Malpedia Library

2017-09-20 ⋅ FireEye ⋅ Jacqueline O’Leary, Josiah Kimble, Kelli Vanderlee, Nalani Fraser
Insights into Iranian Cyber Espionage: APT33 Targets Aerospace and Energy Sectors and has Ties to Destructive Malware
DROPSHOT Nanocore RAT NetWire RC SHAPESHIFT TURNEDUP APT33

2017-09-20 ⋅ Avast ⋅ Ondrej Vlcek, Vince Steckler
Progress on CCleaner Investigation
CCleaner Backdoor

2017-09-20 ⋅ Wired ⋅ Andy Greenberg
The CCleaner Malware Fiasco Targeted at Least 18 Specific Tech Firms
CCleaner Backdoor

2017-09-20 ⋅ Intezer ⋅ Jay Rosenberg
Evidence Aurora Operation Still Active: Supply Chain Attack Through CCleaner
CCleaner Backdoor

2017-09-20 ⋅ NetScout ⋅ Dennis Schwarz
The Formidable FormBook Form Grabber
Formbook

2017-09-19 ⋅ Security Intelligence ⋅ Larry Loeb
Security Utility Abuses Supply Chain for a Malware Attack
CCleaner Backdoor

2017-09-19 ⋅ Kaspersky ⋅ Vladislav Pintiysky, Vyacheslav Rusakov
A Modern Hypervisor as a Basis for a Sandbox

2017-09-19 ⋅ Twitter (@craiu) ⋅ Costin Raiu
Tweet on Shared Code between CCleaner and APT17 Missl backdoor
CCleaner Backdoor

2017-09-19 ⋅ Fortinet ⋅ Dario Durando
A Look Into The New Strain Of BankBot
Anubis

2017-09-19 ⋅ Cymmetria ⋅ Cymmetria
Unveiling Patchwork – a targeted attack caught with cyber deception
QUILTED TIGER

2017-09-19 ⋅ NCC Group ⋅ Ollie Whitehouse
EternalGlue part one: Rebuilding NotPetya to assess real-world resilience
EternalPetya

2017-09-18 ⋅ Kaspersky Labs ⋅ Alexander Liskin, Andrey Kryukov, Anton Ivanov
An (un)documented Word feature abused by attackers
Inception Framework

2017-09-18 ⋅ ThreatConnect ⋅ Paul Vann
Casting a Light on BlackEnergy
BlackEnergy

2017-09-18 ⋅ Morphisec ⋅ Michael Gorelik
Morphisec Discovers CCleaner Backdoor Saving Millions of Avast Users
CCleaner Backdoor

2017-09-18 ⋅ Cisco Talos ⋅ Craig Williams, Edmund Brumaghin, Matthew Molyett, Ross Gibb, Warren Mercer
CCleanup: A Vast Number of Machines at Risk
CCleaner Backdoor

2017-09-15 ⋅ Microsoft Security Intelligence ⋅ Microsoft
Trojan:Win32/Enviserv.A
Enviserv

2017-09-15 ⋅ Fortinet ⋅ Xiaopeng Zhang
Deep Analysis of New Poison Ivy/PlugX Variant - Part II
Poison Ivy

2017-09-15 ⋅ Microsoft ⋅ Microsoft
TrojanSpy:Win32/Usteal
UFR Stealer

2017-09-15 ⋅ Microsoft ⋅ Microsoft
Trojan:Win32/Spyeye
SpyEye

2017-09-15 ⋅ Microsoft Security Intelligence ⋅ Jireh Sanico
TrojanDownloader:Win32/Banload
Banload