/vx/Malware Analysis/2016/

480 directories 0 files
Name Size Modified
Go up — —
2016-01-01 - Die erste Ransomware in JavaScript- Ransom32/ —
2016-01-03 - BlackEnergy by the SSHBearDoor - attacks against Ukrainian news media and electric industry/ —
2016-01-07 - Operation DustySky/ —
2016-01-07 - Rigging Compromise Exploit Kit_Rigging Compromise_Rigging Compromise/ —
2016-01-09 - Confirmation of a Coordinated Attack on the Ukrainian Power Grid/ —
2016-01-12 - The Magnificent FIN7- Revealing a Cybercriminal Threat Group/ —
2016-01-12 - Trochilus RAT Evades Antivirus Detection, Used for Cyber-Espionage in South-East Asia/ —
2016-01-13 - Russian group behind 2013 Foreign Ministry hack/ —
2016-01-14 - Cisco HayStack/ —
2016-01-14 - Waterbug Attack Group/ —
2016-01-18 - Updated Blackmoon banking Trojan stays focused on South Korean banking customers/ —
2016-01-19 - APT 2015/ —
2016-01-21 - Android Spywaller- Firewall-Style Antivirus Blocking/ —
2016-01-21 - NetTraveler Spear Phishing Email Targets Diplomat of Uzbekistan/ —
2016-01-21 - NetTraveler Spear-Phishing Email Targets Diplomat of Uzbekistan/ —
2016-01-22 - CVE-2015-4400 - Backdoorbot, Network Configuration Leak on a Connected Doorbell/ —
2016-01-22 - New Attacks Linked to C0d0so0 Group/ —
2016-01-22 - PlugX APT Malware/ —
2016-01-22 - Sykipot APT Malware/ —
2016-01-22 - The Impact of Dragonfly Malware on Industrial Control Systems/ —
2016-01-23 - Imminent Monitor 4 RAT Analysis – A Glance/ —
2016-01-24 - Scarlet Mimic- Years-Long Espionage Campaign Targets Minority Activists/ —
2016-01-24 - Scarlet Minic/ —
2016-01-25 - Hidden Tear Ransomware Developer Blackmailed by Malware Developers using his Code/ —
2016-01-26 - Analyzing a New Variant of BlackEnergy 3/ —
2016-01-26 - URLZone Zones in on Japan/ —
2016-01-27 - Hi-Zor RAT and Dissecting the Malware Involved in the INOCNATION Campaign/ —
2016-01-27 - Introducing Hi-Zor RAT/ —
2016-01-28 - BlackEnergy APT Attacks in Ukraine employ spearphishing with Word documents/ —
2016-01-28 - BlackEnergy APT Attacks in Ukraine/ —
2016-01-28 - CenterPOS- An Evolving POS Threat/ —
2016-01-28 - Keybase/ —
2016-01-29 - From Linux to Windows – New Family of Cross-Platform Desktop Backdoors Discovered/ —
2016-01-29 - Malicious Office Files Dropping Kasidet And Dridex/ —
2016-01-29 - Tinbapore Attack/ —
2016-01-29 - VB2015 paper- It's A File Infector... It’s Ransomware... It's Virlock/ —
2016-02-01 - Massive Admedia Adverting iFrame Infection/ —
2016-02-01 - Organized Cybercrime Big in Japan URLZone Now on the Scene/ —
2016-02-02 - DMA Locker- New Ransomware, But No Reason To Panic/ —
2016-02-02 - Vipasana ransomware new ransom on the block/ —
2016-02-03 - Emissary Trojan Changelog- Did Operation Lotus Blossom Cause It to Evolve-/ —
2016-02-03 - Emissary Trojan Changelog/ —
2016-02-04 - T9000 - Advanced Modular Backdoor/ —
2016-02-05 - Vawtrak and UrlZone Banking Trojans Target Japan/ —
2016-02-08 - APT-style bank robberies increase with Metel, GCMAN and Carbanak 2.0 attacks/ —
2016-02-08 - Know Your Enemies 2.0/ —
2016-02-09 - Bedep Lurking in Angler's Shadows/ —
2016-02-09 - Chinese Cyberspies Pivot To Russia In Wake Of Obama-Xi Pact/ —
2016-02-09 - DMA Locker Strikes Back/ —
2016-02-09 - Poseidon Group- a Targeted Attack Boutique specializing in global cyber-espionage/ —
2016-02-09 - Poseidon’s APT Boutique/ —
2016-02-11 - India Pakistan Cyber Rivalry/ —
2016-02-12 - A Look Into Fysbis- Sofacy’s Linux Backdoor/ —
2016-02-12 - Fysbis Sofacy Linux Backdoor/ —
2016-02-12 - Security Alert- Mazar BOT – the Android Malware That Can Erase Your Phone/ —
2016-02-14 - PadCrypt The first ransomware with Live Support Chat and an Uninstaller/ —
2016-02-17 - OceanLotus for OS X – an Application Bundle Pretending to be an Adobe Flash Update/ —
2016-02-17 - Russian Police Prevented Massive Banking Sector Cyber Attack/ —
2016-02-18 - New Android Trojan “Xbot” Phishes Credit Cards and Bank Accounts, Encrypts Devices for Ransom/ —
