]> 2026-10-24T00:00:03+00:00 Publications 14 en 2014-11-29T16:19:36Z 2456991.1802778 Publications "Crypto Ransomware" CTB-Locker (Critroni.A) on the rise 0 en "Crypto Ransomware" CTB-Locker (Critroni.A) on the rise "NetTraveler is Running!" - Red Star APT attacks compromise high-profile victims 0 en "NetTraveler is Running!" - Red Star APT attacks compromise high-profile victims "njRAT" Uncovered 0 en "njRAT" Uncovered 'Tigger' trojan keeps security researchers hopping 0 en 'Tigger' trojan keeps security researchers hopping 1940 IPs for a BHEK/ULocker server - Nexcess-Net 0 en 1940 IPs for a BHEK/ULocker server - Nexcess-Net A DDoS family affair: Dirt Jumper bot family continues to evolve 0 en A DDoS family affair: Dirt Jumper bot family continues to evolve A Foray into Conficker’s Logic and Rendezvous Points 0 en A Foray into Conficker’s Logic and Rendezvous Points A ScarePakage variant is targeting more countries : impersonating Europol and AFP 0 en A ScarePakage variant is targeting more countries : impersonating Europol and AFP A case study on Storm worm 0 en A case study on Storm worm A chat with NGR Bot 0 en A chat with NGR Bot A new iteration of the TDSS/TDL-4 malware using DGA-based command and control 0 en A new iteration of the TDSS/TDL-4 malware using DGA-based command and control A peek inside the Darkness (Optima) DDoS Bot 0 en A peek inside the Darkness (Optima) DDoS Bot A peek inside the PickPocket botnet 0 en A peek inside the PickPocket botnet A quick update on spambot Kelihos 0 en A quick update on spambot Kelihos A study of the Ilomo / Clampi botnet 0 en A study of the Ilomo / Clampi botnet A study on botnet detection techniques 0 en A study on botnet detection techniques APT1: technical backstage 0 en APT1: technical backstage AbaddonPOS: A new point of sale threat linked to Vawtrak 0 en AbaddonPOS: A new point of sale threat linked to Vawtrak Acquisition and analysis of volatile memory from Android devices 0 en Acquisition and analysis of volatile memory from Android devices Actually, my name is Duqu - Stuxnet is my middle name 0 en Actually, my name is Duqu - Stuxnet is my middle name Adobe Flash Player 0-day and HackingTeam's Remote Control System 0 en Adobe Flash Player 0-day and HackingTeam's Remote Control System Adrenalin botnet. The trend marks the Russian crimeware 0 en Adrenalin botnet. The trend marks the Russian crimeware Advancing the fight against botnets with consumer notifications 0 en Advancing the fight against botnets with consumer notifications Aldi Bot - bka.de DDoS 0 en Aldi Bot - bka.de DDoS Alina: casting a shadow on POS 0 en Alina: casting a shadow on POS Alina: following the shadow part 1 0 en Alina: following the shadow part 1 Alina: following the shadow part 2 0 en Alina: following the shadow part 2 All-in-one malware: an overview of Sality 0 en All-in-one malware: an overview of Sality An Analysis of the iKeeB (duh) iPhone botnet (Worm) 0 en An Analysis of the iKeeB (duh) iPhone botnet (Worm) An advanced hybrid peer-to-peer botnet 0 en An advanced hybrid peer-to-peer botnet An analysis of Dorkbot’s infection vectors (part 2) 0 en An analysis of Dorkbot’s infection vectors (part 2) An analysis of the cross-platform backdoor NetWeirdRC 0 en An analysis of the cross-platform backdoor NetWeirdRC An analysis of underground forums 0 en An analysis of underground forums An encounter with trojan Nap 0 en An encounter with trojan Nap An evaluation of current and future botnet defences 0 en An evaluation of current and future botnet defences An interesting case of JRE sandbox breach (CVE-2012-0507) 0 en An interesting case of JRE sandbox breach (CVE-2012-0507) An internet census taken by an illegal botnet – A qualitative assessment of published measurements 0 en An internet census taken by an illegal botnet – A qualitative assessment of published measurements An overnight sensation — CoreBot returns as a full-fledged financial malware 0 en An overnight sensation — CoreBot returns as a full-fledged financial malware An overview of exploit packs 0 en An overview of exploit packs An overview of messaging botnets 0 en An overview of messaging botnets Analyse de Xtreme RAT 0 en Analyse de Xtreme RAT Analyse et poncage du botnet HerpesNet 0 en Analyse et poncage du botnet HerpesNet Analyse of the sample cdorked.A 0 en Analyse of the sample cdorked.A Analyse statique de Duqu stage 1 0 en Analyse statique de Duqu stage 1 Analyse statique de Duqu stage 2 0 en Analyse statique de Duqu stage 2 Analysis of DarkMegi aka NpcDark 0 en Analysis of DarkMegi aka NpcDark Analysis of TDL4 0 en Analysis of TDL4 Analysis of Ysreef (a variant of Tobfy) 0 en Analysis of Ysreef (a variant of Tobfy) Analysis of a PlugX malware variant used for targeted attacks 0 en Analysis of a PlugX malware variant used for targeted attacks Analysis of a VBScript bot 0 en Analysis of a VBScript bot Analysis of a stage 3 Miniduke malware sample 0 en Analysis of a stage 3 Miniduke malware sample Analysis of a “/0” stealth scan from a botnet 0 en Analysis of a “/0” stealth scan from a botnet Analysis of functions used to encode strings in Flame (GDB script) 0 en Analysis of functions used to encode strings in Flame (GDB script) Analysis of ngrBot 0 en Analysis of ngrBot Analysis of the Finfisher lawful interception malware 0 en Analysis of the Finfisher lawful interception malware Analysis of the malware of Red October - Part 1 0 en Analysis of the malware of Red October - Part 1 Analysis of the malware of Red October - Part 2 0 en Analysis of the malware of Red October - Part 2 Analysis: Malware Win32/Rimecud.B 0 en Analysis: Malware Win32/Rimecud.B Analyzing a new exploit pack 0 en Analyzing a new exploit pack Anaru malware now live and ready to steal 0 en Anaru malware now live and ready to steal And real name of Magnitude is.... 0 en And real name of Magnitude is.... Android Marcher now marching via porn sites 0 en Android Marcher now marching via porn sites Android RATs branch out with Dendroid 0 en Android RATs branch out with Dendroid Android malware pairs man-in-the-middle with remote-controlled banking trojan 0 en Android malware pairs man-in-the-middle with remote-controlled banking trojan Android trojan used to create simple SMS spam botnet 0 en Android trojan used to create simple SMS spam botnet Android.Bmaster: A million-dollar mobile botnet 0 en Android.Bmaster: A million-dollar mobile botnet Android.Counterclank found in official Android market 0 en Android.Counterclank found in official Android market Andromeda 2.7 features 0 en Andromeda 2.7 features Angler Exploit Kit – Operating at the Cutting Edge 0 en Angler Exploit Kit – Operating at the Cutting Edge Anonymous supporters tricked into installing ZeuS trojan 0 en Anonymous supporters tricked into installing ZeuS trojan Another family of DDoS bots: Avzhan 0 en Another family of DDoS bots: Avzhan Anunak:APT against financial institutions 0 en Anunak:APT against financial institutions Análisis del comportamiento de VOlk y sus funcionalidades 0 en Análisis del comportamiento de VOlk y sus funcionalidades Apache binary backdoors on Cpanel-based servers 0 en Apache binary backdoors on Cpanel-based servers Apple releases Java update; includes fix for vulnerability exploited by Flashback malware 0 en Apple releases Java update; includes fix for vulnerability exploited by Flashback malware Apple took 3 years to fix Finfisher trojan hole 0 en Apple took 3 years to fix Finfisher trojan hole Apple zombie malware 'NetWeird' rummages for browser and email passwords 0 en Apple zombie malware 'NetWeird' rummages for browser and email passwords Armenian Bredolab creator jailed for computer sabotage 0 en Armenian Bredolab creator jailed for computer sabotage Attack on Zygote: a new twist in the evolution of mobile threats 0 en Attack on Zygote: a new twist in the evolution of mobile threats Attackers place Command and Control servers inside enterprise walls 0 en Attackers place Command and Control servers inside enterprise walls Attention! All data on your hardrive is encrypted 0 en Attention! All data on your hardrive is encrypted AutoIT ransomware 0 en AutoIT ransomware Avalanche phishers migrate to ZeuS 0 en Avalanche phishers migrate to ZeuS Avatar rootkit: the continuing saga 0 en Avatar rootkit: the continuing saga Back to Stuxnet: the missing link 0 en Back to Stuxnet: the missing link Backdoor uses Evernote as command and control server 0 en Backdoor