋅ Cylance Threat Research Team
Digitally Signed Malware Targeting Gaming Companies
PassCV

2016-10-17 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
‘DealersChoice’ is Sofacy’s Flash Player Exploit Platform
APT28