/vx/Malware Analysis/2012/

127 directories 0 files
Name Size Modified
Go up — —
2012-01-03 - The HeartBeat APT Campaign/ —
2012-01-04 - SpyEye Malware Borrows Zeus Trick to Mask Fraud/ —
2012-01-06 - Cracking Cold$eal 5.4.1 FWB++/ —
2012-01-06 - Cracking ColdSeal 5.4.1 FWB/ —
2012-01-08 - Cold$eal- 'Situation is under control'/ —
2012-01-12 - Blackhole Ramnit - samples and analysis/ —
2012-02-01 - TDL4 - Purple Haze (Pihar) Variant - sample and analysis/ —
2012-02-03 - Command and Control in the Fifth Domain/ —
2012-02-15 - Merchant of Fraud Returns- Shylock Polymorphic Financial Malware Infections on the Rise/ —
2012-02-29 - The Sin Digoo Affair/ —
2012-03-06 - Virus Ukash Gendarmerie Absence twexx32.dll/ —
2012-03-12 - Crouching Tiger, Hidden Dragon, Stolen Data/ —
2012-03-13 - DarkComet misses by a mile/ —
2012-03-16 - OSX-Imuler updated- still a threat on Mac OS X/ —
2012-03-26 - LUCKYCAT REDUX Inside an APT Campaign with Multiple Targets in India and Japan/ —
2012-03-26 - LuckyCat Redux/ —
2012-04-05 - China Hacked South Korea Over Missile Defense, U.S. Firm Says/ —
2012-04-05 - Darkshell DDOS Botnet Evolves With Variants/ —
2012-04-10 - Anatomy of Ghost RAT/ —
2012-04-10 - OSX-Flashback.O sample + some domains/ —
2012-04-10 - OSX-FlashbackO sample and some domains/ —
2012-04-12 - OSX-Flashback.K sample + Mac OS malware study set (30+ older samples)/ —
2012-04-12 - OSX-Flashback.K sample and Mac OS malware study set (over 30 older samples)/ —
2012-04-16 - Detailed Analysis Of Sykipot (Smartcard Proxy Variant)/ —
2012-04-16 - New Version of OSX.SabPub/ —
2012-04-18 - DarkMegi rootkit - sample (distributed via Blackhole)/ —
2012-04-20 - Analysis of DarkMegi aka NpcDark/ —
2012-04-23 - BKDR_CYSXL.A/ —
2012-05-18 - Analysis of Flamer C2 Server/ —
2012-05-22 - Ixeshe/ —
2012-05-28 - The Flame- Questions and Answers/ —
2012-05-31 - Flamer- A Recipe for Bluetoothache/ —
2012-05-31 - Skywiper - A complex malware for targeted attacks/ —
2012-06-04 - Small banking Trojan poses major risk/ —
2012-06-05 - Smartcard vulnerabilities in modern banking malware/ —
2012-06-06 - Tinba - Zusy - tiny banker trojan/ —
2012-06-09 - You dirty RAT! Part 1- DarkComet/ —
2012-06-15 - You Dirty RAT! Part 2 – BlackShades NET/ —
2012-06-21 - BlackShades in Syria/ —
2012-06-21 - RAT samples from Syrian Targeted attacks - Blackshades RAT, XTreme RAT, Dark Comet RAT used by Syrian Electronic Army/ —
2012-06-24 - Medre.A - AutoCAD worm samples/ —
2012-07-02 - Sykipot is back/ —
2012-07-10 - Recent Observations in Tibet-Related Information Operations/ —
2012-07-11 - How the Boy Next Door Accidentally Built a Syrian Spy Tool/ —
2012-07-13 - Rovnix bootkit framework updated/ —
2012-07-17 - Kaspersky Lab and Seculert Announce ‘Madi,’ a Newly Discovered Cyber-Espionage Campaign in the Middle East/ —
2012-07-17 - The Madi Attacks- Series of Social Engineering Campaigns/ —
2012-07-17 - The Madi Campaign – Part I/ —
2012-07-22 - Xtreme RAT analysis/ —
2012-07-24 - New Apple Mac Trojan Called OSX-Crisis Discovered/ —
2012-07-25 - FinFisher’s Spy Kit Exposed/ —
2012-07-26 - The Madi Campaign – Part II/ —
2012-07-27 - The Madi Infostealers/ —
2012-08-01 - Inside the ICE IX bot, descendent of Zeus/ —
2012-08-01 - “RunForestRun”, “gootkit” and random domain name generation/ —
2012-08-02 - Cridex Analysis using Volatility/ —
2012-08-09 - Gauss - Abnormal Distribution/ —
2012-08-10 - Gauss samples - Nation-state cyber-surveillance + Banking trojan/ —
2012-08-10 - Gauss samples - Nation-state cyber-surveillance and Banking trojan/ —
2012-08-13 - Syrian Electronic Army/ —
2012-08-16 - Inside Upas Kit (1.0.1.1) aka Rombrast C&C - Botnet Control Panel/ —
2012-08-16 - Shamoon the Wiper – Copycats at Work/ —
2012-08-16 - The Shamoon Attacks/ —