2016-02-19 - Citadel 0.0.1.1 (Atmos)/ —
2016-02-21 - Phorpiex - An IRC worm/ —
2016-02-21 - Source code for powerful Android banking malware is leaked/ —
2016-02-22 - Russian bank employees received fake job offers in targeted email attack/ —
2016-02-23 - Operation Dust Storm Attack Timeline/ —
2016-02-24 - Operation Blockbuster Coalition Ties Destructive Attacks to Lazarus Group/ —
2016-02-24 - Operation Blockbuster Destructive Malware Report/ —
2016-02-24 - The DGA of Qakbot.T/ —
2016-02-25 - KeyBase Threat Grows Despite Public Takedown- A Picture is Worth a Thousand Words/ —
2016-02-26 - Nymaim Moves Past Its Ransomware Roots - What Is Old Is New Again/ —
2016-02-29 - New Malware ‘Rover’ Targets Indian Ambassador to Afghanistan/ —
2016-02-29 - The Turbo Campaign, Featuring Derusbi/ —
2016-02-29 - The “HawkEye” attack- how cybercrooks target small businesses for big money/ —
2016-03-01 - Look Into Locky Ransomware/ —
2016-03-01 - Opeartion Transparent Tribe/ —
2016-03-01 - Shrouded Crossbow Creators Behind BIFROSE for UNIX/ —
2016-03-01 - Taiwan Presidential Election- A Case Study on Thematic Targeting/ —
2016-03-02 - New self‑protecting USB trojan able to avoid detection/ —
2016-03-03 - Attack on Zygote- a new twist in the evolution of mobile threats/ —
2016-03-03 - Shedding Light on BlackEnergy With Open Source Intelligence/ —
2016-03-04 - Tracing the Lineage of DarkSeoul/ —
2016-03-06 - Network detector for Winnti malware/ —
2016-03-06 - New OS X Ransomware KeRanger Infected Transmission BitTorrent Client Installer/ —
2016-03-07 - RedHat Hacker.asp/ —
2016-03-08 - Operation OnionDog/ —
2016-03-09 - Korean Energy and Transportation Targets Attacked by OnionDog APT/ —
2016-03-09 - Matryoshka Mining/ —
2016-03-10 - Death Comes Calling- Thanatos-Alphabot Trojan Hits the Market/ —
2016-03-10 - Tracking changes in years-long espionage campaign against Tibetans/ —
2016-03-11 - Cerber ransomware- new, but mature/ —
2016-03-11 - Gaudox - HTTP Bot (1.1.0.1) - C++-ASM - Ring3 Rootkit - Watchdog - Antis/ —
2016-03-11 - Gaudox - HTTP Bot (1.1.0.1) - CPlusPlus ASM - Ring3 Rootkit - Watchdog - Antis/ —
2016-03-11 - PowerSniff Malware Used in Macro-based Attacks/ —
2016-03-14 - Carbanak Group Targets Executives of Financial Organizations in the Middle East/ —
2016-03-14 - Digital Quartermaster Scenario Demonstrated in Attacks Against the Mongolian Government/ —
2016-03-14 - Massive Malvertising Campaign in US Leads to Angler Exploit Kit-BEDEP/ —
2016-03-15 - Suckfly - Revealing the secret life of your code signing certificates/ —
2016-03-15 - Suckfly- Revealing the secret life of your code signing certificates/ —
2016-03-17 - Taiwan Presidential Election - A Case Study on Thematic Targeting/ —
2016-03-18 - Analysis of the Cyber Attack on the Ukrainian Power Grid/ —
2016-03-18 - Teslacrypt Spam Campaign- “Unpaid Issue…”/ —
2016-03-18 - Xor DDoS/ —
2016-03-20 - Hidden Tear Project- Forbidden Fruit Is the Sweetest/ —
2016-03-21 - OS X Malware Samples Analyzed/ —
2016-03-23 - Gozi ISFB Sourceccode/ —
2016-03-23 - New self‑protecting USB trojan able to avoid detection/ —
2016-03-23 - Operation C - Major Information/ —
2016-03-23 - SamSam- The Doctor Will See You, After He Pays The Ransom/ —
2016-03-24 - Maktub Locker – Beautiful And Dangerous/ —
2016-03-25 - ProjectM - Link Found Between Pakistani Actor and Operation Transparent Tribe/ —
2016-03-25 - ProjectM- Link Found Between Pakistani Actor and Operation Transparent Tribe/ —
2016-03-29 - Taiwan targeted with new cyberespionage back doorTrojan/ —
2016-03-30 - Ransomware Deployed by Adversary with Established Foothold/ —
2016-03-31 - Stored XSS Vulnerabilites on Foscam/ —
2016-03-31 - The evolution of Brazilian Malware/ —
2016-04-01 - Petya – Taking Ransomware To The Low Level/ —
2016-04-05 - SCADA Security Report 2016/ —
2016-04-06 - Andromeda under the microscope/ —
