Malpedia Library

2017-04-20 ⋅ Palo Alto Networks Unit 42 ⋅ Josh Grunzweig
Cardinal RAT Active for Over Two Years
Cardinal RAT

2017-04-20 ⋅ Malwarebytes ⋅ Jérôme Segura
Binary Options malvertising campaign drops ISFB banking Trojan
ISFB

2017-04-19 ⋅ Trend Micro ⋅ Trend Micro Cyber Safety Solutions Team
RawPOS: New Behavior Risks Identity Theft
RawPOS

2017-04-19 ⋅ Trend Micro ⋅ Trendmicro
Of Pigs and Malware: Examining a Possible Member of the Winnti Group
Winnti

2017-04-18 ⋅ CyberScoop ⋅ Chris Bing
Shadow Brokers leaks show U.S. spies successfully hacked Russian, Iranian targets
The Shadow Brokers

2017-04-18 ⋅ Github (m0n0ph1) ⋅ m0n0ph1
Github repository for trochilus RAT

2017-04-18 ⋅ Symantec ⋅ Waylon Grange
Hajime worm battles Mirai for control of the Internet of Things
Hajime

2017-04-17 ⋅ Github (chokepoint) ⋅ chokepoint
Azazel
azazel

2017-04-17 ⋅ Github (countercept) ⋅ Luke Jennings
Python script for decoding DOUBLEPULSAR

2017-04-17 ⋅ Bleeping Computer ⋅ BleepingComputer
Remove Search.searchetan.com Chrome New Tab Page
StartPage

2017-04-17 ⋅ CSO Online ⋅ Michael Kan
New NSA leak may expose its bank spying, Windows exploits
The Shadow Brokers

2017-04-16 ⋅ Morphisec ⋅ Michael Gorelik
Morphisec Discovers New Fileless Attack Framework

2017-04-13 ⋅ F-Secure ⋅ F-Secure Labs
Callisto Group
Callisto

2017-04-13 ⋅ Avast ⋅ Jaromír Hořejší
A deeper look into malware abusing TeamViewer
TeamSpy

2017-04-13 ⋅ A blog about rootkits research and the Windows kernel ⋅ Artem Baranov
Stuxnet drivers: detailed analysis
Stuxnet

2017-04-13 ⋅ CrowdStrike ⋅ Falcon Intelligence Team
Inside the Takedown of ZOMBIE SPIDER and the Kelihos Botnet
Kelihos ZOMBIE SPIDER

2017-04-13 ⋅ Koodous ⋅ Koodous Blog
Decrypting Bankbot communications.
Anubis

2017-04-12 ⋅ CISA ⋅ CISA
ICS Alert (ICS-ALERT-17-102-01A)
BrickerBot

2017-04-11 ⋅ Kaspersky Labs ⋅ GReAT
Unraveling the Lamberts Toolkit

2017-04-10 ⋅ Symantec ⋅ A L Johnson
Longhorn: Tools used by cyberespionage group linked to Vault 7
Lambert Longhorn