Malpedia Library

2018-03-01 ⋅ Microsoft ⋅ Microsoft Defender ATP Research Team, Office 365 Threat Research Team
FinFisher exposed: A researcher’s tale of defeating traps, tricks, and complex virtual machines
FinFisher RAT

2018-02-27 ⋅ ThreatVector ⋅ Cylance Threat Research Team
Threat Spotlight: Inside UDPoS Malware

2018-02-27 ⋅ VMWare Carbon Black ⋅ Jared Myers
Threat Analysis: ROKRAT Malware
RokRAT

2018-02-21 ⋅ Avast ⋅ Threat Intelligence Team
Avast tracks down Tempting Cedar Spyware
TemptingCedar Spyware

2018-02-15 ⋅ Secureworks ⋅ Counter Threat Unit ResearchTeam
SamSam Ransomware Campaigns
MimiKatz reGeorg SamSam BOSS SPIDER

2018-02-15 ⋅ Secureworks ⋅ Counter Threat Unit ResearchTeam
SamSam: Converting Opportunity into Profit
SamSam BOSS SPIDER

2018-02-07 ⋅ Cylance ⋅ Threat Research Team
Threat Spotlight: URSNIF Infostealer Malware
ISFB

2018-02-03 ⋅ FireEye ⋅ FireEye
Attacks Leveraging Adobe Zero-Day (CVE-2018-4878) – Threat Attribution, Attack Scenario and Recommendations
TEMP.Hermit

2018-01-16 ⋅ Cylance ⋅ Cylance Threat Research Team
Threat Spotlight: LockPOS Point of Sale Malware
LockPOS

2018-01-04 ⋅ Carnegie Endowment for International Peace ⋅ Collin Anderson, Karim Sadjapour
Iran’s Cyber Ecosystem: Who Are the Threat Actors?
Magic Kitten

2018-01-01 ⋅ RiskIQ ⋅ Brandon Dixon
Alphathreat Soup Burning Actors with Data

2018-01-01 ⋅ FireEye ⋅ FireEye
The Forrester New Wave™: External Threat Intelligence Services, Q3 2018.
APT1

2018-01-01 ⋅ CrowdStrike ⋅ CrowdStrike
2018 Global Threat Report
Mangzamel BAMBOO SPIDER HOUND SPIDER ZOMBIE SPIDER

2017-12-19 ⋅ Trend Micro ⋅ Mobile Threat Response Team
Cyberespionage Campaign Sphinx Goes Mobile With AnubisSpy
AnubisSpy

2017-12-09 ⋅ BlueHat Security Conference ⋅ Billy Leonard, Google Threat Analysis Group
10 Years of Targeted Credential Phishing

2017-12-07 ⋅ FireEye ⋅ Jacqueline O’Leary, Manish Sardiwal, Nalani Fraser, Nick Richard, Vincent Cannon, Yogesh Londhe
New Targeted Attack in the Middle East by APT34, a Suspected Iranian Threat Group, Using CVE-2017-11882 Exploit
OilRig

2017-12-01 ⋅ FireEye ⋅ FireEye
Advanced Persistent Threat Groups
APT5

2017-11-07 ⋅ ThreatVector ⋅ Cylance Threat Research Team
Locky Ransomware
Locky

2017-10-27 ⋅ Palo Alto Networks Unit 42 ⋅ Unit42
Tracking Subaat: Targeted Phishing Attack Leads to Threat Actor’s Repository
The Gorgon Group

2017-10-27 ⋅ Palo Alto Networks Unit 42 ⋅ Unit 42
Tracking Subaat: Targeted Phishing Attack Leads to Threat Actor’s Repository