Malpedia Library

2026-07-07 ⋅ Cisco Talos ⋅ Asheer Malhotra, Brandon White, Jungsoo An, Vanja Svajcer
UAT-7810 continues building ORB networks using new malware
DOGLEASH LONGLEASH JARLEASH UAT-7810

2026-07-02 ⋅ Mrtiepolo ⋅ Gianluca Tiepolo
Operation Turb00 — Part 3: Unmasking the SnappyClient RAT
HijackLoader SnappyClient

2026-07-02 ⋅ FBI ⋅ FBI
Cyber Criminal Group TeamPCP
Shai-Hulud TeamPCP

2026-07-01 ⋅ sysdig ⋅ Michael Clark
JADEPUFFER: Agentic ransomware for automated database extortion
JadePuffer

2026-07-01 ⋅ Fortinet ⋅ Rachael Liao
Analysis of Ongoing Ousaban Attacks Targeting the Iberian Peninsula
Ousaban

2026-07-01 ⋅ Socket ⋅ Karlo Zanki
PolinRider: North Korea-Linked Supply Chain Campaign Expands Across Open Source Ecosystems
JADESNOW

2026-06-30 ⋅ JFrog Security ⋅ Yair Benamou
Lazarus-Linked npm Malware Masquerades as Rollup Polyfills
OtterCookie

2026-06-29 ⋅ Trend Micro ⋅ Yuya Sato
TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry
TonRAT

2026-06-29 ⋅ The DFIR Report ⋅ Ahmed Farouk, Angelo Violetti, Dino, Jake, Mattison Schuch, Renzon Cruz
From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira
Akira AdaptixC2 Akira BumbleBee

2026-06-29 ⋅ BlackPoint ⋅ Nevan Beal, Sam Decker
A Djinn in the Machine: TaskWeaver’s Node.js Intrusion Chain

2026-06-28 ⋅ Acronis ⋅ Santiago Pontiroli, Subhajeet Singha
Mustang Panda targets India's government and energy sectors with ZOHOMURK and MINIRECON
MINIRECON ZOHOMURK

2026-06-26 ⋅ Censys ⋅ Martijn Grooten
UNC1151 Phishing Email Targeting Belarusian Politician Points to Multi-National Campaign

2026-06-26 ⋅ Censys ⋅ Aidan Holland
AsyncRAT Family Threat Overview
AsyncRAT BitRAT DCRat Quasar RAT Venom RAT

2026-06-25 ⋅ Google ⋅ Google Threat Intelligence Group
The Latest Addition to Turla’s Intelligence Gathering Apparatus
Kazuar

2026-06-25 ⋅ ESET Research ⋅ Zoltán Rusnák
Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances
Pteranodon

2026-06-25 ⋅ Netresec ⋅ Erik Hjelmvik
Ping32 RMM and ValleyRAT
ValleyRAT

2026-06-25 ⋅ Palo Alto Networks Unit 42 ⋅ Unit 42
CL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure
JuicyPotato MimiKatz UAT-7237

2026-06-25 ⋅ Microsoft Security ⋅ Microsoft Defender Experts, Microsoft Defender Security Research Team, Parth Jomadkar
Photo ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access
TonRAT

2026-06-24 ⋅ Github (yankywilson) ⋅ yankywilson
JDY Botnet - Defensive Analysis
KV

2026-06-24 ⋅ BitSight ⋅ Bitsight TRACE
Amadey and StealC: Malware-as-a-Service Unavailable
Amadey Stealc