2016-04-06 - Bootkit's development overview and trend (X)/ —
2016-04-06 - Locky Ransomware Is Becoming More Sophisticated - Cybercriminals Continue Email Campaign Innovation/ —
2016-04-07 - FBI Quietly Admits to Multi-Year APT Attack, Sensitive Data Stolen/ —
2016-04-08 - CryptoHost Decrypted Locks files in a password protected RAR File/ —
2016-04-11 - Manamecrypt – a ransomware that takes a different route/ —
2016-04-12 - Targeted attacks in South and Southeast Asia/ —
2016-04-13 - Ghosts in the Endpoint/ —
2016-04-14 - Bedep has raised its game vs Bot Zombies/ —
2016-04-14 - Meet GozNym- The Banking Malware Offspring of Gozi ISFB and Nymaim/ —
2016-04-14 - Targeted Ransomware Activity/ —
2016-04-15 - Pandas & Bears/ —
2016-04-16 - Ever Present Persistence - Established Footholds Seen in the Wild/ —
2016-04-18 - Between Hong Kong and Burma Tracking UP007 and SLServer Espionage Campaigns/ —
2016-04-19 - MULTIGRAIN – Point of Sale Attackers Make an Unhealthy Addition to the Pantry/ —
2016-04-19 - Trojan.GodzillaLoader (alias Godzilla Loader)/ —
2016-04-19 - Your Package Has Been Successfully Encrypted- TeslaCrypt 4.1A and the Malware Attack Chain/ —
2016-04-21 - New Poison Ivy RAT Variant/ —
2016-04-21 - PoS Attacks Net Crooks 20 Million Stolen Bank Cards/ —
2016-04-21 - Teaching an Old RAT New Tricks/ —
2016-04-21 - When entropy meets Shannon/ —
2016-04-22 - New Poison Ivy RAT Variant Targets Hong Kong Pro-Democracy Activists/ —
2016-04-22 - Tater- A PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit/ —
2016-04-22 - The Ghost Dragon/ —
2016-04-25 - Attackers Behind GozNym Trojan Set Sights on Europe/ —
2016-04-26 - Cyberwarfare - Iran Opens A New Front/ —
2016-04-26 - Digging deep for PLATINUM/ —
2016-04-26 - New Poison Ivy Activity Targeting Myanmar, Asian Countries/ —
2016-04-27 - Freezer Paper around Free Meat (Repackaging Open Source BeEF for Tracking and More)/ —
2016-04-27 - Freezer Paper around Free Meat/ —
2016-04-27 - Repackaging Open Source BeEf for Tracking and More/ —
2016-04-28 - Research Spotlight- The Resurgence of Qbot/ —
2016-04-28 - Tick cyberespionage group zeros in on Japan/ —
2016-05-02 - Goznym Malware/ —
2016-05-02 - Prince of Persia Hashes/ —
2016-05-02 - Prince of Persia Infy Malware/ —
2016-05-02 - Prince of Persia- Infy Malware Active In Decade of Targeted Attacks/ —
2016-05-03 - A Universal Windows Bootkit/ —
2016-05-03 - The Continuing Evolution of Samas Ransomware/ —
2016-05-04 - Petya- the two-in-one trojan/ —
2016-05-05 - Jaku Botnet Campaign/ —
2016-05-05 - Sophisticated New Packer Identified in CryptXXX Ransomware Sample/ —
2016-05-06 - 7ev3n ransomware turning ‘HONE$T’/ —
2016-05-06 - Exploring CVE-2015-2545/ —
2016-05-09 - KRBanker Targets South Korea Through Adware and Exploit Kits/ —
2016-05-09 - PSEUDO-DARKLEECH ANGLER EK FROM 185.118.66.154 SENDS BEDEP-CRYPTXXX/ —
2016-05-09 - PseudoDarkLeech Angler EK from 185.118.66.154 sends Bedep-CryptXXX/ —
2016-05-09 - Using Honeynets and the Diamond Model for ICS Threat Analysis/ —
2016-05-10 - How TinyLoader Distributes and Upgrades PoS Threats/ —
2016-05-10 - Setting Sights On Retail- AbaddonPOS Now Targeting Specific POS Software/ —
2016-05-11 - Threat Actor Leverages Windows Zero-day Exploit in Payment Card Data Attacks/ —
2016-05-12 - Chinese-language Ransomware ‘SHUJIN’ Makes An Appearance/ —
2016-05-12 - Hancitor and Ruckguv Reappear, Updated and With Vawtrak On Deck/ —
2016-05-12 - LatentBot – modularny i silnie zaciemniony bot/ —
2016-05-13 - Cyber Heist Attribution/ —
2016-05-15 - What We Can Learn From the Bangladesh Central Bank Cyber Heist/ —
2016-05-16 - Vietnamese Bank Blocks $1 Million SWIFT Heist/ —
2016-05-17 - ATM infector/ —
2016-05-17 - Indian organizations targeted in Suckfly attacks/ —
2016-05-17 - Indian Organizations Targeted Suckfly Attacks/ —
2016-05-17 - Mofang/ —
2016-05-18 - Operation Groundbait- Espionage in Ukrainian war zones/ —
