All About Malware – Malpedia

The primary goal of Malpedia is to provide a resource for rapid identification and actionable context when investigating malware. Openness to curated contributions shall ensure an accountable level of quality in order to foster meaningful and reproducible research.

Malware Wikipedia – Click here

Threat Actor – Click here

Last Update

• Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys
  2026-10-29 • The Hacker News • Swati Khandelwal • UAT-11473 Open article on Malpedia
• 38,628 Crypto Orders. 10,139 IPs. What Wagyu’s Alleged Leak Means for Monero Privacy.
  2026-10-28 • Infostealers • InfoStealers • Whitearmor Open article on Malpedia
• Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN
  2026-10-28 • Cisco Talos • Cisco Talos • UAT-11473 Open article on Malpedia
• Automating Extortion: Inside an AI-Assisted n0n Ransomware Operation
  2026-10-28 • SOCRadar • SOCRadar Open article on Malpedia
• WhiteArmor ransomware group claims Hisense data theft, demands $5 million
  2026-10-27 • teiss • teiss Team • Whitearmor Open article on Malpedia
• CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets
  2026-10-27 • The Hacker News • Ravie Lakshmanan • win.gentlemen • CyberCartel Open article on Malpedia
• Beyond the Inbox: How Threat Actors Abuse Microsoft Teams External Chat for Initial Access
  2026-10-26 • Arctic Wolf • Shubham Dubey • STAC4749 Open article on Malpedia
• Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
  2026-10-26 • The Hacker News • Ravie Lakshmanan • win.netsupportmanager_rat • STAC4749 Open article on Malpedia
• Hisense faces $5 million ransom demand over alleged 19GB data theft
  2026-10-26 • Cybernews • Ernestas Naprys • Whitearmor Open article on Malpedia
• Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More
  2026-10-26 • The Hacker News • Ravie Lakshmanan • Jingle Thief Open article on Malpedia
• Vivisection of Hermes: An Active Russian-Market Malware-as-a-Service Platform and Its PyMapper Distribution Chain (Paper)
  2026-10-24 • AngelaMos • Carter Perez • win.hermes_stealer Open article on Malpedia
• Vivisection of Hermes: An Active Russian-Market Malware-as-a-Service Platform and Its PyMapper Distribution Chain
  2026-10-24 • AngelaMos • Carter Perez • win.hermes_stealer Open article on Malpedia
• AVEVA Investigating Unauthorized Access to Corporate SharePoint; Software Unaffected
  2026-10-23 • Red Tiger Security • Jonathan Pollet • Mimori Open article on Malpedia
• Uncovering the AI-Driven Offensive Infrastructure of INC and The Gentlemen Ransomware Affiliates
  2026-10-23 • SOCRadar • SOCRadar • elf.inc, win.gentlemen, win.inc Open article on Malpedia
• Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
  2026-10-23 • The Hacker News • Ravie Lakshmanan • win.adaptix_c2, win.mimikatz • k0t Open article on Malpedia
• Breaking Akira's Clock: Recovering Files Without the Ransom Key
  2026-10-23 • Medium shaddy43 • shaddy43 • win.akira Open article on Malpedia
• A New Extortion Gang Is Naming Companies on the Dark Web and Counting Down to Data Leaks
  2026-10-22 • Cyber Security News • Tushar Subhra Dutta • Scarlettgroup Open article on Malpedia
• AI Agents in Banking: U.S. Banks Face Security Risks
  2026-10-22 • The CyberSec Guru • The CyberSec Guru • CyberCartel Open article on Malpedia
• StealC Is Back, and This Time It's a RAT
  2026-10-22 • Varonis • Varonis Threat Labs • win.stadia Open article on Malpedia
• Operation FlashHole: Lazarus breaks security, defies control
  2026-10-21 • Kaspersky • Sojun Ryu • win.cloudburst, win.lightlesscan, win.lpeclient, win.touchshift Open article on Malpedia