uses Evernote as command and control server Backdoor:Win32/Caphaw.A 0 en Backdoor:Win32/Caphaw.A Banking trojan Dridex uses macros for infection 0 en Banking trojan Dridex uses macros for infection BareBox: efficient malware analysis on bare-metal 0 en BareBox: efficient malware analysis on bare-metal Battling the Rustock threat 0 en Battling the Rustock threat Battling the Zbot threat 0 en Battling the Zbot threat Behind the Captcha or Inside Blackhole Exploit Kit 2.0 - Exploit Kit Administration Panel 0 en Behind the Captcha or Inside Blackhole Exploit Kit 2.0 - Exploit Kit Administration Panel Bitcrypt broken 0 en Bitcrypt broken Black Dragon: "... and all will burn beneath the shadow of my wings" 0 en Black Dragon: "... and all will burn beneath the shadow of my wings" BlackEnergy competitor – The 'Darkness' DDoS bot 0 en BlackEnergy competitor – The 'Darkness' DDoS bot Blackhole & Cridex: season 2 episode 1: Intuit spam & SSL traffic analysis 0 en Blackhole & Cridex: season 2 episode 1: Intuit spam & SSL traffic analysis Blackhole Ramnit - samples and analysis 0 en Blackhole Ramnit - samples and analysis Blackhole and Cool Exploit kits nearly extinct 0 en Blackhole and Cool Exploit kits nearly extinct Blackhole exploit kit v2 on the rise 0 en Blackhole exploit kit v2 on the rise Blackhole, CVE-2012-0507 and Carberp 0 en Blackhole, CVE-2012-0507 and Carberp Bleeding Life Exploit Pack 0 en Bleeding Life Exploit Pack Bot Roast II nets 8 individuals 0 en Bot Roast II nets 8 individuals Bot herders build newer versions of previous botnet Waledac 0 en Bot herders build newer versions of previous botnet Waledac Bot of the day: Ramnit/Ninmul 0 en Bot of the day: Ramnit/Ninmul Bot shopping with my wife 0 en Bot shopping with my wife BotGrep: finding P2P bots with structured graph analysis 0 en BotGrep: finding P2P bots with structured graph analysis BotMiner: clustering analysis of network traffic for protocol- and structure-independent botnet detection 0 en BotMiner: clustering analysis of network traffic for protocol- and structure-independent botnet detection BoteAR: a “social botnet”- What are we talking about 0 en BoteAR: a “social botnet”- What are we talking about Botnet command server hidden in Tor 0 en Botnet command server hidden in Tor Botnet construction, control and concealment 0 en Botnet construction, control and concealment Botnet operation disabled 0 en Botnet operation disabled Botnet shutdown success story - again: disabling the new Hlux/Kelihos botnet 0 en Botnet shutdown success story - again: disabling the new Hlux/Kelihos botnet Botnet shutdown success story: how Kaspersky Lab disabled the Hlux/Kelihos botnet 0 en Botnet shutdown success story: how Kaspersky Lab disabled the Hlux/Kelihos botnet Botnet: classification, attacks, detection, tracing, and preventive measures 0 en Botnet: classification, attacks, detection, tracing, and preventive measures Botnets on discount! 0 en Botnets on discount! Boxer SMS trojan: malware as a global service 0 en Boxer SMS trojan: malware as a global service Bredolab botmaster ‘Birdie’ still at large 0 en Bredolab botmaster ‘Birdie’ still at large Bredolab severely injured but not dead 0 en Bredolab severely injured but not dead Buh-bye Beebone! Law enforcement kills polymorphic virus-spreading botnet 0 en Buh-bye Beebone! Law enforcement kills polymorphic virus-spreading botnet CTB-Locker is back: the web server edition 0 en CTB-Locker is back: the web server edition CVE-2012-4681 - On its way to Sakura Exploit Kit too 0 en CVE-2012-4681 - On its way to Sakura Exploit Kit too CVE-2012-4681 - Redkit Exploit Kit - I want Porche Turbo 0 en CVE-2012-4681 - Redkit Exploit Kit - I want Porche Turbo CVE-2012-4681 - Связка Sweet Orange 0 en CVE-2012-4681 - Связка Sweet Orange CVE-2012-5076 - Massively adopted - Blackhole update to 2.0.1 0 en CVE-2012-5076 - Massively adopted - Blackhole update to 2.0.1 CVE-2013-1493 (jre17u15 - jre16u41) integrating exploit kits 0 en CVE-2013-1493 (jre17u15 - jre16u41) integrating exploit kits CVE-2013-2465/CVE-2013-2471/CVE-2013-2463 integrating Exploit Kits -- jre7u21 CVE- jre6u45 and earlier 0 en CVE-2013-2465/CVE-2013-2471/CVE-2013-2463 integrating Exploit Kits -- jre7u21 CVE- jre6u45 and earlier CVE-2013-5330 (Flash) in an unknown Exploit Kit fed by high rank websites 0 en CVE-2013-5330 (Flash) in an unknown Exploit Kit fed by high rank websites CVE-2015-0311 (Flash up to 16.0.0.287) integrating Exploit Kits 0 en CVE-2015-0311 (Flash up to 16.0.0.287) integrating Exploit Kits Carbanak/Anunak in the BlueCoat malware analysis appliance 0 en Carbanak/Anunak in the BlueCoat malware analysis appliance Carbanak: Multi-million dollar cybercrime gang focuses on banks rather than their customers 0 en Carbanak: Multi-million dollar cybercrime gang focuses on banks rather than their customers Carberp + BlackHole = growing fraud incidents 0 en Carberp + BlackHole = growing fraud incidents Carberp - a modular information stealing trojan 0 en Carberp - a modular information stealing trojan Carberp gang evolution: CARO 2012 presentation 0 en Carberp gang evolution: CARO 2012 presentation Carberp reverse engineering 0 en Carberp reverse engineering Carberp steals e-cash vouchers from Facebook users 0 en Carberp steals e-cash vouchers from Facebook users Carberp, the renaissance ? 0 en Carberp, the renaissance ? Carberp-based trojan attacking SAP 0 en Carberp-based trojan attacking SAP Carberp-in-the-Mobile 0 en Carberp-in-the-Mobile Carberp: Silent trojan, eventual successor to ZeuS 0 en Carberp: Silent trojan, eventual successor to ZeuS Carberp: it’s not over yet 0 en Carberp: it’s not over yet Case study of the Miner botnet 0 en Case study of the Miner botnet Cerber Dominates Ransomware Landscape After Locky's Demise 0 en Cerber Dominates Ransomware Landscape After Locky's Demise Chameleon botnet grabbed $6m A MONTH from online ad-slingers 0 en Chameleon botnet grabbed $6m A MONTH from online ad-slingers Chapro.A source code 0 en Chapro.A source code Chasing cybercrime: network insights of Dyre and Dridex trojan bankers 0 en Chasing cybercrime: network insights of Dyre and Dridex trojan bankers China targets macs used by NGOs 0 en China targets macs used by NGOs Cimbot - A technical analysis 0 en Cimbot - A technical analysis Citadel : le fichier de configuration 0 en Citadel : le fichier de configuration Citadel V1.3.5.1: enter the fort’s dungeons 0 en Citadel V1.3.5.1: enter the fort’s dungeons Citadel ZeuS bot 0 en Citadel ZeuS bot Citadel plitfi botnet report 0 en Citadel plitfi botnet report Citadel trojan malware analysis 0 en Citadel trojan malware analysis Citadel trojan touts trouble-ticket system 0 en Citadel trojan touts trouble-ticket system Citadel: a cyber-criminal’s ultimate weapon? 0 en Citadel: a cyber-criminal’s ultimate weapon? Clampi/Ligats/Ilomo trojan 0 en Clampi/Ligats/Ilomo trojan Collateral damage: Microsoft hits security researchers along with Citadel 0 en Collateral damage: Microsoft hits security researchers along with Citadel Combatting point-of-sale malware 0 en Combatting point-of-sale malware Conficker working group: lessons learned 0 en Conficker working group: lessons learned Confidential documents from Japanese politics stolen by malware 0 en Confidential documents from Japanese politics stolen by malware Cool EK : "Hello my friend..." CVE-2012-5076 0 en Cool EK : "Hello my friend..." CVE-2012-5076 Cool Exploit Kit - A new Browser Exploit Pack on the Battlefield with a "Duqu" like font drop 0 en Cool Exploit Kit - A new Browser Exploit Pack on the Battlefield with a "Duqu" like font drop Cool exploit kit - URL structure 0 en Cool exploit kit - URL structure Coordinated DDoS attack during Russian Duma elections 0 en Coordinated DDoS attack during Russian Duma elections Coreflood botnet - Detection and remediation 0 en Coreflood botnet - Detection and remediation Covert channels over social networks 0 en Covert channels over social networks Cracking down on botnets 0 en Cracking down on botnets Cracking into the new P2P variant of Zeusbot/Spyeye 0 en Cracking into the new P2P variant of Zeusbot/Spyeye Cracking the encrypted C&C protocol of the ZeroAccess botnet 0 en Cracking the encrypted C&C protocol of the ZeroAccess botnet Crisis for Windows sneaks onto virtual machines 0 en Crisis for Windows sneaks onto virtual machines Critroni crypto ransomware seen using Tor for command and control 0 en Critroni