2016-05-18 - Operation Groundbait/ —
2016-05-19 - Petya and Mischa for All! The RaaS Boom Expands to Include the Petya-Mischa Combo/ —
2016-05-19 - Petya and Mischa – Ransomware Duet (Part 1)/ —
2016-05-20 - Special Report- Cyber thieves exploit banks' faith in SWIFT transfer network/ —
2016-05-22 - Cron has fallen/ —
2016-05-22 - Operation Ke3chang Resurfaces With New TidePool Malware/ —
2016-05-22 - Targeted Attacks Against Banks In Middle East/ —
2016-05-23 - APT Case RUAG/ —
2016-05-23 - DMA Locker 4.0- Known ransomware preparing for a massive distribution/ —
2016-05-23 - Technical Report about the Malware used in the Cyberespionage against RUAG/ —
2016-05-24 - New Wekby Attacks Use DNS Requests as C2 Mechanism/ —
2016-05-24 - New Wekby Attacks Use DNS Requests As Command and Control Mechanism/ —
2016-05-25 - CVE-2015-2545 Overview of Current Threats/ —
2016-05-25 - CVE-2015-2545- overview of current threats/ —
2016-05-26 - Oilrig Campaign - The Oilrig Campaign - Attacks on Saudi Arabian Organizations Deliver Helminth Backdoor/ —
2016-05-26 - SWIFT attackers’ malware linked to more financial attacks/ —
2016-05-26 - The OilRig Campaign- Attacks on Saudi Arabian Organizations Deliver Helminth Backdoor/ —
2016-05-27 - Evidence of Stronger Ties Between North Korea and SWIFT Banking Attacks/ —
2016-05-27 - IXESHE Derivative IHEATE Targets Users in America/ —
2016-05-29 - Keep Calm and (Don’t) Enable Macros- A New Threat Actor Targets UAE Dissidents/ —
2016-06 - Form Grabber 2016 [Crome,FF,Opera,Thunderbird, Outlook IE Safari] Hack the world/ —
2016-06-02 - FastPOS- Quick and Easy Credit Card Theft/ —
2016-06-02 - FastPOS/ —
2016-06-03 - Cooking Up Autumn (Herbst) Ransomware/ —
2016-06-06 - Everyone sees not what they want to see/ —
2016-06-07 - The Story of yet another ransom-fail-ware/ —
2016-06-08 - Spear Phishing Attacks- Why They are Successful and How to Stop Them/ —
2016-06-09 - Operation DustySky Part 2/ —
2016-06-09 - Reverse-engineering DUBNIUM/ —
2016-06-10 - Petya and Mischa- ransomware duet (part 2)/ —
2016-06-11 - The Chinese Hackers in the Back Office/ —
2016-06-14 - CVE-2016-4171 – Adobe Flash Zero-day used in targeted attacks/ —
2016-06-14 - New Sofacy Attacks Against US Government Agency/ —
2016-06-15 - Bears in the Midst- Intrusion into the Democratic National Committee/ —
2016-06-15 - Mofang- A politically motivated information stealing adversary/ —
2016-06-15 - Unsupported TeamViewer Versions Exploited For Backdoors, Keylogging/ —
2016-06-16 - Bears in the Midst - Intrusion into the Democratic National Committee/ —
2016-06-16 - DNC Breached by Threat Group-4127/ —
2016-06-17 - In The Wild- Mobile Malware Implements New Features/ —
2016-06-17 - Operation Daybreak/ —
2016-06-17 - ScarCruft APT Group Used Latest Flash Zero Day in Two Dozen Attacks/ —
2016-06-21 - RPT China/ —
2016-06-21 - The Curious Case of an Unknown Trojan Targeting German Speaking Users/ —
2016-06-21 - The Curious Case of an Unknown Trojan Targeting German-Speaking Users/ —
2016-06-21 - Visiting The Bear Den - A Journey in the Land of CyberEspionage/ —
2016-06-22 - After Angler- Shift in Exploit Kit Landscape and New Crypto-Ransomware Activity/ —
2016-06-23 - POS and Credit Cards- In the Line of Fire with “PunkeyPOS”/ —
2016-06-23 - Tracking Elirks Variants in Japan- Similarities to Previous Attacks/ —
2016-06-23 - Tracking Elirks Variants in Japan/ —
2016-06-24 - Ani-Shell/ —
2016-06-25 - Rokku Ransomware shows possible link with Chimera/ —
2016-06-25 - SectorC08- Multi-Layered SFX in Recent Campaigns Target Ukraine/ —
2016-06-26 - Nigerian cybercriminals target high impact industries in India/ —
2016-06-26 - The State of the ESILE Lotus Blossom Campaign/ —
2016-06-28 - Attack Tool Investigation/ —
2016-06-28 - Prince of Persia – Game Over/ —
2016-06-28 - Researchers Disrupt Iranian Cyberespionage/ —
2016-06-29 - Apocalypse- Ransomware which targets companies through insecure RDP/ —
