Research reports
TopicMalware
PublisherAll publishers
- All publishers353
- Check Point39
- GitHub19
- ETDA Threat Group Cards9
- Trend Micro9
- Group-IB8
- Microsoft8
- Kaspersky7
- Medium7
- Cisco Talos6
- ESET6
- Mandiant (Google)6
- Elastic Security Labs5
- Recorded Future5
- Unit 425
- Virus Bulletin5
- ANY.RUN4
- Infosec Institute4
- JPCERT/CC4
- LevelBlue4
- logpoint.com4
- Malpedia4
- MITRE ATT&CK4
- SecurityScorecard4
- BleepingComputer3
- Darktrace3
- Fortinet3
- IBM X-Force3
- NCSC (UK)3
- Netresec3
- SentinelOne3
SortNewest added
341–353 of 353 reports · page 18 of 18 · Clear filters
Added Sat 20 Jul 2024
ESET · PDF · Added 20 Jul
Hesperbot_Whitepaper.pdf
A new and effective banking trojan has been discovered targeting online banking users in Turkey, the Czech Republic, Portugal and the United Kingdom. It uses very credible-looking phishing-like campaigns, related to trustworthy organizations, to lure victims…
Added Thu 11 Jul 2024
files.speakerdeck.com · PDF · Added 11 Jul
hodur_recon2024.pdf
WHO AM I? • Takahiro Haruyama (@cci_forensics) • Principal Security Researcher at Binarly • Previously Staff Threat Researcher at Carbon Black TAU • Past Research • Scalable RE automation (e.g., hunting vulnerable drivers) • Anti-Forensics (e.g., firmware…
Added Wed 26 Jun 2024
GitHub · PDF · Added 26 Jun
Objective-See's Blog
The first malware of 2024 is (already) here! by: Patrick Wardle / January 4, 2024 📝 👾 Want to play along? As ‘Sharing is Caring’ I’ve uploaded a sample of the malware SpectralBlur.zip to our public macOS malware collection. The password is: infect3d…
Added Tue 25 Jun 2024
GitHub · PDF · Added 25 Jun
SneakyChef espionage group targets government agencies with SugarGh0st and more infection techniques
Cisco Talos recently discovered an ongoing campaign from SneakyChef, a newly discovered threat actor using SugarGh0st malware, as early as August 2023. In the newly discovered campaign, we observed a wider scope of targets spread across countries in EMEA and…
Added Thu 6 Jun 2024
esentire-dot-com-assets.s3.amazonaws.com · PDF · Added 6 Jun
eSentire-Unraveling_BatLoader_and_FakeBat.pdf
BatLoader and FakeBat are two competing, Russian-speaking Malware-as-a-Service (MaaS) crime groups that specialize in infecting corporate employees with malware. These services are known to infect their targets with every type of malware from the Royal…
Added Thu 16 May 2024
threatmon.io · PDF · Added 16 May
APT44 Report
What is Kapeka Backdoor? Countries Targeted by APT44 (Sandworm) Infection Chain Backdoor Analysis Backdoor Dropper Analysis IOCs Mitre Attack Detection Mitigation Dropper Yara Rule Technical Analysis Backdoor Yara Rule 5 6 7 8 8 12 17 18 19 19 20 21 22Uncover…
Added Wed 24 Apr 2024
deepsec.net · PDF · Added 24 Apr
Who_Hid_My_Desktop_Or_Safran_Pavel_Asinovsky.pdf
CAT hCAT 4 IBM Security Who are we • IBM Security (Trusteer) Financial Malware Research Team • Or Safran • Pavel Asinovsky 5 IBM Security Remote Desktop Software • Allows remote control of a computer across the network. • Originally was used for remote…
Added Thu 18 Apr 2024
Added Wed 17 Apr 2024
NCSC (UK) · PDF · Added 17 Apr
NCSC-MAR-Jolly-Jellyfish.pdf
• Jolly Jellyfish downloads and executes shellcode, which is hidden in legitimate bitmap image (BMP) files. • HTTP is used to download image files. • Debug information left in the samples suggest the author refers to this malware as fishmaster. Introduction…
Added Fri 12 Apr 2024
SecurityScorecard · PDF · Added 12 Apr
Report-A-Detailed-Analysis-Of-The-Gafgyt-Malware-Targeting-IoT-Devices.pdf
SecurityScorecard.com info@securityscorecard.com Tower 49 12 E 49th Street Suite 15-001 New York, NY 10017 1.800.682.1707 A Detailed Analysis of the Gafgyt Malware Targeting IoT Devices Prepared by: Vlad Pasca, Senior Malware & Threat Analyst…
Virus Bulletin · PDF · Added 12 Apr
Possible supply chain attack targeting South Asian government delivers Shadowpad
2 VIRUS BULLETIN CONFERENCE OCTOBER 2023 ABSTRACT Shadowpad is a malware family that has been involved in multiple advanced campaigns, starting in 2017 with a supply chain attack against NetSarang software, and an ASUS compromise in 2018, all attributed to…
Added Tue 26 Mar 2024
vblocalhost.com · PDF · Added 26 Mar
PowerPoint 簡報
Evolution after prosecution : Psychedelic APT41 Aragorn Tseng Charles Li Peter Syu Tom Lai Malware Analysis Incident Response Threat Intelligence Malware Analysis Incident Response Tool Development Incident Response Malware Analysis Penetration Malware…
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.