Malpedia Library

2026-07-13 ⋅ kienmanowar Blog ⋅ m4n0w4r, Tran Trung Kien
[QuickNote] SolidPDFCreator – Mustang Panda Stage-1 Backdoor (Target India)

2026-07-12 ⋅ OX Security ⋅ Moshe Siman Tov Bustan
Malware-Slop: Crypto Stealer Impersonating Polymarket Exposes Its Own Credentials
OtterCandy

2026-07-07 ⋅ Proofpoint ⋅ Greg Lesnewich, Mark Kelly, Proofpoint Threat Research Team
One Email Closer to the Edge: UNK_MassTraction & the Physics of Exploitation
IceCube

2026-07-07 ⋅ Cisco Talos ⋅ Asheer Malhotra, Brandon White, Jungsoo An, Vanja Svajcer
UAT-7810 continues building ORB networks using new malware
DOGLEASH LONGLEASH JARLEASH UAT-7810

2026-07-02 ⋅ Mrtiepolo ⋅ Gianluca Tiepolo
Operation Turb00 — Part 3: Unmasking the SnappyClient RAT
HijackLoader SnappyClient

2026-07-01 ⋅ sysdig ⋅ Michael Clark
JADEPUFFER: Agentic ransomware for automated database extortion
JadePuffer

2026-07-01 ⋅ Fortinet ⋅ Rachael Liao
Analysis of Ongoing Ousaban Attacks Targeting the Iberian Peninsula
Ousaban

2026-06-29 ⋅ Trend Micro ⋅ Yuya Sato
TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry
TonRAT

2026-06-29 ⋅ The DFIR Report ⋅ Ahmed Farouk, Angelo Violetti, Dino, Jake, Mattison Schuch, Renzon Cruz
From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira
Akira AdaptixC2 Akira BumbleBee

2026-06-26 ⋅ Censys ⋅ Martijn Grooten
UNC1151 Phishing Email Targeting Belarusian Politician Points to Multi-National Campaign

2026-06-26 ⋅ Censys ⋅ Aidan Holland
AsyncRAT Family Threat Overview
AsyncRAT BitRAT DCRat Quasar RAT Venom RAT

2026-06-25 ⋅ Google ⋅ Google Threat Intelligence Group
The Latest Addition to Turla’s Intelligence Gathering Apparatus
Kazuar

2026-06-25 ⋅ Netresec ⋅ Erik Hjelmvik
Ping32 RMM and ValleyRAT
ValleyRAT

2026-06-22 ⋅ JFrog Security ⋅ Yair Benamou
From PostCSS Masquerading to Windows RAT
PylangGhost

2026-06-21 ⋅ cocomelonc ⋅ cocomelonc
Malware analysis: part 9. AI-assisted deobfuscation: control flow flattening. Simple C example.

2026-06-21 ⋅ Infosec Writeups ⋅ Couch Potato
I found a malware hiding in my tailwindcss config file.

2026-06-19 ⋅ Elastic ⋅ Daniel Stepanic
Lost in relocation: analysis of a new loader distributing CASTLESTEALER
CASTLESTEALER

2026-06-18 ⋅ Daniel Stepanic, Jia Yu Chan
Lost in relocation: analysis of a new loader distributing CASTLESTEALER
oxloader

2026-06-18 ⋅ Politie NL ⋅ Politie NL
International law enforcement initiate hunt on malware group SocGholish
FAKEUPDATES

2026-06-17 ⋅ Orange CERT ⋅ Orange Cyberdefense
EmEditor Supply Chain Attack
Runster