2016-06-29 - Monsoon Analysis of an APT Campaign/ —
2016-06-30 - Asruex - Malware Infecting through Shortcut Files/ —
2016-07-01 - Espionage toolkit targeting Central and Eastern Europe uncovered/ —
2016-07-01 - How I Cracked a Keylogger and Ended Up in Someone's Inbox/ —
2016-07-01 - KeyBase - A New Keylogger on the Block/ —
2016-07-01 - Pacifier APT/ —
2016-07-03 - Android Triada modular trojan/ —
2016-07-03 - From HummingBad to Worse/ —
2016-07-05 - New Backdoor Allows Full Access to Mac Systems, Bitdefender Warns/ —
2016-07-06 - New OSX-Keydnap malware is hungry for credentials/ —
2016-07-07 - NetTraveler APT Targets Russian, European Interests/ —
2016-07-07 - New threat dubbed Zepto Ransomware is spreading out with a new email spam campaign. It is a variant of the recent Locky Ransomware/ —
2016-07-07 - Unveiling Patchwork/ —
2016-07-08 - GootKit- Bobbing and Weaving to Avoid Prying Eyes/ —
2016-07-08 - Investigating the LuminosityLink Remote Access Trojan Configuration/ —
2016-07-08 - The Dropping Elephant – aggressive cyber-espionage in the Asian region/ —
2016-07-08 - The Dropping Elephant/ —
2016-07-11 - When Paying Out Doesn't Pay Off/ —
2016-07-12 - Malware Discovered – SFG- Furtim Malware Analysis/ —
2016-07-12 - Me and Mr. Robot- Tracking the Actor Behind the MAN1 Crypter/ —
2016-07-12 - Nanhaishu/ —
2016-07-13 - Furtim - The Ultra-Cautious Malware/ —
2016-07-13 - Troldesh ransomware influenced by (the) Da Vinci code/ —
2016-07-14 - Technical Notes on Sakula/ —
2016-07-18 - Third time (un)lucky – improved Petya is out/ —
2016-07-20 - CrypMIC Ransomware Wants to Follow CryptXXX’s Footsteps/ —
2016-07-21 - APT-C-15/ —
2016-07-21 - Canadian Man Behind Popular ‘Orcus RAT’/ —
2016-07-21 - Hide and Seek - How Threat Actors Respond in the Face of Public Exposure/ —
2016-07-21 - Phishing Attacks Employ Old but Effective Password Stealer/ —
2016-07-22 - Stampado Ransomware campaign decrypted before it Started/ —
2016-07-25 - Patchwork cyberespionage group expands targets from governments to wide range of industries/ —
2016-07-26 - Attack Delivers 9002 Trojan Through Google Drive/ —
2016-07-26 - Attack Delivers ‘9002’ Trojan Through Google Drive/ —
2016-07-26 - OTX Pulse on R980 ransomware/ —
2016-07-26 - Threat Actors Using Legitimate PayPal Accounts To Distribute Chthonic Banking Trojan/ —
2016-07-28 - China Espionage Dynasty/ —
2016-07-28 - Petya and Mischa For All Part II- They’re Here…/ —
2016-07-30 - Luminosity RAT - Re-purposed/ —
2016-07-31 - China 1937CN Team Hackers Attack Airports in Vietnam/ —
2016-08 - Analysis of a packed Pony downloader/ —
2016-08-01 - CrowdStrike’s New Methodology for Tracking eCrime/ —
2016-08-02 - Group 5 Syria/ —
2016-08-02 - Orcus – Birth of an unusual plugin builder RAT/ —
2016-08-03 - Operation Manul/ —
2016-08-04 - Iran Threats Webpage/ —
2016-08-04 - Iranian Actor -Group5- Targeting Syrian Opposition/ —
2016-08-04 - Russian APT Toolkits/ —
2016-08-04 - What is Multigrain- Learn what makes this PoS malware different/ —
2016-08-05 - Smoke Loader – downloader with a smokescreen still alive/ —
2016-08-06 - APT-C-09/ —
2016-08-07 - Strider and Remsec/ —
2016-08-07 - Strider- Cyberespionage group turns eye of Sauron on targets/ —
2016-08-08 - Doctor Web detected Linux Trojan written in Go/ —
2016-08-08 - MONSOON - Analysis Of An APT Campaign/ —
2016-08-08 - Monsoon Analysis of an APT Campaign/ —
2016-08-08 - Possibly Italy-Born Android RAT Reported in China, Find Bitdefender Researchers/ —
2016-08-08 - ProjectSauron- top level cyber-espionage platform covertly extracts encrypted government comms/ —
2016-08-08 - ProjectSauron/ —
2016-08-08 - Strider- Cyberespionage group turns eye of Sauron on targets/ —
2016-08-10 - Android Marcher- Continuously Evolving Mobile Malware/ —
2016-08-10 - CryptXXX - CrypMIC – intensywnie dystrybuowany ransomware w ramach exploit-kitów/ —
