Malpedia Library

2017-03-22 ⋅ Trend Micro ⋅ Cedric Pernet
Winnti Abuses GitHub for C&C Communications
Winnti

2017-03-21 ⋅ Wired ⋅ Chad Hagen, Garrett M. Graff
Inside the Hunt for Russia’s Most Notorious Hacker
Gameover P2P Murofet Zeus

2017-03-21 ⋅ DomainTools ⋅ DomainTools
Hunt Case Study: Hunting Campaign Indicators on Privacy Protected Attack Infrastructure
CopyKittens

2017-03-21 ⋅ Wired ⋅ Garrett M. Graff
Inside the Hunt for Russia's Most Notorious Hacker
Gameover P2P

2017-03-20 ⋅ Cisco Talos ⋅ Earl Carter, Edmund Brumaghin, Jaeson Schultz, Sean Baird
Necurs Diversifies Its Portfolio
Necurs

2017-03-17 ⋅ Fortinet ⋅ David Wang, He Xu
Grabbot is Back to Nab Your Data
GrabBot

2017-03-17 ⋅ Malwarebytes ⋅ Malwarebytes Labs
Diamond Fox – part 1: introduction and unpacking
DiamondFox

2017-03-17 ⋅ Twitter (PhysicalDrive0) ⋅ PhysicalDrive0
Tweet on hash for Nexus Keylogger
NexusLogger

2017-03-16 ⋅ NJCCIC ⋅ NJCCIC
MajikPOS
MajikPos

2017-03-16 ⋅ Threatpost ⋅ Michael Mimoso
Fileless Malware Campaigns Tied to Same Attacker
FIN7

2017-03-15 ⋅ Trend Micro ⋅ Trend Micro Cyber Safety Solutions Team
MajikPOS Combines PoS Malware and RATs to Pull Off its Malicious Tricks
MajikPos

2017-03-15 ⋅ Fortinet ⋅ Axelle Apvrille
Teardown of Android/Ztorg (Part 2)
Ztorg

2017-03-15 ⋅ Palo Alto Networks Unit 42 ⋅ Josh Grunzweig
NexusLogger: A New Cloud-based Keylogger Enters the Market
NexusLogger

2017-03-15 ⋅ Bleeping Computer ⋅ Lawrence Abrams
Revenge Ransomware, a CryptoMix Variant, Being Distributed by RIG Exploit Kit
CryptoShield

2017-03-15 ⋅ Fortinet ⋅ Axelle Apvrille
Teardown of a Recent Variant of Android/Ztorg (Part 1)
Ztorg

2017-03-15 ⋅ Github (MinervaLabsResearch) ⋅ Minerva Labs
Vaccinating against Spora ransomware: a proof-of-concept tool by Minerva
Spora

2017-03-14 ⋅ FireEye ⋅ FireEye
M-Trend 2017: A View From the Front Lines
DistTrack Powersniff FIN8

2017-03-14 ⋅ ClearSky ⋅ ClearSky Research Team
Operation Electric Powder – Who is targeting Israel Electric Company?
Molerat Loader

2017-03-14 ⋅ Arnaud Delmas ⋅ Arnaud Delmas
Analyzing and Deobfuscating FlokiBot Banking Trojan
FlokiBot

2017-03-14 ⋅ Broad Analysis ⋅ Broad Analysis
Rig Exploit Kit via the EiTest delivers CryptoShield/REVENGE ransomware
CryptoShield