Malpedia Library

2017-03-23 ⋅ FireEye ⋅ Christopher Truncer
WMImplant – A WMI Based Agentless Post-Exploitation RAT Developed in PowerShell
WMImplant

2017-03-23 ⋅ Twitter (PhysicalDrive0) ⋅ PhysicalDrive0
Tweet on XAgent for macOS
X-Agent

2017-03-23 ⋅ Cofense ⋅ Cofense
Tales from the Trenches: Loki Bot Malware
Loki Password Stealer (PWS)

2017-03-22 ⋅ Trend Micro ⋅ Cedric Pernet
Winnti Abuses GitHub for C&C Communications
EASYNIGHT APT41

2017-03-22 ⋅ Cylance ⋅ Cylance Threat Research Team
El Machete's Malware Attacks Cut Through LATAM
Machete El Machete

2017-03-22 ⋅ Cylance ⋅ Threat Research Team
El Machete's Malware Attacks Cut Through LATAM
El Machete

2017-03-22 ⋅ Trend Micro ⋅ Cedric Pernet
Winnti Abuses GitHub for C&C Communications
Winnti

2017-03-21 ⋅ Wired ⋅ Chad Hagen, Garrett M. Graff
Inside the Hunt for Russia’s Most Notorious Hacker
Gameover P2P Murofet Zeus

2017-03-21 ⋅ DomainTools ⋅ DomainTools
Hunt Case Study: Hunting Campaign Indicators on Privacy Protected Attack Infrastructure
CopyKittens

2017-03-21 ⋅ Wired ⋅ Garrett M. Graff
Inside the Hunt for Russia's Most Notorious Hacker
Gameover P2P

2017-03-20 ⋅ Cisco Talos ⋅ Earl Carter, Edmund Brumaghin, Jaeson Schultz, Sean Baird
Necurs Diversifies Its Portfolio
Necurs

2017-03-17 ⋅ Fortinet ⋅ David Wang, He Xu
Grabbot is Back to Nab Your Data
GrabBot

2017-03-17 ⋅ Malwarebytes ⋅ Malwarebytes Labs
Diamond Fox – part 1: introduction and unpacking
DiamondFox

2017-03-17 ⋅ Twitter (PhysicalDrive0) ⋅ PhysicalDrive0
Tweet on hash for Nexus Keylogger
NexusLogger

2017-03-16 ⋅ Threatpost ⋅ Michael Mimoso
Fileless Malware Campaigns Tied to Same Attacker
FIN7

2017-03-15 ⋅ Trend Micro ⋅ Trend Micro Cyber Safety Solutions Team
MajikPOS Combines PoS Malware and RATs to Pull Off its Malicious Tricks
MajikPos

2017-03-15 ⋅ Fortinet ⋅ Axelle Apvrille
Teardown of Android/Ztorg (Part 2)
Ztorg

2017-03-15 ⋅ Palo Alto Networks Unit 42 ⋅ Josh Grunzweig
NexusLogger: A New Cloud-based Keylogger Enters the Market
NexusLogger

2017-03-15 ⋅ Bleeping Computer ⋅ Lawrence Abrams
Revenge Ransomware, a CryptoMix Variant, Being Distributed by RIG Exploit Kit
CryptoShield

2017-03-15 ⋅ Fortinet ⋅ Axelle Apvrille
Teardown of a Recent Variant of Android/Ztorg (Part 1)
Ztorg