2016-08-11 - Iran And The Soft War For Internet-Dominance/ —
2016-08-11 - Smrss32 (.encrypted) Ransomware Help & Support - _HOW_TO_Decrypt.bmp/ —
2016-08-15 - Shakti Trojan- Document Thief/ —
2016-08-16 - Aveo Malware Family Targets Japanese Speaking Users/ —
2016-08-16 - Aveo/ —
2016-08-16 - Brazil Can’t Catch a Break- After Panda Comes the Sphinx/ —
2016-08-17 - Operation Ghoul- targeted attacks on industrial and engineering organizations/ —
2016-08-17 - Operation Ghoul/ —
2016-08-18 - The Shadow Brokers/ —
2016-08-19 - New Hancitor Malware- Pimp my Downloaded/ —
2016-08-19 - Russian Cyber Operations On Steroids/ —
2016-08-22 - BLATSTING FUNKSPIEL/ —
2016-08-22 - Trojan.Mutabaha.1/ —
2016-08-22 - VB Dropper and Shellcode for Hancitor Reveal New Techniques Behind Uptick/ —
2016-08-23 - GozNym Banking Trojan Targeting German Banks/ —
2016-08-23 - Russian hackers 'Fancy Bear' likely breached Olympic drug-testing agency and DNC, experts say/ —
2016-08-24 - The Million Dollar Dissident iPhone Zero Day NSO Group UAE/ —
2016-08-25 - Pegasus Technical analysis/ —
2016-08-25 - Shakti Trojan - Technical Analysis/ —
2016-08-25 - Unpacking the spyware disguised as antivirus/ —
2016-08-28 - FEINTCLOUD/ —
2016-08-29 - Fantom ransomware impersonates Windows update/ —
2016-08-29 - German Speakers Targeted by SPAM Leading to Ozone RAT/ —
2016-08-29 - Nightmare on Tor Street- Ursnif variant Dreambot adds Tor functionality/ —
2016-08-30 - OSX-Keydnap spreads via signed Transmission application/ —
2016-08-30 - Pythons and Unicorns and Hancitor…Oh My! Decoding Binaries Through Emulation/ —
2016-09-01 - Human Rights Impersonation Malware/ —
2016-09-01 - TADAQUEOUS moments/ —
2016-09-02 - Necurs – hybrid spam botnet/ —
2016-09-04 - BLATSTING Command-and-Control protocol/ —
2016-09-05 - Pokémon-themed Umbreon Linux Rootkit Hits x86, ARM Systems/ —
2016-09-06 - Blatsting C&C Transcript/ —
2016-09-06 - Buckeye cyberespionage group shifts gaze from US to Hong Kong/ —
2016-09-07 - The Missing Piece – Sophisticated OS X Backdoor Discovered/ —
2016-09-08 - Doctor Web discovers Linux Trojan written in Rust/ —
2016-09-08 - The Philadelphia Ransomware offers a Mercy Button for Compassionate Criminals/ —
2016-09-09 - GOVRAT V2.0 - Attacking US military and government/ —
2016-09-11 - BUZZDIRECTION- BLATSTING reloaded/ —
2016-09-11 - Free Darktrack RAT Has the Potential of Being the Best RAT on the Market Search/ —
2016-09-13 - DualToy- New Windows Trojan Sideloads Risky Apps to Android and iOS Devices/ —
2016-09-13 - H1N1- Technical analysis reveals new capabilities/ —
2016-09-13 - The curious case of BLATSTING's RSA implementation/ —
2016-09-14 - BkSoD by Ransomware- HDDCryptor Uses Commercial Tools to Encrypt Network Shares and Lock HDDs/ —
2016-09-14 - Mile Tea - Cyber Espiongage Campaign Targets Asia Pacific Businesses and Government Agencies/ —
2016-09-15 - MILE TEA- Cyber Espionage Campaign Targets Asia Pacific Businesses and Government Agencies/ —
2016-09-16 - iSpy Keylogger/ —
2016-09-16 - Tofsee – modular spambot/ —
2016-09-17 - A few notes on SECONDDATE's C&C protocol/ —
2016-09-18 - Hunting Libyan Scorpions AR/ —
2016-09-19 - Untangling the Ripper ATM Malware/ —
2016-09-20 - Hackers lurking, parliamentarians told _ News _ DW _ 20.09.2016/ —
2016-09-20 - Hackers lurking, parliamentarians told/ —
2016-09-20 - Inside Petya and Mischa ransomware/ —
2016-09-20 - Meanwhile in Britain, Qadars v3 Hardens Evasion, Targets 18 UK Banks/ —
2016-09-21 - KrebsOnSecurity Hit With Record DDoS/ —
2016-09-21 - Reversing GO binaries like a pro/ —
2016-09-22 - Book of Eli- African targeted attacks/ —
2016-09-22 - Zeus Delivered by DELoader to Defraud Customers of Canadian Banks/ —
2016-09-23 - Dissecting a Hacktivist’s DDoS Tool- Saphyra Revealed/ —
2016-09-23 - Hancitor (AKA Chanitor) observed using multiple attack approaches/ —
2016-09-23 - SECONDDATE in action/ —
2016-09-26 - Sofacys Komplex OS X Trojan/ —
