Malpedia Library

Click here to download all references as Bib-File.•

2017-11-02 ⋅ PWC UK ⋅ Bart Parys
The KeyBoys are back in town
KeyBoy

2017-11-02 ⋅ RiskIQ ⋅ Yonathan Klijnsma
New Insights into Energetic Bear’s Watering Hole Cyber Attacks on Turkish Critical Infrastructure
ENERGETIC BEAR

2017-11-02 ⋅ Malware Traffic Analysis ⋅ Brad Duncan
2017-11-02 - ADVENTURES WITH SMOKE LOADER
Lethic

2017-11-02 ⋅ Palo Alto Networks Unit 42 ⋅ Jacob Soo, Josh Grunzweig
Recent InPage Exploits Lead to Multiple Malware Families
Confucius

2017-11-02 ⋅ Talos ⋅ Earl Carter, Edmund Brumaghin, Emmanuel Tacheau
Poisoning the Well: Banking Trojan Targets Google Search Results
PandaBanker

2017-11-02 ⋅ Palo Alto Networks Unit 42 ⋅ Jacob Soo, Josh Grunzweig
Recent InPage Exploits Lead to Multiple Malware Families
BioData

2017-11-01 ⋅ Virus Bulletin ⋅ Patrick Wardle
Offensive malware analysis: dissecting OSX/FruitFly.B via a custom C&C server
FruitFly

2017-11-01 ⋅ Bleeping Computer ⋅ Catalin Cimpanu
CryptoShuffler Stole $150,000 by Replacing Bitcoin Wallet IDs in PC Clipboards
CryptoShuffler

2017-11-01 ⋅ Palo Alto Networks Unit 42 ⋅ Brandon Levene, Brandon Young, Dominik Reichel
Everybody Gets One: QtBot Used to Distribute Trickbot and Locky
QtBot

2017-11-01 ⋅ Kaspersky Labs ⋅ GReAT
Silence – a new Trojan attacking financial organizations
Silence Silence group

2017-11-01 ⋅ Intezer ⋅ Jay Rosenberg
Silence of the Moles
Silence

2017-10-31 ⋅ McAfee ⋅ Xiaobing Lin
Expiro Malware Is Back and Even Harder to Remove
Expiro

2017-10-31 ⋅ Malwarebytes ⋅ Pieter Arntz
Analyzing malware by API calls
Vflooder

2017-10-31 ⋅ Bleeping Computer ⋅ Lawrence Abrams
ONI Ransomware Used in Month-Long Attacks Against Japanese Companies
Oni

2017-10-30 ⋅ Trend Micro ⋅ Jason Gu, Seven Shen, Veo Zhang
Coin Miner Mobile Malware Returns, Hits Google Play
Cpuminer

2017-10-30 ⋅ Kaspersky Labs ⋅ Ghareeb Saad, Mohamad Amin Hasbini
Gaza Cybergang – updated activity in 2017:
Molerats

2017-10-30 ⋅ ESET Research ⋅ Frédéric Vachon
Windigo Still not Windigone: An Ebury Update
Ebury

2017-10-29 ⋅ quangnh89
Sality Configuration Extractor (sality_extractor.py)
Sality

2017-10-27 ⋅ ⋅ ID Ransomware ⋅ Andrew Ivanov
XiaoBa Ransomware
XiaoBa

2017-10-27 ⋅ Palo Alto Networks Unit 42 ⋅ Unit42
Tracking Subaat: Targeted Phishing Attack Leads to Threat Actor’s Repository
The Gorgon Group