crypto ransomware seen using Tor for command and control Cross-platform Frutas RAT builder and back door 0 en Cross-platform Frutas RAT builder and back door CryptXXX: new ransomware from the actors behind Reveton, dropping via Angler 0 en CryptXXX: new ransomware from the actors behind Reveton, dropping via Angler Crypto breakthrough shows Flame was designed by world-class scientists 0 en Crypto breakthrough shows Flame was designed by world-class scientists Crypto experts called on to crack cyberspy tool's encryption 0 en Crypto experts called on to crack cyberspy tool's encryption CryptoDefense and How Decrypt ransomware information guide and FAQ 0 en CryptoDefense and How Decrypt ransomware information guide and FAQ Cutwail drives spike in malicious HTML attachment spam 0 en Cutwail drives spike in malicious HTML attachment spam Cyber gang seeks botmasters to wage massive wave of trojan attacks against U.S. banks 0 en Cyber gang seeks botmasters to wage massive wave of trojan attacks against U.S. banks DDoS attacks: the Zemra bot 0 en DDoS attacks: the Zemra bot DDoS watch: keeping an eye on Aldi Bot 0 en DDoS watch: keeping an eye on Aldi Bot DGAs and cyber-criminals: a case study 0 en DGAs and cyber-criminals: a case study DISCLOSURE: detecting botnet command and control servers through large-scale NetFlow analysis 0 en DISCLOSURE: detecting botnet command and control servers through large-scale NetFlow analysis DNS: a botnet dialect 0 en DNS: a botnet dialect DaRK DDoSseR leads to Gh0st RAT 0 en DaRK DDoSseR leads to Gh0st RAT DarkMegi rootkit - sample (distributed via Blackhole) 0 en DarkMegi rootkit - sample (distributed via Blackhole) Darkmegi: this is not the Rootkit you’re looking for 0 en Darkmegi: this is not the Rootkit you’re looking for Darkness DDoS bot version identification guide 0 en Darkness DDoS bot version identification guide De code van Dorifel nader bekeken 0 en De code van Dorifel nader bekeken Demystifying Pobelka 0 en Demystifying Pobelka Department of Justice takes action to disable international botnet 0 en Department of Justice takes action to disable international botnet Department of Labor strategic web compromise 0 en Department of Labor strategic web compromise Detecting extended attributes (ZeroAccess) and other Frankenstein’s monsters with HMFT 0 en Detecting extended attributes (ZeroAccess) and other Frankenstein’s monsters with HMFT Detection and classification of different botnet C&C channels 0 en Detection and classification of different botnet C&C channels Dharma Ransomware Uses AV Tool to Distract from Malicious Activities 0 en Dharma Ransomware Uses AV Tool to Distract from Malicious Activities Digging inside Tinba malware - A walkthrough 0 en Digging inside Tinba malware - A walkthrough Digging into the Nitol DDoS botnet 0 en Digging into the Nitol DDoS botnet Dirt Jumper DDoS bot increasingly popular 0 en Dirt Jumper DDoS bot increasingly popular Discerning relationships: the Mexican botnet connection 0 en Discerning relationships: the Mexican botnet connection Discovered: botnet costing display advertisers over six million dollars per month 0 en Discovered: botnet costing display advertisers over six million dollars per month Disorderly conduct: localized malware impersonates the police 0 en Disorderly conduct: localized malware impersonates the police Disttrack malware overwrites files, infects MBR 0 en Disttrack malware overwrites files, infects MBR Disttrack sabotage malware wipes data at unnamed Middle East energy organization 0 en Disttrack sabotage malware wipes data at unnamed Middle East energy organization Doctor Web a détecté un botnet enrôlant plus de 550 000 Mac 0 en Doctor Web a détecté un botnet enrôlant plus de 550 000 Mac Doctor Web exposes 550 000 strong Mac botnet 0 en Doctor Web exposes 550 000 strong Mac botnet Domain generation algorithms (DGA) in stealthy malware 0 en Domain generation algorithms (DGA) in stealthy malware Dorifel crypto malware paralyzes Dutch companies and public sector 0 en Dorifel crypto malware paralyzes Dutch companies and public sector Dorifel is much bigger than expected and it’s still active and growing! 0 en Dorifel is much bigger than expected and it’s still active and growing! Dorifel virus gereed voor Nederlandse banking phishing 0 en Dorifel virus gereed voor Nederlandse banking phishing Dorifel/Quervar: the support scammer’s secret weapon 0 en Dorifel/Quervar: the support scammer’s secret weapon Dorkbot: conquistando Latinoamérica 0 en Dorkbot: conquistando Latinoamérica Dragonfly Threat Against Western Energy Suppliers 0 en Dragonfly Threat Against Western Energy Suppliers Dridex learns new trick: P2P over HTTP 0 en Dridex learns new trick: P2P over HTTP DroidLive New SMS Android Trojan 0 en DroidLive New SMS Android Trojan Duqu FAQ 0 en Duqu FAQ Dutch users served Sinowal for lunch 0 en Dutch users served Sinowal for lunch Dyre Banking Trojan 0 en Dyre Banking Trojan ESET analyzes first Android file-encrypting, TOR-enabled ransomware 0 en ESET analyzes first Android file-encrypting, TOR-enabled ransomware EURO Winlocker 0 en EURO Winlocker Egypt Finfisher intrusion tools and ethics 0 en Egypt Finfisher intrusion tools and ethics Emerging attack vectors - RSA slide deck 0 en Emerging attack vectors - RSA slide deck Encyclopedia entry: Win32/Carberp 0 en Encyclopedia entry: Win32/Carberp Encyclopedia entry: Win32/Conficker 0 en Encyclopedia entry: Win32/Conficker Encyclopedia entry: Win32/Oderoor 0 en Encyclopedia entry: Win32/Oderoor Equation: the Death Star of malware galaxy 0 en Equation: the Death Star of malware galaxy Esthost taken down - Biggest cybercriminal takedown in history 0 en Esthost taken down - Biggest cybercriminal takedown in history Etude sur le fonctionnement du Trojan.Matsnu.1 codant les données des utilisateurs 0 en Etude sur le fonctionnement du Trojan.Matsnu.1 codant les données des utilisateurs Evolution of Win32Carberp: going deeper 0 en Evolution of Win32Carberp: going deeper Exploring the market for stolen passwords 0 en Exploring the market for stolen passwords F-Secure has discovered MiniDuke malware samples in the wild 0 en F-Secure has discovered MiniDuke malware samples in the wild FAQ on Kelihos.B/Hlux.B sinkholing 0 en FAQ on Kelihos.B/Hlux.B sinkholing FBI ransomware now targeting Apple’s Mac OS X users 0 en FBI ransomware now targeting Apple’s Mac OS X users FBI shuts down Coreflood botnet, zombies transmitting financial data 0 en FBI shuts down Coreflood botnet, zombies transmitting financial data Fake FBI Ransomware analysis 0 en Fake FBI Ransomware analysis Fast look at Sundown EK 0 en Fast look at Sundown EK Fast look at an infection by a Blackhole Exploit Kit 2.0 0 en Fast look at an infection by a Blackhole Exploit Kit 2.0 Feodo - a new botnet on the rise 0 en Feodo - a new botnet on the rise Festi botnet analysis & investigation 0 en Festi botnet analysis & investigation FighterPOS: a new one-man PoS malware campaign 0 en FighterPOS: a new one-man PoS malware campaign File infector Expiro hits US, steals FTP credentials 0 en File infector Expiro hits US, steals FTP credentials First step in cross-platform Trojan bankers from Brazil done 0 en First step in cross-platform Trojan bankers from Brazil done First widespread virus cross-infection 0 en First widespread virus cross-infection Five charged in largest hacking scheme ever prosecuted in US 0 en Five charged in largest hacking scheme ever prosecuted in US Flame, Duqu and Stuxnet: in-depth code analysis of mssecmgr.ocx 0 en Flame, Duqu and Stuxnet: in-depth code analysis of mssecmgr.ocx Flame: replication via Windows Update MITM proxy 0 en Flame: replication via Windows Update MITM proxy Flamer analysis: framework reconstruction 0 en Flamer analysis: framework reconstruction Flamer: highly sophisticated and discreet threat targets the Middle East 0 en Flamer: highly sophisticated and discreet threat targets the Middle East Flamer: urgent suicide 0 en Flamer: urgent suicide Flashfake Mac OS X botnet confirmed 0 en Flashfake Mac OS X botnet confirmed Fortiguard: Android/Stiniter.A!tr 0 en Fortiguard: Android/Stiniter.A!tr From Georgia, with love Win32/Georbot 0 en From Georgia, with love Win32/Georbot From Sakura to Reveton via Smoke Bot - or a botnet distribution of Reveton 0 en From Sakura to Reveton via Smoke Bot - or a botnet distribution of Reveton Full analysis of Flame's Command & Control servers 0 en Full