/vx/Malware Analysis/2014/

170 directories 0 files
Name Size Modified
Go up — —
2014-01-14 - The Icefog APT Hits US Targets With Java Backdoor/ —
2014-01-19 - Vietnamese Malware Gets Very Personal/ —
2014-01-21 - Digitally signed data-stealing malware targets Mac users in “undelivered courier item” attack/ —
2014-01-21 - RSA Incident Response/ —
2014-01-22 - Iran and Russia blamed for state-sponsored espionage/ —
2014-02-02 - U.S. Leads Multi-National Action Against “Gameover Zeus” Botnet and “Cryptolocker” Ransomware, Charges Botnet Administrator/ —
2014-02-03 - Needle in a haystack/ —
2014-02-06 - Исследуем Linux Botnet «BillGates»/ —
2014-02-10 - The Careto-Mask APT- Frequently Asked Questions/ —
2014-02-11 - APT Careto/ —
2014-02-13 - Operation SnowMan/ —
2014-02-14 - Analysis of DHS NCCIC Indicators/ —
2014-02-15 - Examining Your Very Own Sefnit Trojan/ —
2014-02-16 - Analysis of CoinThief-A -dropper-/ —
2014-02-17 - Hiding in plain sight- a story about a sneaky banking Trojan/ —
2014-02-19 - XtremeRAT- Nuisance or Threat-/ —
2014-02-20 - Mo’ Shells Mo’ Problems/ —
2014-02-20 - Operation GreedyWonk/ —
2014-02-21 - An In‑depth Analysis of Linux-Ebury/ —
2014-02-21 - CVE 2014-0322 Malware - Sakurel (Feb 21, 2014)/ —
2014-02-24 - The Art of Attribution Identifying and Pursuing your Cyber Adversaries/ —
2014-02-25 - The French Connection CVE-2014-0322/ —
2014-02-28 - Uroburos - highly complex espionage software with Russian roots/ —
2014-03-05 - Android RATs Branch out with Dendroid/ —
2014-03-06 - Dexter, Project Hook POS Malware Campaigns Persist/ —
2014-03-06 - The Siesta Campaign- A New Targeted Attack Awakens/ —
2014-03-07 - Uroburos – Deeper travel into kernel protection mitigation/ —
2014-03-12 - A Detailed Examination of the Siesta Campaign/ —
2014-03-12 - Agent.btz- a Source of Inspiration-/ —
2014-03-12 - The Siesta Campaign/ —
2014-03-12 - Uroburos the Snake Rootkit/ —
2014-03-18 - Operation Windigo – the vivisection of a large Linux server‑side credential‑stealing malware campaign/ —
2014-03-18 - Windigo Linux Analysis – Ebury and Cdorked/ —
2014-03-25 - Spear Phishing the News Cycle- APT Actors Leverage Interest in the Disappearance of Malaysian Flight MH 370/ —
2014-04-02 - Tofsee botnet/ —
2014-04-09 - BackDoor.Gootkit.112—a new multi-purpose backdoor/ —
2014-04-15 - Trojan banking/ —
2014-04-17 - A quick analysis of the latest Shadow Brokers dump/ —
2014-04-18 - TROJ64_WOWLIK.VT/ —
2014-04-21 - Hacking Team/ —
2014-04-27 - Analysis of the Predator Pain Keylogger/ —
2014-05-06 - Rovnix new “evolution”/ —
2014-05-13 - Cat Scratch Fever- CrowdStrike Tracks Newly Reported Iranian Actor as FLYING KITTEN/ —
2014-05-13 - Uroburos rootkit- Belgian Foreign Ministry stricken/ —
2014-05-15 - DDoS Trojans attack Linux/ —
2014-05-16 - APT Campaign Leverages the Cueisfry Trojan and Microsoft Word Vulnerability CVE-2014-1761/ —
2014-05-19 - 5 in China Army Face U.S. Charges of Cyberattacks/ —
2014-05-22 - Meet the Zberp Trojan/ —
2014-05-28 - Iranian Hackers Targeted US Officials/ —
2014-05-29 - Iranian hackers sucker punch U.S. defense officials with creative social-media scam/ —
2014-05-30 - Taking off the Blackshades/ —
2014-06-02 - Analysis of Uroburos, using WinDbg/ —
2014-06-02 - Molerats, Here for Spring!/ —
2014-06-02 - Sinowal banking trojan/ —
2014-06-04 - Introducing Antak - A webshell which utilizes powershell/ —
2014-06-09 - ZeuS.Maple Variant Targets Canadian Online Banking Customers/ —
2014-06-10 - Clandestine Fox, Part Deux/ —