2016-09-26 - Sofacy’s ‘Komplex’ OS X Trojan/ —
2016-09-27 - Komplex Mac backdoor answers old questions/ —
2016-09-27 - New Voldemort-Nagini Ransomware Virus Infection/ —
2016-09-27 - Threat Spotlight- GozNym/ —
2016-09-28 - Belling the BEAR/ —
2016-09-28 - Confucius Says - Malware Families Get Further By Abusing Legitimate Websites/ —
2016-09-28 - Confucius Says…Malware Families Get Further By Abusing Legitimate Websites/ —
2016-09-28 - Highly Evasive Code Injection Awaits User Interaction Before Delivering Malware/ —
2016-09-28 - Introducing Her Royal Highness the Princess Locker Ransomware/ —
2016-09-28 - Russia Hacks Bellingcat MH17 Investigation/ —
2016-09-29 - China & Cyber Attitudes Strategies Organisation/ —
2016-09-29 - TeamXRat- Brazilian cybercrime meets ransomware/ —
2016-09-29 - Want Tofsee My Pictures- A Botnet Gets Aggressive/ —
2016-09-30 - Hacked Steam accounts spreading Remote Access Trojan/ —
2016-10-01 - Source Code for IoT Botnet ‘Mirai’ Released/ —
2016-10-01 - ‘Shadow Brokers’ Whine That Nobody Is Buying Their Hacked NSA Files/ —
2016-10-03 - On the StrongPity Waterhole Attacks Targeting Italian and Belgian Encryption Users/ —
2016-10-03 - Polyglot – the fake CTB-locker/ —
2016-10-03 - Remsec driver analysis/ —
2016-10-03 - StrongPity Waterhole Attacks Targeting Italian and Belgian Encryption Users/ —
2016-10-04 - OilRig Malware Campaign Updates Toolset and Expands Targets/ —
2016-10-05 - FastPOS Updates in Time for the Retail Sale Season/ —
2016-10-05 - Wave Your False Flag/ —
2016-10-09 - SiteIntel- Cyber Caliphate Army/ —
2016-10-10 - How France's TV5 was almost destroyed by 'Russian hackers'/ —
2016-10-10 - Remsec driver analysis - Part 2/ —
2016-10-11 - Odinaff- New Trojan used in high level financial attacks/ —
2016-10-11 - Remsec driver analysis - Part 3/ —
2016-10-15 - TrickBot- We Missed you, Dyre/ —
2016-10-16 - A Tale of Two Targets/ —
2016-10-17 - A Tale of Two Targets/ —
2016-10-17 - New-looking Sundown EK drops Smoke Loader, Kronos banker/ —
2016-10-17 - RotorCrypt (RotoCrypt) Ransomware Support Topic - .tar, .c400, .c300, .GRANIT/ —
2016-10-17 - ‘DealersChoice’ is Sofacy’s Flash Player Exploit Platform/ —
2016-10-18 - Digitally Signed Malware Targeting Gaming Companies/ —
2016-10-20 - RotorCrypt (RotoCrypt) Ransomware Tar Ransomware/ —
2016-10-20 - Sednit Part 1/ —
2016-10-20 - TheMoon - A P2P botnet targeting Home Routers/ —
2016-10-21 - BITTER- a targeted attack against Pakistan/ —
2016-10-24 - Evasive Malware Detects and Defeats Virtual Machine Analysis/ —
2016-10-24 - Introducing TrickBot, Dyreza’s successor/ —
2016-10-25 - Houdini Magic Reappearance/ —
2016-10-25 - Houdini’s Magic Reappearance/ —
2016-10-25 - Sednit Part 2/ —
2016-10-25 - TrickBot Banker Insights/ —
2016-10-26 - Moonlight – Targeted attacks in the Middle East/ —
2016-10-26 - Moonlight/ —
2016-10-27 - BLACKGEAR Espionage Campaign Evolves, Adds Japan To Target List/ —
2016-10-27 - In-Dev Ransomware forces you do to Survey before unlocking Computer/ —
2016-10-27 - Inside the Gootkit C&C server/ —
2016-10-27 - Mirai DDoS Botnet- Source Code & Binary Analysis/ —
2016-10-27 - Sednit Part 3/ —
2016-10-28 - zxshell repository/ —
2016-10-31 - Emissary Trojan Changelog/ —
2016-10-31 - Second Shadow Brokers dump released/ —
2016-11-01 - Ursnif Malware- Deep Technical Dive/ —
2016-11-02 - Exposing the EGO MARKET- the cybercrime performed by the Linux-Moose botnet/ —
2016-11-02 - Linux-Moose- Still breathing/ —
2016-11-02 - Nymaim Malware- Deep Technical Dive – Adventures in Evasive Malware/ —
2016-11-03 - Ukraine Cybersecurity Threat Briefing/ —
2016-11-07 - Little Trickbot Growing Up- New Campaign/ —
2016-11-08 - Analysis of IOS.GUIINJECT Adware Library/ —
2016-11-08 - Analysis of iOSGuiInject Adware Library/ —
2016-11-08 - SPAMTORTE VERSION 2- DISCOVERY OF AN ADVANCED, MULTILAYERED SPAMBOT CAMPAIGN THAT IS BACK WITH A VENGEANCE/ —