analysis of Flame's Command & Control servers Full analysis of Flame's command & control servers 0 en Full analysis of Flame's command & control servers Gamarue dropping Lethic bot 0 en Gamarue dropping Lethic bot GandCrab ransomware distributed by RIG and GrandSoft exploit kits 0 en GandCrab ransomware distributed by RIG and GrandSoft exploit kits Gangstaservice Winlock Affiliate 0 en Gangstaservice Winlock Affiliate Gauss: Nation-state cyber-surveillance meets banking Trojan 0 en Gauss: Nation-state cyber-surveillance meets banking Trojan Gauss: abnormal distribution 0 en Gauss: abnormal distribution Get gamed and rue the day... 0 en Get gamed and rue the day... Getting more "personal" & deeper into Cridex with parfeit credential stealer infection 0 en Getting more "personal" & deeper into Cridex with parfeit credential stealer infection Gimemo finally targeting USA with Camera Feature too 0 en Gimemo finally targeting USA with Camera Feature too Gimemo wants to play in the big league 0 en Gimemo wants to play in the big league GingerMaster Android Malware Utilizing A Root Exploit 0 en GingerMaster Android Malware Utilizing A Root Exploit Going solo: self-propagating ZBOT malware spotted 0 en Going solo: self-propagating ZBOT malware spotted Google Groups trojan 0 en Google Groups trojan Got malware? Rent an exploit service 0 en Got malware? Rent an exploit service Gumblar Google-poisoning attack morphs 0 en Gumblar Google-poisoning attack morphs Guys behind Gauss and Flame are the same 0 en Guys behind Gauss and Flame are the same HARMUR: storing and analyzing historic data on malicious domains 0 en HARMUR: storing and analyzing historic data on malicious domains HTran and the Advanced Persistent Threat 0 en HTran and the Advanced Persistent Threat Hackers are increasingly targeting IoT Devices with Mirai DDoS Malware 0 en Hackers are increasingly targeting IoT Devices with Mirai DDoS Malware Hammertoss: stealthy tactics define a Russian cyber threat group 0 en Hammertoss: stealthy tactics define a Russian cyber threat group Harnig botnet: a retreating army 0 en Harnig botnet: a retreating army Harnig is back 0 en Harnig is back Harvesting data on the Xarvester botmaster 0 en Harvesting data on the Xarvester botmaster Have we seen the end of the ZeroAccess botnet? 0 en Have we seen the end of the ZeroAccess botnet? Hello Neutrino ! (just one more Exploit Kit) 0 en Hello Neutrino ! (just one more Exploit Kit) Herpes botnet 0 en Herpes botnet HerpesNet botnet 1.7 0 en HerpesNet botnet 1.7 Hesperbot – A new, advanced banking trojan in the wild 0 en Hesperbot – A new, advanced banking trojan in the wild Hiding in plain sight: the FAKEM remote access trojan 0 en Hiding in plain sight: the FAKEM remote access trojan Hiloti: the (bot)master of disguise 0 en Hiloti: the (bot)master of disguise Hodprot: hot to bot 0 en Hodprot: hot to bot How Lockergoga took down Hydro — ransomware used in targeted attacks aimed at big business 0 en How Lockergoga took down Hydro — ransomware used in targeted attacks aimed at big business How to steal a Botnet and what can happen when you do 0 en How to steal a Botnet and what can happen when you do Hébergeurs malhonnêtes : nouvelle fermeture (3FN) 0 en Hébergeurs malhonnêtes : nouvelle fermeture (3FN) IRC bot for Android 0 en IRC bot for Android IcoScript: using webmail to control malware 0 en IcoScript: using webmail to control malware Illuminating the Etumbot APT backdoor 0 en Illuminating the Etumbot APT backdoor Industrial espionage and targeted attacks: understanding the characteristics of an escalating threat 0 en Industrial espionage and targeted attacks: understanding the characteristics of an escalating threat Infamous Skynet botnet author allegedly arrested 0 en Infamous Skynet botnet author allegedly arrested Inside Andromeda Bot v2.06 Webpanel / AKA Gamarue - Botnet Control Panel 0 en Inside Andromeda Bot v2.06 Webpanel / AKA Gamarue - Botnet Control Panel Inside Blackhole Exploits Kit v1.2.4 - Exploit Kit Control Panel 0 en Inside Blackhole Exploits Kit v1.2.4 - Exploit Kit Control Panel Inside Carberp botnet 0 en Inside Carberp botnet Inside Citadel 1.3.4.5 C&C & Builder - Botnet Control Panel 0 en Inside Citadel 1.3.4.5 C&C & Builder - Botnet Control Panel Inside Impact exploit kit 0 en Inside Impact exploit kit Inside Pony 1.7 / Fareit C&C - Botnet Control Panel 0 en Inside Pony 1.7 / Fareit C&C - Botnet Control Panel Inside Smoke Bot - Botnet Control Panel 0 en Inside Smoke Bot - Botnet Control Panel Inside Smoke Bot - botnet control panel 0 en Inside Smoke Bot - botnet control panel Inside Styx exploit kit control panel 0 en Inside Styx exploit kit control panel Inside Ulocker 0 en Inside Ulocker Inside Upas Kit (1.0.1.1) aka Rombrast C&C - Botnet Control Panel 0 en Inside Upas Kit (1.0.1.1) aka Rombrast C&C - Botnet Control Panel Inside an APT campaign with multiple targets in India and Japan 0 en Inside an APT campaign with multiple targets in India and Japan Inside the Grum botnet 0 en Inside the Grum botnet Inside the world of the Citadel trojan 0 en Inside the world of the Citadel trojan Inside view of Lyposit aka (for its friends) Lucky LOCKER 0 en Inside view of Lyposit aka (for its friends) Lucky LOCKER Insights from the analysis of the Mariposa botnet 0 en Insights from the analysis of the Mariposa botnet Insights into Win32/Bradop 0 en Insights into Win32/Bradop Interconnection of Gauss with Stuxnet, Duqu & Flame 0 en Interconnection of Gauss with Stuxnet, Duqu & Flame International cyber ring that infected millions of computers dismantled 0 en International cyber ring that infected millions of computers dismantled Internet Census 2012, port scanning /0 using insecure embedded devices 0 en Internet Census 2012, port scanning /0 using insecure embedded devices Introducing Ponmocup-Finder 0 en Introducing Ponmocup-Finder It’s 2012 and Armageddon has arrived 0 en It’s 2012 and Armageddon has arrived It’s not the end of the world: DarkComet misses by a mile 0 en It’s not the end of the world: DarkComet misses by a mile Java Runtime Environment 1.7 Zero-Day Exploit Delivers Backdoor 0 en Java Runtime Environment 1.7 Zero-Day Exploit Delivers Backdoor Java Zero-Days and the Blackhole Exploit Kit 0 en Java Zero-Days and the Blackhole Exploit Kit Joint strike force against Dorifel 0 en Joint strike force against Dorifel Kaptoxa point-of-sale compromise 0 en Kaptoxa point-of-sale compromise Karagny.L unpack 0 en Karagny.L unpack Kaspersky Lab et Seculert annoncent la récente découverte de « Madi », une nouvelle attaque de cyberespionnage au Moyen‑Orient 0 en Kaspersky Lab et Seculert annoncent la récente découverte de « Madi », une nouvelle attaque de cyberespionnage au Moyen‑Orient Kaspersky security bulletin 2015. Overall statistics for 2015 0 en Kaspersky security bulletin 2015. Overall statistics for 2015 Kelihos back in town using Fast Flux 0 en Kelihos back in town using Fast Flux Kelihos botnet appears again with new variant 0 en Kelihos botnet appears again with new variant Kelihos botnet trying to expand by harnessing Russian national sentiments 0 en Kelihos botnet trying to expand by harnessing Russian national sentiments Kelihos is dead. Long live Kelihos 0 en Kelihos is dead. Long live Kelihos Kelihos is dead… No wait… Long live Kelihos! Again! 0 en Kelihos is dead… No wait… Long live Kelihos! Again! Kelihos/Hlux botnet returns with new techniques 0 en Kelihos/Hlux botnet returns with new techniques Kelihos: not alien resurrection, more attack of the clones 0 en Kelihos: not alien resurrection, more attack of the clones King of spam:Festi botnet analysis 0 en King of spam:Festi botnet analysis Know your enemy: tracking botnets 0 en Know your enemy: tracking botnets Koobface botnet master KrotReal back in business, distributes ransomware and promotes BHSEO service/product 0 en Koobface botnet master KrotReal back in business, distributes ransomware and promotes BHSEO service/product Koobface, un écosystème cybercriminel ou le conte des Mille et une nuits ? 