Malpedia Library

Click here to download all references as Bib-File.

2022-01-15 ⋅ Microsoft ⋅ Microsoft, Microsoft Security Intelligence, Microsoft Digital Security Unit (DSU), Microsoft Detection and Response Team (DART), Microsoft 365 Defender Threat Intelligence Team
Destructive malware targeting Ukrainian organizations (DEV-0586)
WhisperGate

2022-01-12 ⋅ Netskope ⋅ Gustavo Palazolo
Abusing Microsoft Office Using Malicious Web Archive Files

2022-01-05 ⋅ Check Point ⋅ Golan Cohen
Can You Trust a File’s Digital Signature? New Zloader Campaign exploits Microsoft’s Signature Verification putting users at risk
Zloader

2021-12-09 ⋅ Microsoft ⋅ Microsoft 365 Defender Threat Intelligence Team
A closer look at Qakbot’s latest building blocks (and how to knock them down)
QakBot

2021-12-06 ⋅ Microsoft ⋅ Microsoft Threat Intelligence Center (MSTIC), Microsoft Digital Security Unit (DSU)
NICKEL targeting government organizations across Latin America and Europe
MimiKatz

2021-12-06 ⋅ Notice of Pleadings ⋅ Microsoft
Complaint filed by Microsoft against NICKEL/APT15
MimiKatz

2021-12-06 ⋅ Microsoft ⋅ Tom Burt
Protecting people from recent cyberattacks

2021-12-06 ⋅ Mandiant ⋅ Luke Jenkins, Sarah Hawley, Parnian Najafi, Doug Bienstock, Luis Rocha, Marius Fodoreanu, Mitchell Clarke, Manfred Erjak, Josh Madeley, Ashraf Abdalhalim, Juraj Sucik, Wojciech Ledzion, Gabriella Roncone, Jonathan Leathery, Ben Read, Microsoft Threat Intelligence Center (MSTIC), Microsoft Detection and Response Team (DART)
Suspected Russian Activity Targeting Government and Business Entities Around the Globe (UNC2452)
Cobalt Strike CryptBot

2021-12-02 ⋅ Microsoft ⋅ Microsoft Threat Experts
Structured threat hunting: One way Microsoft Threat Experts prioritizes customer defense

2021-11-24 ⋅ safebreach ⋅ Tomer Bar
New PowerShortShell Stealer Exploits Recent Microsoft MSHTML Vulnerability to Spy on Farsi Speakers
PowerShortShell

2021-11-18 ⋅ Microsoft ⋅ Microsoft Threat Intelligence Center (MSTIC), Microsoft Digital Security Unit (DSU)
Iranian targeting of IT sector on the rise
MimiKatz ShellClient RAT

2021-11-17 ⋅ Microsoft ⋅ Pete Bryan
Creating your first Microsoft Sentinel Notebook

2021-11-17 ⋅ CISA ⋅ FBI, CISA, Australian Cyber Security Centre (ACSC), NCSC UK
Alert (AA21-321A): Iranian Government-Sponsored APT Cyber Actors Exploiting Microsoft Exchange and Fortinet Vulnerabilities in Furtherance of Malicious Activities

2021-11-16 ⋅ Microsoft ⋅ Microsoft Threat Intelligence Center (MSTIC)
Evolving trends in Iranian threat actor activity – MSTIC presentation at CyberWarCon 2021

2021-11-11 ⋅ Microsoft ⋅ Microsoft 365 Defender Threat Intelligence Team
HTML smuggling surges: Highly evasive loader technique increasingly used in banking malware, targeted attacks
AsyncRAT Mekotio NjRAT

2021-11-10 ⋅ Microsoft ⋅ John Lambert
The hunt for NOBELIUM, the most sophisticated nation-state attack in history

2021-11-08 ⋅ Microsoft ⋅ Microsoft Threat Intelligence Center (MSTIC)
Threat actor DEV-0322 exploiting ZOHO ManageEngine ADSelfService Plus

2021-11-03 ⋅ Microsoft ⋅ Cristin Goodwin
Understanding Nation State Threats

2021-11-03 ⋅ Cisco Talos ⋅ Chetan Raghuprasad, Vanja Svajcer, Caitlin Huey
Microsoft Exchange vulnerabilities exploited once again for ransomware, this time with Babuk
Babuk CHINACHOPPER

2021-11-02 ⋅ Microsoft ⋅ Ashwin Patil
Hunting for potential network beaconing patterns using Apache Spark via Azure Synapse – Part 1