Malpedia Library

2021-04-02 ⋅ Kaspersky ⋅ AMR
Browser lockers: extortion disguised as a fine

2021-03-18 ⋅ Kaspersky Labs ⋅ Ilya Mogilin, Mikhail Kuzin
Convuster: macOS adware now in Rust

2021-03-12 ⋅ Kaspersky Labs ⋅ Ilya Mogilin
Good old malware for the new Apple Silicon platform
XCSSET

2021-03-03 ⋅ ⋅ Kaspersky Labs ⋅ Sergey Golovanov
New targeted RTM attacks

2021-02-25 ⋅ Kaspersky Labs ⋅ Seongsu Park, Vyacheslav Kopeytsev
Lazarus targets defense industry with ThreatNeedle
HTTP(S) uploader LPEClient Volgmer

2021-01-26 ⋅ Kaspersky Labs ⋅ Kaspersky Lab ICS CERT
SunBurst industrial victims
SUNBURST

2021-01-11 ⋅ Kaspersky Labs ⋅ Costin Raiu, Georgy Kucherin, Igor Kuznetsov
Sunburst backdoor – code overlaps with Kazuar
Kazuar SUNBURST

2020-12-23 ⋅ Kaspersky Labs ⋅ Seongsu Park
Lazarus covets COVID-19-related intelligence
BookCodes RAT wAgentTea

2020-12-18 ⋅ Kaspersky Labs ⋅ Costin Raiu, Igor Kuznetsov
Sunburst: connecting the dots in the DNS requests
SUNBURST

2020-12-04 ⋅ Kaspersky Labs ⋅ Oleg Kupreev
The chronicles of Emotet
Emotet

2020-12-03 ⋅ Kaspersky ⋅ GReAT
APT annual review: What the world’s threat actors got up to in 2020
TwoSail Junk

2020-12-03 ⋅ Kaspersky Labs ⋅ Pierre Delcher
What did DeathStalker hide between two ferns?
PowerPepper Evilnum

2020-12-01 ⋅ Kaspersky Labs ⋅ Dmitry Galov, Leonid Bezvershenko, Vladislav Tushkanov
Dox, steal, reveal. Where does your personal data end up?

2020-11-11 ⋅ Kaspersky Labs ⋅ Dmitry Bestuzhev, Fedor Sinitsyn
Targeted ransomware: it’s not just about encrypting your data! Part 1 - “Old and New Friends”
Egregor Maze RagnarLocker

2020-11-09 ⋅ Kaspersky Labs ⋅ GReAT
Ghimob: a Tétrade threat actor moves to infect mobile devices
Ghimob

2020-11-06 ⋅ Kaspersky Labs ⋅ Fedor Sinitsyn, Vladimir Kuskov
RansomEXX Trojan attacks Linux systems
RansomEXX RansomEXX

2020-11-05 ⋅ Kaspersky Labs ⋅ Kaspersky Lab ICS CERT, Vyacheslav Kopeytsev
Attackson industrial enterprises using RMS and TeamViewer: new data
RMS