0 en Koobface, un écosystème cybercriminel ou le conte des Mille et une nuits ? Kore exploit kit 0 en Kore exploit kit Kraken botnet infiltration 0 en Kraken botnet infiltration Large-scale analysis of malware downloaders 0 en Large-scale analysis of malware downloaders Latest Kelihos botnet shut down live at RSA Conference 2013 0 en Latest Kelihos botnet shut down live at RSA Conference 2013 Latest SpyEye botnet active and cheaper 0 en Latest SpyEye botnet active and cheaper Latin American banks under fire from the Mexican VOlk-botnet 0 en Latin American banks under fire from the Mexican VOlk-botnet Le dropper de CTB-Locker 0 en Le dropper de CTB-Locker Learning stateful models for network honeypots 0 en Learning stateful models for network honeypots Legal implications of countering botnets 0 en Legal implications of countering botnets Leouncia - Yet another backdoor 0 en Leouncia - Yet another backdoor Leouncia - Yet another backdoor - Part 2 0 en Leouncia - Yet another backdoor - Part 2 Library file in certain Android apps connects to C&C servers 0 en Library file in certain Android apps connects to C&C servers Lifting the lid on the Redkit exploit kit (Part 1) 0 en Lifting the lid on the Redkit exploit kit (Part 1) Lights Out: Dragonfly is on the move 0 en Lights Out: Dragonfly is on the move Linux/Cdorked.A: New Apache backdoor being used in the wild to serve Blackhole 0 en Linux/Cdorked.A: New Apache backdoor being used in the wild to serve Blackhole Live Coronavirus Map Used to Spread Malware 0 en Live Coronavirus Map Used to Spread Malware Locky Ransomware switches to the Lukitus extension for Encrypted Files 0 en Locky Ransomware switches to the Lukitus extension for Encrypted Files LogPOS - new point of sale malware using mailslots 0 en LogPOS - new point of sale malware using mailslots Long life to Kelihos! 0 en Long life to Kelihos! Look what I found: it's a Pony! 0 en Look what I found: it's a Pony! MDK: the largest mobile botnet in China 0 en MDK: the largest mobile botnet in China MMD-0056-2016 - Linux/Mirai, how an old ELF malcode is recycled 0 en MMD-0056-2016 - Linux/Mirai, how an old ELF malcode is recycled MP-DDoser: A rapidly improving DDoS threat 0 en MP-DDoser: A rapidly improving DDoS threat MP-DDoser:Monitoring a rapidly improving DDoS threat 0 en MP-DDoser:Monitoring a rapidly improving DDoS threat MSIE 0-day exploit CVE-2014-0322 - Possibly targeting French aerospace association 0 en MSIE 0-day exploit CVE-2014-0322 - Possibly targeting French aerospace association MSRT April 2012: Win32/Claretore 0 en MSRT April 2012: Win32/Claretore MSRT April 2014 – Ramdo 0 en MSRT April 2014 – Ramdo MSRT June '12 - cleanup on aisle one 0 en MSRT June '12 - cleanup on aisle one MSRT March 2012: breaking bad 0 en MSRT March 2012: breaking bad MSRT November '12 - Weelsof around the world 0 en MSRT November '12 - Weelsof around the world MSRT September '12 - Medfos, hijacking your daily search 0 en MSRT September '12 - Medfos, hijacking your daily search MSRT march: three hioles in one 0 en MSRT march: three hioles in one Maazben: best of both worlds 0 en Maazben: best of both worlds Mac BackDoor.Wirenet.1 config extractor 0 en Mac BackDoor.Wirenet.1 config extractor Mac Flashback exploiting unpatched Java vulnerability 0 en Mac Flashback exploiting unpatched Java vulnerability Mac spyware found at Oslo Freedom Forum 0 en Mac spyware found at Oslo Freedom Forum Madi is back - New Tricks and a new Command&Control server 0 en Madi is back - New Tricks and a new Command&Control server Mahdi malware finds 150 new targets including U.S. and Germany, gets more evasive 0 en Mahdi malware finds 150 new targets including U.S. and Germany, gets more evasive Major shift in strategy for ZeroAccess rootkit malware, as it shifts to user-mode 0 en Major shift in strategy for ZeroAccess rootkit malware, as it shifts to user-mode Malicious Apache module injects Iframes 0 en Malicious Apache module injects Iframes Malicious Apache module used for content injection: Linux/Chapro.A 0 en Malicious Apache module used for content injection: Linux/Chapro.A Malware 2 - from infection to persistence 0 en Malware 2 - from infection to persistence Malware Memory Analysis - Volatility 0 en Malware Memory Analysis - Volatility Malware Uses Google Go Language 0 en Malware Uses Google Go Language Malware analysis Rannoh/Matsnu 0 en Malware analysis Rannoh/Matsnu Malware analysis of the Lurk downloader 0 en Malware analysis of the Lurk downloader Malware analysis tutorial 32: exploration of botnet client 0 en Malware analysis tutorial 32: exploration of botnet client Malware attacking POS systems 0 en Malware attacking POS systems Malware discovered developed with Google's "Go" programming language 0 en Malware discovered developed with Google's "Go" programming language Malware evolving to defeat anti-DDoS services like CloudFlare? 0 en Malware evolving to defeat anti-DDoS services like CloudFlare? Malware for everyone - Aldi Bot at a discount price 0 en Malware for everyone - Aldi Bot at a discount price Malware hunting with the Sysinternals tools 0 en Malware hunting with the Sysinternals tools Malware pandemics 0 en Malware pandemics Malware targeting Windows 8 uses Google Docs 0 en Malware targeting Windows 8 uses Google Docs Mariposa botnet 'mastermind' jailed in Slovenia 0 en Mariposa botnet 'mastermind' jailed in Slovenia Massive Drop in number of active Zeus C&C servers 0 en Massive Drop in number of active Zeus C&C servers Massive search fraud botnet seized by Microsoft and Symantec 0 en Massive search fraud botnet seized by Microsoft and Symantec Mastermind behind Gozi bank malware charged along with two others 0 en Mastermind behind Gozi bank malware charged along with two others McAfee Labs threat advisory : W32.Pinkslipbot 0 en McAfee Labs threat advisory : W32.Pinkslipbot Measuring and detecting Fast-Flux service networks 0 en Measuring and detecting Fast-Flux service networks Measuring and detecting malware downloads in live network traffic 0 en Measuring and detecting malware downloads in live network traffic Measuring botnet populations 0 en Measuring botnet populations Meet "Red Dot exploit toolkit" 0 en Meet "Red Dot exploit toolkit" Meet CritXPack (Previously Vintage Pack) 0 en Meet CritXPack (Previously Vintage Pack) Meet ProPack Exploit Pack - yes that's a lot of pack 0 en Meet ProPack Exploit Pack - yes that's a lot of pack Meet ‘Flame’, the massive spy malware infiltrating Iranian computers 0 en Meet ‘Flame’, the massive spy malware infiltrating Iranian computers Members of the largest criminal group engaged in online banking fraud are detained 0 en Members of the largest criminal group engaged in online banking fraud are detained Mexican Twitter-controlled botnet unpicked 0 en Mexican Twitter-controlled botnet unpicked Microsoft and Symantec take down Bamital botnet that hijacks online searches 0 en Microsoft and Symantec take down Bamital botnet that hijacks online searches Microsoft and financial services industry leaders target cybercriminal operations from ZeuS botnets 0 en Microsoft and financial services industry leaders target cybercriminal operations from ZeuS botnets Microsoft disrupts the emerging Nitol botnet being spread through an unsecure supply chain 0 en Microsoft disrupts the emerging Nitol botnet being spread through an unsecure supply chain Microsoft neutralizes Kelihos botnet, names defendant in case 0 en Microsoft neutralizes Kelihos botnet, names defendant in case Microsoft partners with Interpol, industry to disrupt global malware attack affecting more than 770,000 PCs in past six months 0 en Microsoft partners with Interpol, industry to disrupt global malware attack affecting more than 770,000 PCs in past six months Microsoft security updates January 2016 0 en Microsoft security updates January 2016 Miniduke 0 en Miniduke MoVP 1.3 Desktops, heaps, and ransomware 0 en MoVP 1.3 Desktops, heaps, and ransomware Mocbot spam analysis 0 en Mocbot spam analysis Monkif botnet hides commands in JPEGs 0 en Monkif botnet hides commands in JPEGs More Flame/Skywiper CNC behavior uncovered 0 en More Flame/Skywiper CNC behavior uncovered More details of the Dorifel servers 0 en More details of the Dorifel servers Morto worm sets a (DNS) record 0 en Morto worm sets a (DNS) record Mpack installs ultra-invisible trojan 0 en Mpack installs ultra-invisible trojan Multitenancy Botnets thwart threat analysis 0 en Multitenancy Botnets thwart threat analysis Mysterious Avatar rootkit with API, SDK, and Yahoo Groups for C&C communication 0 en Mysterious Avatar rootkit with API, SDK, and Yahoo Groups for C&C communication NASK shuts down dangerous Virut botnet domains 0 en NASK shuts down dangerous Virut botnet domains NGRBot spreads via chat 0 en NGRBot spreads via chat Necurs Quick Analysis 0 en