2016-11-09 - Down the H-W0rm Hole with Houdini’s RAT/ —
2016-11-09 - Houdini RAT/ —
2016-11-09 - Tricks of the Trade- A Deeper Look Into TrickBot’s Machinations/ —
2016-11-10 - Floki Bot and the stealthy dropper/ —
2016-11-14 - Doctor Web discovers a botnet that attacks Russian banks/ —
2016-11-14 - Ransoc Desktop Locking Ransomware Ransacks Local Files and Social Media Profiles/ —
2016-11-15 - CryptoLuck Ransomware being Malvertised via RIG-E Exploit Kits/ —
2016-11-15 - Kronos Banking Trojan Used to Deliver New Point-of-Sale Malware/ —
2016-11-15 - ScanPOS, new POS malware being distributed by Kronos/ —
2016-11-17 - It’s Parliamentary - KeyBoy and the targeting of the Tibetan Community/ —
2016-11-17 - Princess Locker decryptor/ —
2016-11-21 - Android malware analysis with Radare- Dissecting the Triada Trojan/ —
2016-11-21 - PrincessLocker – ransomware with not so royal encryption/ —
2016-11-22 - Cobalt hackers executed massive, synchronized ATM heists across Europe, Russia/ —
2016-11-22 - Tropic Trooper Targets Taiwanese Government and Fossil Fuel Provider With Poison Ivy/ —
2016-11-22 - Tropic Trooper Targets Taiwanese Government/ —
2016-11-23 - Analysis- Ursnif - spying on your data since 2007/ —
2016-11-23 - InPage zero-day exploit used to attack financial institutions in Asia/ —
2016-11-28 - A New All-in-One Botnet- Proteus/ —
2016-11-28 - NetWire RAT Steals Payment Card Data/ —
2016-11-30 - Bladabindi Remains A Constant Threat By Using Dynamic DNS Services/ —
2016-11-30 - Malware Actors Using NIC Cyber Security Themed Spear Phishing To Target Indian Government Organizations/ —
2016-11-30 - Shamoon 2- Return of the Disttrack Wiper/ —
2016-11-30 - Shamoon- Back from the dead and destructive as ever/ —
2016-12-01 - Alert (TA16-336A)- Avalanche (crimeware-as-a-service infrastructure)/ —
2016-12-01 - CNACOM - Open Source Exploitation via Strategic Web Compromise/ —
2016-12-06 - August in November- New Information Stealer Hits the Scene/ —
2016-12-06 - Deep Analysis of the Online Banking Botnet TrickBot/ —
2016-12-07 - August in November- New Information Stealer Hits the Scene/ —
2016-12-07 - Floki Bot Strikes, Talos and Flashpoint Respond/ —
2016-12-07 - The TrickBot Evolution/ —
2016-12-08 - Thyssenkrupp victim of cyber attack/ —
2016-12-09 - -Proof of Concept- CryptoWire Ransomware Spawns Lomix and UltraLocker Families/ —
2016-12-09 - New Exo Android Trojan Sold on Hacking Forums, Dark Web/ —
2016-12-09 - Now Mirai Has DGA Feature Built in/ —
2016-12-09 - Windows 10- protection, detection, and response against recent Depriz malware attacks/ —
2016-12-13 - The rise of TeleBots - Analyzing disruptive KillDisk attacks/ —
2016-12-13 - The rise of TeleBots- Analyzing disruptive KillDisk attacks/ —
2016-12-14 - Kaspersky Security Bulletin 2016. Review of the year. Overall statistics for 2016/ —
2016-12-14 - MiKey - A Linux keylogger/ —
2016-12-14 - Twin zero-day attacks- PROMETHIUM and NEODYMIUM target individuals in Europe/ —
2016-12-15 - Goldeneye Ransomware – the Petya-Mischa combo rebranded/ —
2016-12-15 - Let It Ride- The Sofacy Group’s DealersChoice Attacks Continue/ —
2016-12-15 - Microsoft Security Intelligence Report/ —
2016-12-16 - Bayrob- Three suspects extradited to face charges in US/ —
2016-12-19 - Dismantling a Nuclear Bot/ —
2016-12-20 - Alice- A Lightweight, Compact, No-Nonsense ATM Malware/ —
2016-12-20 - New Linux-Rakos threat- devices and servers under SSH scan (again)/ —
2016-12-22 - Tofsee Spambot features .ch DGA - Reversal and Countermesaures/ —
2016-12-23 - Emsisoft Decryptor for GlobeImposter/ —
2016-12-26 - Rocket Kitten/ —
2016-12-27 - ANALYSIS OF AUGUST STEALER MALWARE/ —
2016-12-27 - Pegasus internals- Technical Teardown of the Pegasus malware and Trident exploit chain/ —
2016-12-28 - Switcher- Android joins the ‘attack-the-router’ club/ —
2016-12-29 - GRIZZLY STEPPE – Russian Malicious Cyber Activity/ —
2016-12-29 - Some notes on IoCs/ —