Search by property

This page provides a simple browsing interface for finding entities described by a property and a named value. Other available search interfaces include the page property search, and the ask query builder.

List of results

• Flame, Duqu and Stuxnet: in-depth code analysis of mssecmgr.ocx  + (July 20, 2012)
• Reversing malware loaders - The Matsnu-A Case  + (July 21, 2012)
• Gimemo finally targeting USA with Camera Feature too  + (July 21, 2012)
• Inside Blackhole Exploits Kit v1.2.4 - Exploit Kit Control Panel  + (July 22, 2012)
• Symantec/Android.Ackposts  + (July 22, 2012)
• The lifecycle of peer-to-peer (Gameover) ZeuS  + (July 23, 2012)
• Madi is back - New Tricks and a new Command&Control server  + (July 25, 2012)
• Symantec/Android.Maistealer  + (July 25, 2012)
• The Madi campaign - Part II  + (July 26, 2012)
• Rovnix.D: the code injection story  + (July 27, 2012)
• Inside Citadel 1.3.4.5 C&C & Builder - Botnet Control Panel  + (July 29, 2012)
• The ‘Madi’ infostealers - a detailed analysis  + (July 31, 2012)
• Winlock affiliate  + (August 1, 2012)
• EURO Winlocker  + (August 1, 2012)
• Gangstaservice Winlock Affiliate  + (August 1, 2012)
• New Chinese exploit pack  + (August 2, 2012)
• Flamer analysis: framework reconstruction  + (August 2, 2012)
• Tales from Crisis, Chapter 1: The dropper’s box of tricks  + (August 6, 2012)
• Harvesting data on the Xarvester botmaster  + (August 6, 2012)
• Nepalese government websites compromised to serve Zegost RAT  + (August 8, 2012)
• Analysis of the Finfisher lawful interception malware  + (August 8, 2012)
• Gauss: Nation-state cyber-surveillance meets banking Trojan  + (August 9, 2012)
• Dorifel crypto malware paralyzes Dutch companies and public sector  + (August 9, 2012)
• Gauss: abnormal distribution  + (August 9, 2012)
• Tilon-son of Silon  + (August 9, 2012)
• Dorifel is much bigger than expected and it’s still active and growing!  + (August 10, 2012)

• De code van Dorifel nader bekeken  + (August 11, 2012)
• Dorifel virus gereed voor Nederlandse banking phishing  + (August 11, 2012)
• Joint strike force against Dorifel  + (August 11, 2012)

• Dorifel/Quervar: the support scammer’s secret weapon  + (August 13, 2012)
• Win32/Gataka banking Trojan - Detailed analysis  + (August 14, 2012)
• Crypto experts called on to crack cyberspy tool's encryption  + (August 14, 2012)
• What’s the buzz with Bafruz  + (August 14, 2012)
• ZACCESS/SIREFEF arrives with new infection technique  + (August 14, 2012)
• Interconnection of Gauss with Stuxnet, Duqu & Flame  + (August 15, 2012)
• Malware analysis tutorial 32: exploration of botnet client  + (August 15, 2012)
• Analyzing a new exploit pack  + (August 15, 2012)
• New virus SMSZombie.A discovered by TrustGo Security Labs  + (August 15, 2012)
• Spam botnets: The fall of Grum and the rise of Festi  + (August 16, 2012)
• Disttrack sabotage malware wipes data at unnamed Middle East energy organization  + (August 16, 2012)
• Shamoon the wiper - copycats at work  + (August 16, 2012)
• Saudi Aramco hit by computer virus  + (August 16, 2012)
• W32.Changeup: how the worm was created  + (August 16, 2012)
• Inside Upas Kit (1.0.1.1) aka Rombrast C&C - Botnet Control Panel  + (August 16, 2012)
• Disttrack malware overwrites files, infects MBR  + (August 17, 2012)
• Necurs Quick Analysis  + (August 17, 2012)
• Targeted destructive malware explained: Troj/Mdrop-ELD  + (August 17, 2012)
• Ransom.II - UGC payment for USA - Windows Genuine impersonation for DE  + (August 18, 2012)
• Crisis for Windows sneaks onto virtual machines  + (August 20, 2012)
• Tales from Crisis, Chapter 2: Backdoor’s first steps  + (August 20, 2012)
• The “Hikit” rootkit: advanced and persistent attack techniques (part 1)  + (August 20, 2012)
• Shamoon the Wiper in details  + (August 21, 2012)
• Quervar – Induc.C reincarnate  + (August 21, 2012)