Necurs Quick Analysis Neosploit gets Java 0-Day 0 en Neosploit gets Java 0-Day Nepalese government websites compromised to serve Zegost RAT 0 en Nepalese government websites compromised to serve Zegost RAT NetTraveler APT gets a makeover for 10th birthday 0 en NetTraveler APT gets a makeover for 10th birthday NetTraveler is back: the 'Red Star' APT returns with new tricks 0 en NetTraveler is back: the 'Red Star' APT returns with new tricks New Apple Mac trojan called OSX/Crisis discovered 0 en New Apple Mac trojan called OSX/Crisis discovered New Chinese exploit pack 0 en New Chinese exploit pack New CryptoLocker spreads via removable drives 0 en New CryptoLocker spreads via removable drives New Duqu sample found in the wild 0 en New Duqu sample found in the wild New GamaPoS malware piggybacks on Andromeda botnet; spreads in 13 US states 0 en New GamaPoS malware piggybacks on Andromeda botnet; spreads in 13 US states New IE Zero-Day used in targeted attacks 0 en New IE Zero-Day used in targeted attacks New IceIX (ZeuS variant) changes its encryption method (again) 0 en New IceIX (ZeuS variant) changes its encryption method (again) New Mac malware discovered on attendee computer at anti-surveillance workshop 0 en New Mac malware discovered on attendee computer at anti-surveillance workshop New Mahdi updates, new C2 server 0 en New Mahdi updates, new C2 server New POS malware emerges - Punkey 0 en New POS malware emerges - Punkey New PoS malware “Backoff” targets US 0 en New PoS malware “Backoff” targets US New RATs emerge from leaked Njw0rm source code 0 en New RATs emerge from leaked Njw0rm source code New Thor botnet nearly ready to be sold, price $8,000 0 en New Thor botnet nearly ready to be sold, price $8,000 New Xtreme RAT attacks US, Israel, and other foreign governments 0 en New Xtreme RAT attacks US, Israel, and other foreign governments New crimeware attacks LatAm bank users 0 en New crimeware attacks LatAm bank users New crypto-ransomware JIGSAW plays nasty games 0 en New crypto-ransomware JIGSAW plays nasty games New crypto-ransomware emerge in the wild 0 en New crypto-ransomware emerge in the wild New point-of-sale malware distributed by Andromeda botnet 0 en New point-of-sale malware distributed by Andromeda botnet New ransomware plays its victims an audio file, over and over and over… 0 en New ransomware plays its victims an audio file, over and over and over… New trojan found: Admin.HLP leaks organizations data 0 en New trojan found: Admin.HLP leaks organizations data New virus SMSZombie.A discovered by TrustGo Security Labs 0 en New virus SMSZombie.A discovered by TrustGo Security Labs NewPosThings has new PoS things 0 en NewPosThings has new PoS things Newly detected Crisis virus infects Windows, Macs and virtual machines 0 en Newly detected Crisis virus infects Windows, Macs and virtual machines Newly launched ‘HTTP-based botnet setup as a service’ empowers novice cybercriminals with bulletproof hosting capabilities 0 en Newly launched ‘HTTP-based botnet setup as a service’ empowers novice cybercriminals with bulletproof hosting capabilities Ngrbot steals information and mine Bitcoins 0 en Ngrbot steals information and mine Bitcoins NitlovePOS: another new POS malware 0 en NitlovePOS: another new POS malware Nitol DDoS botnet discovered in China 0 en Nitol DDoS botnet discovered in China NjRAT & H-Worm variant infections continue to rise 0 en NjRAT & H-Worm variant infections continue to rise Not just a one-trick PonyDOS 0 en Not just a one-trick PonyDOS Now you Z-(eus) it, now you don’t: ZeuS bots silently upgraded to Citadel 0 en Now you Z-(eus) it, now you don’t: ZeuS bots silently upgraded to Citadel Nuevo botnet contra Mexico: Karn!v0r3x 0 en Nuevo botnet contra Mexico: Karn!v0r3x Nymaim - obfuscation chronicles 0 en Nymaim - obfuscation chronicles OSX Kitmos analysis 0 en OSX Kitmos analysis OSX.Iservice technical details 0 en OSX.Iservice technical details OSX.iService its not going to iWork for you 0 en OSX.iService its not going to iWork for you OSX/Crisis has been used as part of a targeted attack 0 en OSX/Crisis has been used as part of a targeted attack OSX/Flashback - The first malware to infect hundreds of thousands of Apple Mac 0 en OSX/Flashback - The first malware to infect hundreds of thousands of Apple Mac Obama order sped up wave of cyberattacks against Iran 0 en Obama order sped up wave of cyberattacks against Iran Olmasco bootkit: next circle of TDL4 evolution (or not) 0 en Olmasco bootkit: next circle of TDL4 evolution (or not) On botnets that use DNS for command and control 0 en On botnets that use DNS for command and control On the analysis of the ZeuS botnet crimeware toolkit 0 en On the analysis of the ZeuS botnet crimeware toolkit One Sinowal trojan + one gang = hundreds of thousands of compromised accountS 0 en One Sinowal trojan + one gang = hundreds of thousands of compromised accountS One bot to rule them all 0 en One bot to rule them all One-man PoS malware operation captures 22,000 credit card details in Brazil 0 en One-man PoS malware operation captures 22,000 credit card details in Brazil Operation Bot Roast II 0 en Operation Bot Roast II Operation SnowMan: DeputyDog actor compromises US veterans of foreign wars website 0 en Operation SnowMan: DeputyDog actor compromises US veterans of foreign wars website Operation Socialist The Inside Story Of How British Spies Hacked Belgium’s Largest Telco 0 en Operation Socialist The Inside Story Of How British Spies Hacked Belgium’s Largest Telco OphionLocker: Joining in the Ransomware Race 0 en OphionLocker: Joining in the Ransomware Race Over 9 million PCs infected - ZeroAccess botnet uncovered 0 en Over 9 million PCs infected - ZeroAccess botnet uncovered Overcoming reputation and proof-of-work systems in botnets 0 en Overcoming reputation and proof-of-work systems in botnets Overview: inside the ZeuS trojan’s source code 0 en Overview: inside the ZeuS trojan’s source code Owning Kraken zombies 0 en Owning Kraken zombies P2P botnet Kelihos.B with 100.000 nodes sinkholed 0 en P2P botnet Kelihos.B with 100.000 nodes sinkholed PETYA crypto-ransomware overwrites MBR to lock users out of their computers 0 en PETYA crypto-ransomware overwrites MBR to lock users out of their computers Panda Security uncovers bot-killing malware 0 en Panda Security uncovers bot-killing malware Panel Gendarmerie 0 en Panel Gendarmerie Panel Supern0va et virus gendarmerie 0 en Panel Supern0va et virus gendarmerie Panel Virus Gendarmerie : Ratio 0.36% 0 en Panel Virus Gendarmerie : Ratio 0.36% Part virus, part botnet, spreading fast: Ramnit moves past Facebook passwords 0 en Part virus, part botnet, spreading fast: Ramnit moves past Facebook passwords Peer-to-peer botnets: overview and case study 0 en Peer-to-peer botnets: overview and case study PeerRush: mining for unwanted P2P traffic 0 en PeerRush: mining for unwanted P2P traffic Petya ransomware skips the files and encrypts your hard drive instead 0 en Petya ransomware skips the files and encrypts your hard drive instead Pitou, The “silent” resurrection of the PITOU notorious Srizbi kernel spambot 0 en Pitou, The “silent” resurrection of the PITOU notorious Srizbi kernel spambot Playing cops & robbers with banks & browsers 0 en Playing cops & robbers with banks & browsers PlugX malware: A good hacker is an apologetic hacker 0 en PlugX malware: A good hacker is an apologetic hacker PlugX: new tool for a not so new campaign 0 en PlugX: new tool for a not so new campaign PlugX: some uncovered points 0 en PlugX: some uncovered points PoS RAM scraper malware; past, present and future 0 en PoS RAM scraper malware; past, present and future Poison Ivy 2.3.0 Documentation 0 en Poison Ivy 2.3.0 Documentation Poison Ivy: assessing damage and extracting intelligence 0 en Poison Ivy: assessing damage and extracting intelligence PoisonIvy adapts to communicate through authentication proxies 0 en PoisonIvy adapts to communicate through authentication proxies Poisoned search results: How hackers have automated search engine poisoning attacks to distribute malware 0 en Poisoned search results: How hackers have automated search engine poisoning attacks to distribute malware PokerAgent botnet stealing over 16,000 Facebook credentials 0 en PokerAgent botnet stealing over 16,000 Facebook credentials Police Trojan crosses the Atlantic, now targets USA and Canada 0 en Police Trojan crosses the Atlantic, now