Malpedia Library

2013-06-03 ⋅ Trustwave ⋅ Josh Grunzweig
Alina: Following The Shadow Part 2
Alina POS

2013-06-01 ⋅ CrowdStrike ⋅ Crowdstrike Global intelliGenCe team
DEEP PANDA
APT19

2013-05-30 ⋅ CIRCL ⋅ CIRCL
Analysis of a stage 3 Miniduke sample
MiniDuke

2013-05-29 ⋅ Symantec ⋅ Lionel Payet
South Korean Financial Companies Targeted by Castov
Lazarus Group

2013-05-29 ⋅ CIRCL ⋅ CIRCL
Malware analysis report of a Backdoor.Snifula variant
Snifula

2013-05-28 ⋅ Symantec ⋅ Lionel Payet
South Korean Financial Companies Targeted by Castov
Lazarus Group

2013-05-22 ⋅ F-Secure Labs ⋅ Sean
Mac Spyware: OSX/KitM (Kumar in the Mac)
Kitmos

2013-05-21 ⋅ Malware Don't Need Coffee ⋅ Kafeine
Unveiling the Locker Bomba (aka Lucky Locker v0.6 aka Lyposit/Adneukine)
Lyposit

2013-05-21 ⋅ Kleissner & Associates ⋅ Peter Kleissner
News on MultiBanker, features now a jabber p2p functionality
Banjori

2013-05-20 ⋅ Trend Micro ⋅ Kyle Wilhoit, Nart Villeneuve
Safe - A Targeted Threat
SafeNet

2013-05-20 ⋅ Avast ⋅ Threat Intelligence Team
Lockscreen Win32:Lyposit displayed as a fake MacOs app
Lyposit

2013-05-20 ⋅ FireEye ⋅ Ned Moran
Ready for Summer: The Sunshop Campaign
9002 RAT

2013-05-17 ⋅ Trustwave ⋅ Josh Grunzweig
Alina: Following The Shadow Part 1
Alina POS

2013-05-08 ⋅ SpiderLabs Blog ⋅ Josh Grunzweig
Alina: Casting a Shadow on POS
Alina POS

2013-05-03 ⋅ CrowdStrike ⋅ Matt Dahl
Department of Labor Strategic Web Compromise
APT19

2013-05-02 ⋅ ESET Research ⋅ Stephen Cobb
The stealthiness of Linux/Cdorked: a clarification
CDorked

2013-05-01 ⋅ Norman Shark ⋅ Jonathan Camp, Morten Kråkvik, Ned Moran, Snorre Fagerland
Operation Hangover
Smackdown

2013-05-01 ⋅ Cisco ⋅ Mary Landesman
Linux/CDorked FAQs
CDorked

2013-04-30 ⋅ Symantec ⋅ Joseph Bingham, Kaoru Hayashi, Takayoshi Nakayama
Linux.Cdorked
CDorked

2013-04-26 ⋅ ESET Research ⋅ Pierre-Marc Bureau
Linux/Cdorked.A: New Apache backdoor being used in the wild to serve Blackhole
CDorked