All About Malware – Malpedia

The primary goal of Malpedia is to provide a resource for rapid identification and actionable context when investigating malware. Openness to curated contributions shall ensure an accountable level of quality in order to foster meaningful and reproducible research.

Malware Wikipedia – Click here

Threat Actor – Click here

Last Update

• REKOOBE APT-31 Linux Backdoor Analysis
  2024-11-30 • Technical Evolution • techevo • elf.rekoobe Open article on Malpedia
• The source code of Banshee Stealer leaked online
  2024-11-26 • Security Affairs • Pierluigi Paganini • osx.banshee Open article on Malpedia
• The IT Army of Ukraine: Cyber Resistance in the Digital Battlefield
  2024-11-25 • LinkedIn (Idan Tarab) • Idan Tarab Open article on Malpedia
• How to target European SME with Ransomware? Through Zyxel!
  2024-11-22 • Medium (@lcam) • Luca Mella • elf.helldown, win.babuk Open article on Malpedia
• The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access
  2024-11-22 • Volexity • Sean Koessel, Steven Adair, Tom Lancaster Open article on Malpedia
• Unveiling WolfsBane: Gelsemium’s Linux counterpart to Gelsevirine
  2024-11-21 • ESET Research • Viktor Sperka • elf.firewood, elf.wolfsbane, jsp.icesword Open article on Malpedia
• PROSPERO & Proton66: Uncovering the links between bulletproof networks
  2024-11-21 • Intrinsec • CTI Intrinsec, Intrinsec • apk.coper, apk.spynote, js.fakeupdates, js.gootloader, ps1.eugenloader Open article on Malpedia
• The hidden network: How China unites state, corporate, and academic assets for cyber offensive campaigns
  2024-11-20 • Orange Cyberdefense • Marine PICHON, Piotr Malachiński Open article on Malpedia
• Phobos: Stealthy Ransomware That Operated Under the Radar – Until Now
  2024-11-20 • Trellix • Jambul Tologonov, John Fokker, Phuc Pham • win.8base, win.cryptxxxx, win.dharma, win.phobos Open article on Malpedia
• PROSPERO & Proton66: Tracing Uncovering the links between bulletproof networks
  2024-11-20 • Intrinsec • Equipe CTI • apk.coper, apk.spynote, js.fakeupdates, js.gootloader, ps1.eugenloader, win.icedid, win.matanbuchus, win.nokoyawa, win.pikabot Open article on Malpedia
• XenoRAT Adopts Excel XLL Files and ConfuserEx as Access Method
  2024-11-19 • Hunt.io • Hunt.io • win.xenorat Open article on Malpedia
• Inside Water Barghest’s Rapid Exploit-to-Market Strategy for IoT Devices
  2024-11-18 • Trend Micro • Feike Hacquebord, Fernando Mercês • elf.ngioweb Open article on Malpedia
• Inside Water Barghest’s Rapid Exploit-to-Market Strategy for IoT Devices
  2024-11-18 • Trend Micro • Feike Hacquebord, Fernando Mercês • elf.ngioweb • Water Barghest Open article on Malpedia
• Exploring Strela Stealer: Initial Payload Analysis and Insights
  2024-11-18 • Logpoint • Anish Bogati • win.strelastealer Open article on Malpedia
• Inside Water Barghests Rapid Exploit-to-Market Strategy for IoT Devices
  2024-11-18 • Trend Micro • Feike Hacquebord, Fernando Mercês • elf.ngioweb Open article on Malpedia
• Iranian “Dream Job” Cyber Campaign Targets Aerospace Sector
  2024-11-15 • Information Security Buzz • Kirsten Doyle • TA455 Open article on Malpedia
• BrazenBamboo Weaponizes FortiClient Vulnerability to Steal VPN Credentials via DEEPDATA
  2024-11-15 • Volexity • Callum Roxan, Charlie Gardner, Paul Rascagnères • ios.lightspy, osx.lightspy, win.bh_a006, win.deepdata, win.deeppost • BrazenBamboo Open article on Malpedia
• Inside Intelligence Center: Financially Motivated Chinese Threat Actor SilkSpecter Targeting Black Friday Shoppers
  2024-11-14 • EclecticIQ • EclecticIQ Threat Research Team • SilkSpecter Open article on Malpedia
• An elephant in Kairos: data-leak site emerges for new extortion group
  2024-11-14 • cyjax • Roman Faithfull • Kairos Open article on Malpedia
• Bored BeaverTail & InvisibleFerret Yacht Club – A Lazarus Lure Pt.2
  2024-11-14 • eSentire • eSentire • js.beavertail, py.invisibleferret Open article on Malpedia