targets USA and Canada Ponmocup analysis 0 en Ponmocup analysis Post-mortem of a zombie: Conficker cleanup after six years 0 en Post-mortem of a zombie: Conficker cleanup after six years Pramro and Sality - two PEs in a pod 0 en Pramro and Sality - two PEs in a pod Proactive detection of network security incidents 0 en Proactive detection of network security incidents Proactive detection of security incidents II - Honeypots 0 en Proactive detection of security incidents II - Honeypots Proactive policy measures by Internet service providers against Botnets 0 en Proactive policy measures by Internet service providers against Botnets Probing the Gozi-Prinimalka campaign 0 en Probing the Gozi-Prinimalka campaign Pushdo botnet gets DGA update, over 6,000 machines host new variant 0 en Pushdo botnet gets DGA update, over 6,000 machines host new variant Qadars: un nouveau malware bancaire avec un composant mobile 0 en Qadars: un nouveau malware bancaire avec un composant mobile Quervar – Induc.C reincarnate 0 en Quervar – Induc.C reincarnate QuickPost: Flame & Volatility 0 en QuickPost: Flame & Volatility REVETON Ransomware Spreads with Old Tactics, New Infection Method 0 en REVETON Ransomware Spreads with Old Tactics, New Infection Method REvil ransomware gang's web sites mysteriously shut down 0 en REvil ransomware gang's web sites mysteriously shut down RIG exploit kit strikes oil 0 en RIG exploit kit strikes oil Ramnit goes social 0 en Ramnit goes social Ransom.II - UGC payment for USA - Windows Genuine impersonation for DE 0 en Ransom.II - UGC payment for USA - Windows Genuine impersonation for DE Ransomware : Smile you're on camera - Reveton.C new landing pages 0 en Ransomware : Smile you're on camera - Reveton.C new landing pages Ransomware : la sulfureuse hypothèse sur la situation chez Norsk Hydro 0 en Ransomware : la sulfureuse hypothèse sur la situation chez Norsk Hydro Ransomware Casier - Sharing Design with Lyposit - Gaelic & Persian ( 0 en Ransomware Casier - Sharing Design with Lyposit - Gaelic & Persian ( Ransomware Fake Microsoft Security Essentials 0 en Ransomware Fake Microsoft Security Essentials Ransomware and Silence Locker control panel 0 en Ransomware and Silence Locker control panel Ransomware crimeware kits 0 en Ransomware crimeware kits Ransomware gets professional, targeting Switzerland, Germany and Austria 0 en Ransomware gets professional, targeting Switzerland, Germany and Austria Ransomware or Wiper? LockerGoga Straddles the Line 0 en Ransomware or Wiper? LockerGoga Straddles the Line Ransomware report: the rise of BandarChor 0 en Ransomware report: the rise of BandarChor Ransomware « Trojan.Casier » Panel 0 en Ransomware « Trojan.Casier » Panel Ransomware ‘Holds Up’ victims 0 en Ransomware ‘Holds Up’ victims Ransomware: playing on your fears 0 en Ransomware: playing on your fears Redkit - one account = one color 0 en Redkit - one account = one color Redkit : No more money ! Traffic US, CA, GB, AU 0 en Redkit : No more money ! Traffic US, CA, GB, AU Relentless Zbot and anti-emulations 0 en Relentless Zbot and anti-emulations Research Win32/Slenfbot 0 en Research Win32/Slenfbot Researchers: Bredolab still lurking, though severely injured 0 en Researchers: Bredolab still lurking, though severely injured Reversing Andromeda-Gamarue botnet 0 en Reversing Andromeda-Gamarue botnet Reversing malware loaders - The Matsnu-A Case 0 en Reversing malware loaders - The Matsnu-A Case Reversing the wrath of Khan 0 en Reversing the wrath of Khan Reveton += HU, LV, SK, SI, TR (!), RO - So spreading accross Europe with 6 new Design 0 en Reveton += HU, LV, SK, SI, TR (!), RO - So spreading accross Europe with 6 new Design Reveton Autumn Collection += AU,CZ, IE, NO & 17 new design 0 en Reveton Autumn Collection += AU,CZ, IE, NO & 17 new design Reveton can speak now ! 0 en Reveton can speak now ! Reveton.A 0 en Reveton.A Richard Clarke on who was behind the Stuxnet attack 0 en Richard Clarke on who was behind the Stuxnet attack Rmnet.12 created a million Windows computer botnet 0 en Rmnet.12 created a million Windows computer botnet RootSmart Android malware 0 en RootSmart Android malware RootSmart malware utilizes GingerBreak root exploit 0 en RootSmart malware utilizes GingerBreak root exploit Rovnix Reloaded: new step of evolution 0 en Rovnix Reloaded: new step of evolution Rovnix bootkit framework updated 0 en Rovnix bootkit framework updated Rovnix.D: the code injection story 0 en Rovnix.D: the code injection story Russian service online to check the detection of malware 0 en Russian service online to check the detection of malware Réflexions pour un plan d'action contre les botnets 0 en Réflexions pour un plan d'action contre les botnets SDBot IRC botnet continues to make waves 0 en SDBot IRC botnet continues to make waves SGNET: a worldwide deployable framework to support the analysis of malware threat models 0 en SGNET: a worldwide deployable framework to support the analysis of malware threat models SIM-ple: mobile handsets are weak link in latest online banking fraud scheme 0 en SIM-ple: mobile handsets are weak link in latest online banking fraud scheme SIRv12 0 en SIRv12 SIRv12: the obstinacy of Conficker 0 en SIRv12: the obstinacy of Conficker SKyWIper: A complex malware for targeted attacks 0 en SKyWIper: A complex malware for targeted attacks SPL exploit kit – now with CVE-2013-0422 0 en SPL exploit kit – now with CVE-2013-0422 SamSam Ransomware Evolves Its Tactics Towards Targeting Whole Companies 0 en SamSam Ransomware Evolves Its Tactics Towards Targeting Whole Companies SamSam ransomware designed to inundate targeted networks with thousands of copies of itself 0 en SamSam ransomware designed to inundate targeted networks with thousands of copies of itself Saudi Aramco hit by computer virus 0 en Saudi Aramco hit by computer virus Say hello to Tinba: world’s smallest trojan-banker 0 en Say hello to Tinba: world’s smallest trojan-banker Scareware locks down computer due to child porn and terrorism 0 en Scareware locks down computer due to child porn and terrorism Secrets of the Comfoo masters 0 en Secrets of the Comfoo masters Security Response Android.Counterclank 0 en Security Response Android.Counterclank Security alert: SpamSoldier 0 en Security alert: SpamSoldier Security alert: new Android malware - TigerBot - identified in alternative markets 0 en Security alert: new Android malware - TigerBot - identified in alternative markets Security alert: new TGLoader Android malware utilizes the exploid root exploit 0 en Security alert: new TGLoader Android malware utilizes the exploid root exploit Security alert: new variants of Legacy Native (LeNa) identified 0 en Security alert: new variants of Legacy Native (LeNa) identified Security experts detected new Twitter-controlled botnet 0 en Security experts detected new Twitter-controlled botnet Shamoon the Wiper in details 0 en Shamoon the Wiper in details Shamoon the Wiper: further details (Part II) 0 en Shamoon the Wiper: further details (Part II) Shamoon the wiper - copycats at work 0 en Shamoon the wiper - copycats at work Shedding light on the NeoSploit Exploit Kit 0 en Shedding light on the NeoSploit Exploit Kit Shylock financial malware back 'with a vengeance' 0 en Shylock financial malware back 'with a vengeance' Sinowal analysis (Windows 7, 32-bit) 0 en Sinowal analysis (Windows 7, 32-bit) Sinowal: MBR rootkit never dies! (and it always brings some new clever features) 0 en Sinowal: MBR rootkit never dies! (and it always brings some new clever features) Sinowal: the evolution of MBR rootkit continues 0 en Sinowal: the evolution of MBR rootkit continues Skunkx DDoS bot analysis 0 en Skunkx DDoS bot analysis Skynet, a Tor-powered botnet straight from Reddit 0 en Skynet, a Tor-powered botnet straight from Reddit Smartcard vulnerabilities in modern banking malware 0 en Smartcard vulnerabilities in modern banking malware Social networks – A bonanza for cybercriminals 0 en Social networks – A bonanza for cybercriminals Sony PlayStation's site SQL injected, redirecting to rogue security software 0 en Sony PlayStation's site SQL injected, redirecting to rogue security software Sony/Destover: mystery North Korean actor’s destructive and past network activity 0 en Sony/Destover: mystery North Korean actor’s destructive and past network activity Sopelka Botnet: three banking trojans and one banking panel 0 en Sopelka Botnet: three banking trojans and one banking panel Source Code for IoT Botnet ‘Mirai’ Released 0 en Source Code for IoT Botnet ‘Mirai’ Released Spam botnets: The fall of Grum and the rise of Festi 0 en Spam botnets: The fall of Grum and the rise of Festi Spambot evolution 2011 0 en Spambot evolution 2011 Spread of Darkness...Details on the public release of the Darkness DDoS bot 0 en Spread of Darkness...Details on the public release of the Darkness DDoS bot SpyEye being kicked to the curb by its customers? 