Malpedia Library

2017-10-16 ⋅ BAE Systems ⋅ Hirman Muhammad bin Abu Bakar, James Wong, Sergei Shevchenko
Taiwan Heist: Lazarus Tools and Ransomware
BLINDTOAD Lazarus Group

2017-10-16 ⋅ Proofpoint ⋅ Axel F, Pierre T
Leviathan: Espionage actor spearphishes maritime and defense targets
NanHaiShu SeDll APT40

2017-10-16 ⋅ Kaspersky Labs ⋅ GReAT
BlackOasis APT and new targeted attacks leveraging zero-day exploit
FinFisher RAT BlackOasis

2017-10-16 ⋅ Akamai ⋅ Akamei
UPnProxy: Blackhat Proxies via NAT Injections
Inception Framework

2017-10-16 ⋅ 401TRG ⋅ Tom Hegel
An Update on Winnti (LEAD/APT17)

2017-10-13 ⋅ Morphisec ⋅ Michael Gorelik
FIN7 Dissected: Hackers Accelerate Pace of Innovation
FIN7

2017-10-13 ⋅ Malware Traffic Analysis ⋅ Brad Duncan
Blank Slate Malspam Stops Pushing Locky, Starts Pushing Sage 2.2 Randsomware
SAGE

2017-10-13 ⋅ Zerophage
Rig EK via Malvertising drops a Smoke Loader leading to a Miner and AZORult
MedusaHTTP

2017-10-13 ⋅ Morphisec ⋅ Michael Gorelik
FIN7 Dissected: Hackers Accelerate Pace of Innovation

2017-10-13 ⋅ ESET Research ⋅ ESET Research
DoubleLocker: Innovative Android Ransomware
DoubleLocker

2017-10-12 ⋅ Duo ⋅ Greg Seador
The Beer Drinker’s Guide to SAML

2017-10-12 ⋅ Paladion ⋅ Shyaam Sundhar
DogHousePower: Python Based Ransomware
DogHousePower

2017-10-12 ⋅ Secureworks ⋅ CTU Research Team
BRONZE BUTLER Targets Japanese Enterprises
Daserf Datper rarstar xxmm Tick

2017-10-12 ⋅ G Data ⋅ G Data
Emotet beutet Outlook aus
Emotet

2017-10-11 ⋅ FBI ⋅ FBI
Wanted By The FBI: SamSam Subjects
SamSam

2017-10-11 ⋅ Cisco Talos ⋅ @Simpo13, Colin Grady, Dave Maynor, Edmund Brumaghin
Spoofed SEC Emails Distribute Evolved DNSMessenger
DNSMessenger

2017-10-11 ⋅ SecurityIntelligence ⋅ Limor Kessem
TrickBot Takes to Latin America, Continues to Expand Its Global Reach

2017-10-11 ⋅ Wraith Hacker Blog ⋅ Wraith Hacker
More info on 'Evolved DNSMessenger'
DNSMessenger

2017-10-10 ⋅ Kaspersky Labs ⋅ Konstantin Zykov
ATMii: a small but effective ATM robber
ATMii

2017-10-10 ⋅ MalwareBreakdown ⋅ MalwareBreakdown
Malvertising Campaign Uses RIG EK to Drop Quant Loader which Downloads FormBook.
QuantLoader