2014-06-18 - Neutrino Bot (aka MS-Win32-Kasidet)/ —
2014-06-23 - Havex Hunts For ICS-SCADA Systems/ —
2014-07-02 - KIVARS With Venom- Targeted Attacks Upgrade with 64-bit “Support”/ —
2014-07-07 - Deep in Thought- Chinese Targeting of National Security Think Tanks/ —
2014-07-07 - Disect Android APKs like a Pro - Static code analysis/ —
2014-07-08 - Security Matters - Cyberespionage Campaign Hits Energy Companies/ —
2014-07-09 - BrutPOS- RDP Bruteforcing Botnet Targeting POS Systems/ —
2014-07-10 - Versatile DDoS Trojan for Linux/ —
2014-07-11 - The Eye of the Tiger/ —
2014-07-11 - The Father of Zeus- Kronos Malware Discovered/ —
2014-07-15 - Targeted Attacks on French Company Exploit Multiple Word Vulnerabilities/ —
2014-07-15 - Unit 42 Technical Analysis- Seaduke/ —
2014-07-16 - Mini Analysis of the TinyBanker Tinba/ —
2014-07-18 - Bird's nest/ —
2014-07-20 - Sayad (Flying Kitten) Infostealer/ —
2014-07-29 - Threat Group 3279 Targets the Video Game Industry/ —
2014-07-31 - Poweliks- the persistent malware without a file/ —
2014-07-31 - Spy of the Tiger/ —
2014-08-04 - New Release- Decrypting NetWire C2 Traffic/ —
2014-08-07 - Innaput Actors Utilize Remote Access Trojan Since 2016, Presumably Targeting Victim Files/ —
2014-08-07 - Malware Analysis of the Lurk Downloader/ —
2014-08-07 - Sophisticated 'Turla' hackers spying on European governments, say researchers/ —
2014-08-07 - The Epic Turla Operation/ —
2014-08-11 - mht, MS12-27 and malware .info/ —
2014-08-13 - A Look at Targeted Attacks/ —
2014-08-14 - Hunting the Mutex/ —
2014-08-18 - The Syrian Malware Evolving House of Cards/ —
2014-08-19 - APT Gang Branches Out to Medical Espionage in Community Health Breach/ —
2014-08-20 - “El Machete”/ —
2014-08-24 - Another country-sponsored #malware- Vietnam APT Campaign/ —
2014-08-24 - Another country-sponsored malware- Vietnam APT Campaign/ —
2014-08-27 - NetTraveler Gets a Makeover for 10th Anniversary/ —
2014-08-28 - BIFROSE Now More Evasive Through Tor, Used for Targeted Attack/ —
2014-08-28 - Scanbox- A Reconnaissance Framework Used with Watering Hole Attacks/ —
2014-08-29 - Connecting the Dots- Syrian Malware Team Uses BlackWorm for Attacks/ —
2014-08-29 - New BlackPOS Malware Emerges in the Wild, Targets Retail Accounts/ —
2014-08-29 - Sinkholing the Backoff POS Trojan/ —
2014-08-31 - Introduction to the ZeroLocker ransomware/ —
2014-09-03 - ALDIBOT/ —
2014-09-03 - Darwin’s Favorite APT Group/ —
2014-09-04 - PITOU- The -silent- resurrection of the notorious Srizbi kernel spambot/ —
2014-09-11 - TorrentLocker Ransomware Cracked and Decrypter has been made/ —
2014-09-19 - Malware microevolution/ —
2014-09-19 - Recent Watering Hole Attacks Attributed to APT Group “th3bug” Using Poison Ivy/ —
2014-09-21 - Reversing Tinba- World's smallest trojan-banker DGA Code/ —
2014-09-22 - Tinba Malware Reloaded and Attacking Banks Around the World/ —
2014-09-23 - Android malware based on SMS encryption and with KitKat support/ —
2014-09-23 - MALWARE-CNC Win.Trojan.Aytoke variant outbound connection/ —
2014-09-29 - MMD-0028-2014 - Linux-XOR.DDoS- Fuzzy reversing a new China ELF/ —
2014-10-02 - Occupy Central- The Umbrella Revolution and Chinese Intelligence/ —
2014-10-03 - New Indicators of Compromise for APT Group Nitro Uncovered/ —
2014-10-05 - Dissecting SmokeLoader (or Yulia's sweet ass proposition)/ —
2014-10-06 - Data Theft in Aisle 9- A FireEye Look at Threats to Retailers/ —
