Malpedia Library

2017-05-02 ⋅ Alexander Adamov
Targeted attack against the Ukrainian military
Darktrack RAT

2017-05-02 ⋅ Threatpost ⋅ Tom Spring
Shamoon Collaborator Greenbug Adopts New Communication Tool
Greenbug

2017-05-01 ⋅ IssueMakersLab ⋅ IssueMakersLab
Operation GoldenAxe
Rifdoor

2017-05-01 ⋅ Kaspersky Labs ⋅ Kaspersky
Crouching Yeti (Energetic Bear) Malware
ENERGETIC BEAR

2017-05-01 ⋅ Malwarebytes ⋅ Thomas Reed
Another OSX.Dok dropper found installing new backdoor
Bella

2017-04-28 ⋅ nairuzabulhul
KeyPlexer
KeyPlexer

2017-04-28 ⋅ Kaspersky Labs ⋅ Alexey Shulmin, Sergey Yunakovsky
Use of DNS Tunneling for C&C Communications
SOUNDBITE

2017-04-27 ⋅ Morphisec ⋅ Michael Gorelik
Iranian Fileless Attack Infiltrates Israeli Organizations
Helminth OilRig

2017-04-27 ⋅ US-CERT ⋅ US-CERT
Alert (TA17-117A): Intrusions Affecting Multiple Victims Across Multiple Sectors
PlugX RedLeaves

2017-04-27 ⋅ Homeland Security ⋅ Homeland Security
INTRUSIONS AFFECTING MULTIPLE VICTIMS ACROSS MULTIPLE SECTO
APT10

2017-04-27 ⋅ Palo Alto Networks Unit 42 ⋅ Robert Falcone
OilRig Actors Provide a Glimpse into Development and Testing Efforts
OilRig

2017-04-27 ⋅ Proofpoint ⋅ Axel F
APT Targets Financial Analysts with CVE-2017-0199
TA459

2017-04-27 ⋅ ColinGuru ⋅ Colin Hardy
Advanced Banload Analysis
Banload

2017-04-27 ⋅ Morphisec ⋅ Michael Gorelik
Iranian Fileless Attack Infiltrates Israeli Organizations
OilRig

2017-04-26 ⋅ Youtube (Kaspersky) ⋅ Kaspersky
China's Evolving Cyber Operations: A Look into APT19's Shift in Tactics
Cobalt Strike APT19

2017-04-26 ⋅ Intrusiontruth ⋅ Intrusiontruth
Who is behind this Chinese espionage group stealing our intellectual property?

2017-04-26 ⋅ Handelsblatt ⋅ Daniel Tost
Russia-linked Hackers Target German Political Foundations
APT28

2017-04-26 ⋅ Fortinet ⋅ Dario Durando, David Maciejak
BankBot, the Prequel
Anubis

2017-04-26 ⋅ Radware ⋅ Radware
Hajime – Friend or Foe?
Hajime

2017-04-25 ⋅ Cybereason ⋅ Assaf Dahan
ShadowWali: New variant of the xxmm family of backdoors
xxmm