All About Malware – Malpedia

The primary goal of Malpedia is to provide a resource for rapid identification and actionable context when investigating malware. Openness to curated contributions shall ensure an accountable level of quality in order to foster meaningful and reproducible research.

Malware Wikipedia – Click here

Threat Actor – Click here

Last Update

• Casbaneiro: A Banking Trojan with Distributed Data-Receiving Servers
  2026-09-10 • Fortinet • Rachael Liao • win.metamorfo Open article on Malpedia
• Koktevrat – a multi-stage Android RAT distributed under the guise of the MandatGO app
  2026-09-09 • Orange CERT • Ireneusz Tarnowski, Olaf Grzybowski • apk.koktevrat Open article on Malpedia
• BabylonRat Technical Analysis Report
  2026-09-07 • Github (Yavuzhanzgen) • Yavuzhan Özgen • win.babylon_rat Open article on Malpedia
• Fake GlobalProtect MSI Targets Myanmar Using Cloudflare and Google Sheets as C2
  2026-09-02 • Malware INFO • Malware INFO Research Team • win.unidentified_126 Open article on Malpedia
• REVSTEALER ramps up: analysis of up-and-coming infostealer
  2026-09-01 • Elastic • Daniel Stepanic, Jia Yu Chan, Salim Bitam • win.revstealer Open article on Malpedia
• Reverse Engineering the Auto-Color Linux Backdoor
  2026-08-30 • Medium 0xzyadelzyat • Zyad Elzyat • elf.auto_color Open article on Malpedia
• ScreenConnect Client Technical Analysis
  2026-08-27 • Github (Yavuzhanzgen) • Yavuzhan Özgen Open article on Malpedia
• Carry-On Compromise: TA4922 Packs PackClient
  2026-08-27 • Proofpoint • Kyle Cucci, Proofpoint Threat Research Team, Rob Kinner, Tony Robinson • win.donut_injector Open article on Malpedia
• TerminalFix campaign deploys a reverse tunnel through multistage intrusion
  2026-08-26 • Microsoft • Parasharan Raghavan, Sagar Patil, Suriyaraj Natarajan • win.lorem_ipsum Open article on Malpedia
• A ClickFix cluster: Observed activity from recent ClickFix campaigns
  2026-08-24 • Field Effect • Damon Toumbourou, Hugh Whitewood • win.lorem_ipsum Open article on Malpedia
• North Korea’s Crypt: Hunting Ghosts
  2026-08-21 • Bitso Quetzal Team • Mauro Eldritch, Nelson Colon • js.stoatwaffle Open article on Malpedia
• CNCMachineRMS C2 Protocol
  2026-08-21 • Netresec • Erik Hjelmvik • win.babadeda Open article on Malpedia
• Prompting the Payload: How an npm Supply Chain Attack Delivers the RedC2 AI-Powered Linux Implant
  2026-08-20 • trendai • Aliakbar Zahravi • elf.redshell Open article on Malpedia
• The ToxicPanda Never Sleeps: ToxicPanda 2.0 Prepares its Next Strike on Mobile
  2026-08-19 • zimperium • Vishnu Pratapagiri • apk.toxic_panda Open article on Malpedia
• SilkParasite: Tracking a China-Nexus APT Across Central Asia
  2026-08-19 • Bitdefender • Martin Zugec • win.bloodalchemy, win.shadowpad, win.snappybee • SilkParasite Open article on Malpedia
• MalwareBazaar | SHA256 9768b7e31324805672cfcba91cf4d6da91494e9899db58f22da9dda6c91931d6 (NeedleStealer)
  2026-08-19 • abuse.ch • abuse.ch • win.needle_stealer Open article on Malpedia
• Who Invited Aisuru to the LAN Party?
  2026-08-18 • BitSight • Bitsight TRACE • apk.kimwolf, elf.aisuru Open article on Malpedia
• WordlistLoader Delivering Amatera via ClearFake Campaigns
  2026-08-18 • Gen • Vojtěch Krejsa • win.acr_stealer, win.amatera Open article on Malpedia
• AsyncRAT Technical Analysis
  2026-08-17 • Github (Yavuzhanzgen) • Yavuzhan Özgen • win.asyncrat Open article on Malpedia
• C2Looper: A New Backdoor Likely Tied To Ransomware With GitHub C2
  2026-08-17 • Zscaler • Zscaler ThreatLabz • win.c2looper Open article on Malpedia