2014-10-14 - CrowdStrike Discovers Use of 64-bit Zero-Day Privilege Escalation Exploit (CVE-2014-4113) by Hurricane Panda/ —
2014-10-14 - CVE‑2014‑4114- Details on August BlackEnergy PowerPoint Campaigns/ —
2014-10-14 - Sandworm Windows zero-day vulnerability being actively exploited in targeted attacks/ —
2014-10-14 - Security vendors take action against Hidden Lynx malware/ —
2014-10-15 - Operation Windigo- “Good job, ESET!” says malware author/ —
2014-10-20 - OrcaRAT - A whale of a tale/ —
2014-10-22 - Operation Pawn Storm/ —
2014-10-27 - Full Disclosure of Havex Trojans/ —
2014-10-27 - ScanBox framework – who’s affected, and who’s using it-/ —
2014-10-30 - COM Object hijacking- the discreet way of persistence/ —
2014-11-03 - BE2 custom plugins, router abuse, and target profiles/ —
2014-11-10 - The Darkhotel APT/ —
2014-11-10 - Thoughts on Absolute Computrace/ —
2014-11-10 - Timeline of Sandworm Attacks/ —
2014-11-11 - The Uroburos case- new sophisticated RAT identified/ —
2014-11-12 - Korplug military targeted attacks- Afghanistan & Tajikistan/ —
2014-11-12 - Strela Stealer- Today’s invoice is tomorrow’s phish/ —
2014-11-13 - BASHLITE Affects Devices Running on BusyBox/ —
2014-11-13 - Chinese hackers 'breach Australian media organisations' ahead of G20/ —
2014-11-13 - Operation CloudyOmega/ —
2014-11-14 - OnionDuke- APT Attacks Via the Tor Network/ —
2014-11-14 - OnionDuke/ —
2014-11-15 - OnionDuke samples/ —
2014-11-19 - ROVNIX Infects Systems with Password-Protected Macros/ —
2014-11-20 - EvilBunny/ —
2014-11-21 - Operation Double Tap/ —
2014-11-21 - Operation DoubleTap/ —
2014-11-24 - I am Ironman- DEEP PANDA Uses Sakula Malware to Target Organizations in Multiple Sectors/ —
2014-11-24 - Regin- nation-state ownage of GSM networks/ —
2014-11-25 - Curious Korlia/ —
2014-11-25 - Regin APT Attacks Among the Most Sophisticated Ever Analyzed/ —
2014-11-26 - Getmypass Point of Sale Malware/ —
2014-11-26 - TR-23 Analysis - NetWiredRC malware/ —
2014-11-27 - New PoS Malware Kicks off Holiday Shopping Weekend/ —
2014-11-30 - W32-HiAsm.A!tr/ —
2014-12-02 - Operation Cleaver/ —
2014-12-05 - Trendlabs WIPALL/ —
2014-12-08 - The Hack of Sony Pictures- What We Know and What You Need to Know/ —
2014-12-08 - The ‘Penquin’ Turla/ —
2014-12-09 - Blue Coat Exposes “The Inception Framework”; Very Sophisticated, Layered Malware Attack Targeted at Military, Diplomats, and Bus/ —
2014-12-09 - Blue Coat Exposes “The Inception Framework”; Very Sophisticated, Layered Malware Attack Targeted at Military, Diplomats, and Business Execs/ —
2014-12-09 - Linux Modules Connected to Turla APT Discovered/ —
2014-12-10 - Cloud Atlas- RedOctober APT is back in style/ —
2014-12-10 - W32.Regin Stage 1/ —
2014-12-10 - W64.Regin Stage 1/ —
2014-12-11 - The Evolution of Point-of-Sale (PoS) Malware/ —
2014-12-12 - Vinself now with steganography/ —
2014-12-15 - Banatrix – an indepth look/ —
2014-12-16 - EvilBunny- Malware Instrumented By Lua/ —
2014-12-17 - Dyre Banking Trojan/ —
2014-12-17 - Wiper Malware - A Detection Deep Dive/ —
2014-12-18 - Alina POS malware 'sparks' off a new variant/ —
2014-12-18 - Chthonic- a new modification of ZeuS/ —
2014-12-18 - Malware Attack Targeting Syrian ISIS Critics/ —
2014-12-19 - Alert (TA14-353A)- Targeted Destructive Malware/ —
2014-12-19 - Alert (TA14-353A)/ —
2014-12-19 - The unrelenting evolution of Vawtrak/ —
2014-12-21 - Operation Poisoned Helmand/ —
2014-12-21 - The DGA of Ramnit/ —
2014-12-22 - Virlock- First Self‑Reproducing Ransomware is also a Shape Shifter/ —