All About Malware – Malpedia

The primary goal of Malpedia is to provide a resource for rapid identification and actionable context when investigating malware. Openness to curated contributions shall ensure an accountable level of quality in order to foster meaningful and reproducible research.

Malware Wikipedia – Click here

Threat Actor – Click here

Last Update

• The source code of Banshee Stealer leaked online
  2024-11-26 • Security Affairs • Pierluigi Paganini • osx.banshee Open article on Malpedia
• How to target European SME with Ransomware? Through Zyxel!
  2024-11-22 • Medium (@lcam) • Luca Mella • elf.helldown, win.babuk Open article on Malpedia
• The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access
  2024-11-22 • Volexity • Sean Koessel, Steven Adair, Tom Lancaster Open article on Malpedia
• Unveiling WolfsBane: Gelsemium’s Linux counterpart to Gelsevirine
  2024-11-21 • ESET Research • Viktor Sperka • elf.firewood, elf.wolfsbane, jsp.icesword Open article on Malpedia
• PROSPERO & Proton66: Uncovering the links between bulletproof networks
  2024-11-21 • Intrinsec • CTI Intrinsec, Intrinsec • apk.coper, apk.spynote, js.fakeupdates, js.gootloader, ps1.eugenloader Open article on Malpedia
• Phobos: Stealthy Ransomware That Operated Under the Radar – Until Now
  2024-11-20 • Trellix • Jambul Tologonov, John Fokker, Phuc Pham • win.8base, win.cryptxxxx, win.dharma, win.phobos Open article on Malpedia
• PROSPERO & Proton66: Tracing Uncovering the links between bulletproof networks
  2024-11-20 • Intrinsec • Equipe CTI • apk.coper, apk.spynote, js.fakeupdates, js.gootloader, ps1.eugenloader, win.icedid, win.matanbuchus, win.nokoyawa, win.pikabot Open article on Malpedia
• XenoRAT Adopts Excel XLL Files and ConfuserEx as Access Method
  2024-11-19 • Hunt.io • Hunt.io • win.xenorat Open article on Malpedia
• Inside Water Barghest’s Rapid Exploit-to-Market Strategy for IoT Devices
  2024-11-18 • Trend Micro • Feike Hacquebord, Fernando Mercês • elf.ngioweb Open article on Malpedia
• Inside Water Barghest’s Rapid Exploit-to-Market Strategy for IoT Devices
  2024-11-18 • Trend Micro • Feike Hacquebord, Fernando Mercês • elf.ngioweb • Water Barghest Open article on Malpedia
• Exploring Strela Stealer: Initial Payload Analysis and Insights
  2024-11-18 • Logpoint • Anish Bogati • win.strelastealer Open article on Malpedia
• Inside Water Barghests Rapid Exploit-to-Market Strategy for IoT Devices
  2024-11-18 • Trend Micro • Feike Hacquebord, Fernando Mercês • elf.ngioweb Open article on Malpedia
• BrazenBamboo Weaponizes FortiClient Vulnerability to Steal VPN Credentials via DEEPDATA
  2024-11-15 • Volexity • Callum Roxan, Charlie Gardner, Paul Rascagnères • ios.lightspy, osx.lightspy, win.bh_a006, win.deepdata, win.deeppost • BrazenBamboo Open article on Malpedia
• A three-beat waltz: The ecosystem behind Chinese state-sponsored cyber threats
  2024-11-13 • Sekoia • Coline Chavane, Sekoia TDR Open article on Malpedia
• Cracking Formbook malware: Blind deobfuscation and quick response techniques
  2024-11-13 • TEHTRIS • TEHTRIS • win.formbook Open article on Malpedia
• ShrinkLocker (+Decryptor): From Friend to Foe, and Back Again
  2024-11-13 • Bitdefender • Martin Zugec Open article on Malpedia
• CVE-2024-43451: A New Zero-Day Vulnerability Exploited in the wild
  2024-11-13 • ClearSky • ClearSky • win.spark_rat • UAC-0194 Open article on Malpedia
• New Zero-Detection Variant of Melofee Backdoor from Winnti Strikes RHEL 7.9
  2024-11-12 • Qianxin • Alex Turing • elf.melofee Open article on Malpedia
• China-Nexus TAG-112 Compromises Tibetan Websites to Distribute Cobalt Strike
  2024-11-12 • Recorded Future • Insikt Group • win.cobalt_strike Open article on Malpedia
• The Botnet is Back: SSC STRIKE Team Uncovers a Renewed Cyber Threat
  2024-11-12 • SecurityScorecard • Ryan Sherstobitoff Open article on Malpedia