2012-08-17 - Shamoon or DistTrack.A samples/ —
2012-08-18 - The Taidoor Campaign/ —
2012-08-20 - Crisis for Windows Sneaks onto Virtual Machines/ —
2012-08-22 - The first Trojan in history to steal Linux and Mac OS X passwords/ —
2012-08-30 - Troj-Binanen-B/ —
2012-09-01 - URLZone reloaded- new evolution/ —
2012-09-06 - The Elderwood Project/ —
2012-09-07 - IEXPL0RE RAT/ —
2012-09-12 - The VOHO Campaign/ —
2012-09-18 - QassamCyberFighters's Pastebin/ —
2012-09-18 - The Mirage Campaign/ —
2012-09-19 - Blog Posts on Nitol/ —
2012-09-28 - Dissecting 'Operation Ababil' - an OSINT Analysis/ —
2012-10-02 - Blackhole Exploit Kit – Rise and Evolution/ —
2012-10-05 - Dark Comet 2- Electric Boogaloo/ —
2012-10-07 - Cracking New PseudoRandom (runforestrun) Infector/ —
2012-10-08 - Pest Control - Taming the Rats/ —
2012-10-09 - BKDR_SARHUST.A/ —
2012-10-09 - SASFIS/ —
2012-10-12 - New Multiplatform Backdoor Jacksbot Discovered/ —
2012-10-13 - WORM_EMUDBOT.JP/ —
2012-10-27 - Trojan.Taidoor/ —
2012-10-30 - JACKSBOT Has Some Dirty Tricks up Its Sleeves/ —
2012-10-31 - Cyber Espionage Against Georgian Government/ —
2012-11-01 - Recovering from Shamoon/ —
2012-11-01 - Tracking the 2012 Sasfis campaign/ —
2012-11-01 - Wicked Rose & NCPH Hacking Group/ —
2012-11-03 - Cyberattack against Israeli and Palestinian targets/ —
2012-11-05 - Citadel- a cyber-criminal’s ultimate weapon-/ —
2012-11-13 - New variant of Mac Trojan discovered, targeting Tibet/ —
2012-11-14 - Group Photos.zip OSX-Revir - OSX-iMuler samples March 2012-November 2012/ —
2012-11-16 - Malware Targeting Windows 8 Uses Google Docs/ —
2012-11-16 - Remote Administration Tool for Android devices/ —
2012-11-22 - W32.Narilam – Business Database Sabotage/ —
2012-11-25 - Parastoo Hacks IAEA/ —
2012-11-27 - Threat Description- Troj-Ployx-A/ —
2012-11-28 - Shylock’s New Trick- Evading Malware Researchers/ —
2012-11-29 - Inside view of Lyposit aka (for its friends) Lucky LOCKER/ —
2012-11-29 - What’s the Fuss with WORM_VOBFUS-/ —
2012-12-03 - Compromised library/ —
2012-12-03 - New Mac Malware Found on Dalai Lama Related Website/ —
2012-12-05 - OSX-Dockster.A and Win32-Trojan.Agent.AXMO Samples, pcaps, OSX malware analysis tools/ —
2012-12-05 - The path to infection - Eye glance at the first line of -Russian Underground- - focused on Ransomware/ —
2012-12-06 - Nov 2012 - W32.Narilam Sample/ —
2012-12-07 - Aug 2012 Backdoor.Wirenet - OSX and Linux/ —
2012-12-07 - Aug 2012 W32.Crisis and OSX.Crisis - JAR file Samples - APT/ —
2012-12-07 - Nov 2012 - Backdoor.W32.Makadocs Sample/ —
2012-12-07 - Nov 2012 Worm Vobfus Samples/ —
2012-12-12 - Analysis of VirTool-WinNT-Exforel.A rootkit/ —
2012-12-12 - Unpacking Dexter POS -Memory Dump Parsing- Malware/ —
2012-12-13 - The Dexter Malware- Getting Your Hands Dirty/ —
2012-12-15 - Disclosure of another 0day malware - Analysis of 2nd Dropper and 3rd Dropper (Part 2)/ —
2012-12-15 - Disclosure of another 0day malware - Initial Dropper and Downloader (Part 1)/ —
2012-12-17 - Sample for Sanny - Win32.Daws in CVE-2012-0158 -ACEAN Regional Security Forum- targeting Russian companies/ —
2012-12-18 - Malicious Apache module used for content injection- Linux-Chapro.A/ —
2012-12-19 - Win32-Spy.Ranbyus modifying Java code in RBS Ukraine systems/ —
2012-12-20 - Trojan.Stabuniq Found on Financial Institution Servers/ —
2012-12-21 - Infostealer Dexter Targets Checkout Systems/ —
2012-12-23 - Dec 2012 Dexter - POS Infostealer samples and information/ —
2012-12-24 - Dec 2012 Linux.Chapro - trojan Apache iframer/ —
2012-12-24 - Dec. 2012 Trojan.Stabuniq samples - financial infostealer trojan/ —
2012-12-26 - ZeroAccess - Sirefef Rootkit - 5 fresh samples/ —
2012-12-27 - Nitol botnet/ —
2012-12-29 - Attack and IE 0day Informations Used Against Council on Foreign Relations/ —