The primary goal of Malpedia is to provide a resource for rapid identification and actionable context when investigating malware. Openness to curated contributions shall ensure an accountable level of quality in order to foster meaningful and reproducible research.

Malware Wikipedia – Click here

Threat Actor – Click here

Last Update

• CoffeeLoader: A Brew of Stealthy Techniques
  2025-03-26 • Zscaler • Brett Stone-Gross • win.coffee_loader Open article on Malpedia
• Tweet about RALord ransomware
  2025-03-26 • Twitter (@MalGamy12) • Gameel Ali • win.ralord Open article on Malpedia
• Tempted to Classifying APT Actors: Practical Challenges of Attribution in the Case of Lazarus’s Subgroup
  2025-03-25 • JPCERT/CC • Hayato Sasaki Open article on Malpedia
• Phishing Campaign Targets Defense and Aerospace Firms Linked to Ukraine Conflict
  2025-03-25 • DomainTools • DomainTools Open article on Malpedia
• Operation ForumTroll: APT attack with Google Chrome zero-day exploit chain
  2025-03-25 • Kaspersky Labs • Boris Larin, Igor Kuznetsov Open article on Malpedia
• On the Hunt for Ghost(Socks)
  2025-03-25 • SpyCloud • James • win.ghostsocks Open article on Malpedia
• Weaver Ant, the Web Shell Whisperer: Tracking a Live China-nexus Operation
  2025-03-24 • SYGNIA • Sygnia Team • win.chinachopper, win.regeorg Open article on Malpedia
• Analyzing Vidar Stealer
  2025-03-23 • AviaB • AviaB • win.vidar Open article on Malpedia
• Operation FishMedley
  2025-03-20 • ESET Research • Matthieu Faou • win.shadowpad, win.sodamaster, win.spyder Open article on Malpedia
• UAT-5918 targets critical infrastructure entities in Taiwan
  2025-03-20 • Cisco Talos • Asheer Malhotra, Brandon White, Jungsoo An, Vitor Ventura • py.lazagne, win.juicy_potato, win.meterpreter, win.mimikatz Open article on Malpedia
• Reversing FUD AMOS Stealer
  2025-03-20 • Denwp Research • Tonmoy Jitu • osx.amos Open article on Malpedia
• Analysis of Black Basta Ransomware Chat Leaks
  2025-03-18 • Trellix • Jambul Tologonov, John Fokker • elf.blackbasta, win.blackbasta Open article on Malpedia
• Code-signing certificate abuse in the Black Basta chat leaks (and how to fight back)
  2025-03-18 • Expel • AARON WALTON • elf.blackbasta, win.blackbasta Open article on Malpedia
• Operation AkaiRyū: MirrorFace invites Europe to Expo 2025 and revives ANEL backdoor
  2025-03-18 • WeLiveSecurity • Dominik Breitenbacher • win.anel, win.asyncrat Open article on Malpedia
• Black Basta’s blunder: exploiting the gang’s leaked chats
  2025-03-17 • Cloudflare • Cloudflare • elf.blackbasta, win.blackbasta Open article on Malpedia
• Bybit – What We Know So Far
  2025-03-16 • SYGNIA • Sygnia Team Open article on Malpedia
• Analyzing the RedTiger Malware Stealer
  2025-03-16 • cyb3rjerry • py.redtiger Open article on Malpedia
• IoCs for Anubis Backdoor
  2025-03-15 • Github (TheRavenFile) • Rakesh Krishnan • py.anubisbackdoor Open article on Malpedia
• Lumma Stealer – A tale that starts with a fake Captcha
  2025-03-14 • VitalDigitalForensics • v4ensics • win.lumma Open article on Malpedia
• SocGholish’s Intrusion Techniques Facilitate Distribution of RansomHub Ransomware
  2025-03-14 • Trend Micro • Adam O'Connor, Ian Kenefick, Jack Walsh, Laura Medina, Lucas Silva • js.fakeupdates, win.ransomhub Open article on Malpedia