Malpedia Library

2017-02-28 ⋅ Security Intelligence ⋅ Magal Baz, Or Safran
Dridex’s Cold War: Enter AtomBombing
Dridex

2017-02-27 ⋅ Palo Alto Networks Unit 42 ⋅ Anthony Kasza, Dominik Reichel
The Gamaredon Group Toolset Evolution
Pteranodon RMS Gamaredon Group

2017-02-27 ⋅ Symantec ⋅ A L Johnson
Shamoon: Multi-staged destructive attacks limited to specific targets
DistTrack MimiKatz Rocket Kitten

2017-02-27 ⋅ Sophos ⋅ Ted Heppner
Betabot: Configuration Data Extraction
BetaBot

2017-02-27 ⋅ Cylance ⋅ Jon Gross
The Deception Project: A New Japanese-Centric Threat
Snake Wine

2017-02-27 ⋅ Palo Alto Networks Unit 42 ⋅ Anthony Kasza, Dominik Reichel
The Gamaredon Group Toolset Evolution
Gamaredon Group

2017-02-27 ⋅ Benkow Lab ⋅ Benoît Ancel
Spambot safari #2 - Online Mail System
OnlinerSpambot

2017-02-27 ⋅ Threat Vector ⋅ Jon Gross
The Deception Project: A New Japanese-Centric Threat
ChChes Snake Wine

2017-02-27 ⋅ Palo Alto Networks Unit 42 ⋅ Anthony Kasza, Dominik Reichel
The Gamaredon Group Toolset Evolution
Pteranodon

2017-02-27 ⋅ Palo Alto Networks Unit 42 ⋅ Anthony Kasza, Dominik Reichel
The Gamaredon Group Toolset Evolution
Gamaredon Group

2017-02-27 ⋅ Malwarebytes ⋅ Malwarebytes Labs
New Neutrino Bot comes in a protective loader
Neutrino

2017-02-27 ⋅ Symantec ⋅ Symantec Security Response
Shamoon: Multi-staged destructive attacks limited to specific targets
Rocket Kitten

2017-02-26 ⋅ Arnaud Delmas
TreasureHunter : A POS Malware Case Study
TreasureHunter

2017-02-25 ⋅ Financial Security Institute ⋅ Kyoung-Ju Kwak (郭炅周)
Silent RIFLE: Response Against Advanced Threat
Ghost RAT

2017-02-24 ⋅ Some stuff about security.. Blog ⋅ Angel Alonso
Hunting Retefe with Splunk - some interesting points
Retefe

2017-02-24 ⋅ BitSight ⋅ Sofia Luis
Necurs Proxy Module With DDOS Features
Necurs

2017-02-23 ⋅ Cisco Talos ⋅ Paul Rascagnères, Warren Mercer
Korean MalDoc Drops Evil New Years Presents
Unidentified 013 (Korean)

2017-02-23 ⋅ ESET Research ⋅ Lukáš Štefanko
Released Android malware source code used to run a banking botnet
SpyBanker

2017-02-22 ⋅ Github (kai5263499) ⋅ kai5263499
Bella: A pure python, post-exploitation, data mining tool and remote administration tool for macOS.
Bella

2017-02-22 ⋅ PhishLabs ⋅ Raashid Bhat
Dissecting the Qadars Banking Trojan
Qadars