Malpedia Library

2017-03-31 ⋅ Cisco Talos ⋅ Alexander Chiu
Threat Round-up for Mar 24 - Mar 31
win.wabot

2017-03-30 ⋅ Group-IB ⋅ Group-IB
Hi-Tech Crime Trends 2016

2017-03-30 ⋅ ClearSky ⋅ ClearSky Research Team
Jerusalem Post and other Israeli websites compromised by Iranian threat agent CopyKitten
CopyKittens

2017-03-30 ⋅ Artem Baranov
EquationDrug rootkit analysis (mstcp32.sys)
EquationDrug

2017-03-30 ⋅ Palo Alto Networks Unit 42 ⋅ Jen Miller-Osborn, Josh Grunzweig
Trochilus and New MoonWind RATs Used In Attack Against Thai Organizations
MoonWind

2017-03-30 ⋅ Palo Alto Networks Unit 42 ⋅ Jen Miller-Osborn, Josh Grunzweig
Trochilus and New MoonWind RATs Used In Attack Against Thai Organizations
APT9

2017-03-30 ⋅ ESET Research ⋅ ESET Research
Carbon Paper: Peering into Turla’s second stage backdoor
Cobra Carbon System Turla

2017-03-29 ⋅ Forcepoint ⋅ Roland Dela Paz
Trojanized Adobe installer used to install DragonOK’s new custom backdoor
KHRAT DragonOK

2017-03-29 ⋅ Imperva ⋅ Dima Bekerman
New Mirai Variant Launches 54 Hour DDoS Attack against US College
Mirai

2017-03-29 ⋅ Malwarebytes ⋅ Malwarebytes Labs
Explained: Sage ransomware
SAGE

2017-03-28 ⋅ Department of Justice ⋅ Office of Public Affairs
Russian Citizen Pleads Guilty for Involvement in Global Botnet Conspiracy
Ebury

2017-03-28 ⋅ SecurityIntelligence ⋅ Ilya Kolmanovich, Limor Kessem
The NukeBot Trojan, a Bruised Ego and a Surprising Source Code Leak
TinyNuke

2017-03-28 ⋅ Palo Alto Networks Unit 42 ⋅ Brandon Levene, Dominik Reichel, Esmid Idrizovic
Dimnie: Hiding in Plain Sight
Dimnie

2017-03-28 ⋅ Trend Micro ⋅ Gilbert Sison
Cerber Starts Evading Machine Learning
Cerber

2017-03-28 ⋅ Cylance ⋅ Cylance Threat Research Team
Threat Spotlight: GhostAdmin Malware
GhostAdmin

2017-03-27 ⋅ Twitter (@michalmalik) ⋅ Michal Malík
Tweet on Linux IRC Bot
Xaynnalc

2017-03-27 ⋅ Microsoft ⋅ Microsoft Defender ATP Research Team
Detecting and mitigating elevation-of-privilege exploit for CVE-2017-0005
APT31

2017-03-26 ⋅ Palo Alto Networks Unit 42 ⋅ Bryan Lee, Robert Falcone
Shamoon 2: Delivering Disttrack
DistTrack

2017-03-24 ⋅ Zerophage
Terror EK via Malvertising delivers Tofsee Spambot
Tofsee

2017-03-23 ⋅ FireEye ⋅ Christopher Truncer
WMImplant – A WMI Based Agentless Post-Exploitation RAT Developed in PowerShell
WMImplant