0 en SpyEye being kicked to the curb by its customers? Stamp EK (aka SofosFO) now showing "Blackhole 2.0 Like" landing pages 0 en Stamp EK (aka SofosFO) now showing "Blackhole 2.0 Like" landing pages Static analysis of Dalvik bytecode and reflection in Android 0 en Static analysis of Dalvik bytecode and reflection in Android Stealing money from ATMs with malware 0 en Stealing money from ATMs with malware Stealthy peer-to-peer C&C over SMB pipes 0 en Stealthy peer-to-peer C&C over SMB pipes Stealthy router-based botnet worm squirming 0 en Stealthy router-based botnet worm squirming Step-by-step reverse engineering malware: ZeroAccess / Max++ / Smiscer crimeware rootkit 0 en Step-by-step reverse engineering malware: ZeroAccess / Max++ / Smiscer crimeware rootkit Stolen passwords allowed hackers to steal over one billion rubles 0 en Stolen passwords allowed hackers to steal over one billion rubles Study of malware obfuscation techniques 0 en Study of malware obfuscation techniques Survey on network-based botnet detection methods 0 en Survey on network-based botnet detection methods Symantec/Android.Ackposts 0 en Symantec/Android.Ackposts Symantec/Android.Maistealer 0 en Symantec/Android.Maistealer Symantec/Backdoor.Arcomrat 0 en Symantec/Backdoor.Arcomrat Symantec/W32.Zorenium 0 en Symantec/W32.Zorenium TDI - a new element in old TDSS story 0 en TDI - a new element in old TDSS story TDL3 : The rootkit of all evil 0 en TDL3 : The rootkit of all evil TDL3 : Why so serious 0 en TDL3 : Why so serious TDL4 - Top Bot 0 en TDL4 - Top Bot TDL4 reloaded: Purple Haze all in my brain 0 en TDL4 reloaded: Purple Haze all in my brain TDSS botnet: full disclosure 0 en TDSS botnet: full disclosure TR-24 analysis - Destory RAT family 0 en TR-24 analysis - Destory RAT family Takeover of Virut domains 0 en Takeover of Virut domains Taking down botnets: Microsoft and the Rustock botnet 0 en Taking down botnets: Microsoft and the Rustock botnet Tales from Crisis, Chapter 1: The dropper’s box of tricks 0 en Tales from Crisis, Chapter 1: The dropper’s box of tricks Tales from Crisis, Chapter 2: Backdoor’s first steps 0 en Tales from Crisis, Chapter 2: Backdoor’s first steps Tales from Crisis, Chapter 3: The Italian rootkit job 0 en Tales from Crisis, Chapter 3: The Italian rootkit job Tales from Crisis, Chapter 4: a ghost in the network 0 en Tales from Crisis, Chapter 4: a ghost in the network Targeted attacks and Ukraine 0 en Targeted attacks and Ukraine Targeted destructive malware explained: Troj/Mdrop-ELD 0 en Targeted destructive malware explained: Troj/Mdrop-ELD Targeted information stealing attacks in South Asia use email, signed binaries 0 en Targeted information stealing attacks in South Asia use email, signed binaries Tatanga attack exposes chipTAN weaknesses 0 en Tatanga attack exposes chipTAN weaknesses Tatanga: a new banking trojan with MitB functions 0 en Tatanga: a new banking trojan with MitB functions Tequila botnet leads to phishing attack 0 en Tequila botnet leads to phishing attack The "Red October" campaign - An advanced cyber espionage network targeting diplomatic and government agencies 0 en The "Red October" campaign - An advanced cyber espionage network targeting diplomatic and government agencies The 'Penquin' Turla 0 en The 'Penquin' Turla The ACCDFISA malware family – Ransomware targeting Windows servers 0 en The ACCDFISA malware family – Ransomware targeting Windows servers The ACCDFISA malware family – Ransomware targetting Windows servers 0 en The ACCDFISA malware family – Ransomware targetting Windows servers The Andromeda/Gamarue botnet is on the rise again 0 en The Andromeda/Gamarue botnet is on the rise again The Coreflood report 0 en The Coreflood report The Cridex trojan targets 137 financial organizations in one go 0 en The Cridex trojan targets 137 financial organizations in one go The DGA of Symmi 0 en The DGA of Symmi The Dark Alleys of Madison Avenue: Understanding Malicious Advertisements 0 en The Dark Alleys of Madison Avenue: Understanding Malicious Advertisements The Dorkbot rises 0 en The Dorkbot rises The Elderwood project (infographic) 0 en The Elderwood project (infographic) The Epic Turla operation 0 en The Epic Turla operation The Flame: questions and answers 0 en The Flame: questions and answers The IMDDOS botnet: discovery and analysis 0 en The IMDDOS botnet: discovery and analysis The Madi campaign - Part II 0 en The Madi campaign - Part II The Miner botnet: Bitcoin mining goes peer-to-peer 0 en The Miner botnet: Bitcoin mining goes peer-to-peer The MiniDuke mystery: PDF 0-day government spy assembler 0x29A micro backdoor 0 en The MiniDuke mystery: PDF 0-day government spy assembler 0x29A micro backdoor The Mirage campaign 0 en The Mirage campaign The Pobelka botnet - a command and control case study 0 en The Pobelka botnet - a command and control case study The Sality botnet 0 en The Sality botnet The Target breach by the numbers 0 en The Target breach by the numbers The Waledac protocol: the how and why 0 en The Waledac protocol: the how and why The ZeroAccess botnet revealed 0 en The ZeroAccess botnet revealed The ZeroAccess botnet: mining and fraud for massive financial gain 0 en The ZeroAccess botnet: mining and fraud for massive financial gain The ZeroAccess rootkit 0 en The ZeroAccess rootkit The anatomy of a botnet 0 en The anatomy of a botnet The case for in-the-lab botnet experimentation: creating and taking down a 3000-node botnet 0 en The case for in-the-lab botnet experimentation: creating and taking down a 3000-node botnet The case of TDL3 0 en The case of TDL3 The evolution of TDL: conquering x64 0 en The evolution of TDL: conquering x64 The evolution of webinjects 0 en The evolution of webinjects The first trojan in history to steal Linux and Mac OS X passwords 0 en The first trojan in history to steal Linux and Mac OS X passwords The good , the bad and the unknown online scanners 0 en The good , the bad and the unknown online scanners The graphic design of "Maktub Locker" ransomware 0 en The graphic design of "Maktub Locker" ransomware The growing threat to business banking online 0 en The growing threat to business banking online The life cycle of web server botnet recruitment 0 en The life cycle of web server botnet recruitment The lifecycle of peer-to-peer (Gameover) ZeuS 0 en The lifecycle of peer-to-peer (Gameover) ZeuS The most sophisticated Android trojan 0 en The most sophisticated Android trojan The mystery of Duqu framework solved 0 en The mystery of Duqu framework solved The mystery of Duqu: part five 0 en The mystery of Duqu: part five The mystery of Duqu: part one 0 en The mystery of Duqu: part one The mystery of Duqu: part six (the command and control servers) 0 en The mystery of Duqu: part six (the command and control servers) The mystery of Duqu: part ten 0 en The mystery of Duqu: part ten The mystery of Duqu: part three 0 en The mystery of Duqu: part three The mystery of Duqu: part two 0 en The mystery of Duqu: part two The mystery of the Duqu framework 0 en The mystery of the Duqu framework The new era of botnets 0 en The new era of botnets The real face of Koobface: the largest web 2.0 botnet explained 0 en The real face of Koobface: the largest web 2.0 botnet explained The resurrection of RedKit 0 en The resurrection of RedKit The rise of TOR-based botnets 0 en The rise of TOR-based botnets The tigger trojan: icky, sticky stuff 0 en The tigger trojan: icky, sticky stuff The underground economy of spam: a botmaster's perspective of coordinating large-scale spam campaigns 0 en The underground economy of spam: a botmaster's perspective of coordinating large-scale spam campaigns The where and why of Hlux 0 en The where and why of Hlux The world's biggest botnets 0 en The world's biggest botnets The ‘Madi’ infostealers - a detailed analysis 0 en The ‘Madi’ infostealers - a detailed analysis The ‘advertising’ botnet 0 en The ‘advertising’ botnet The “Hikit” rootkit: advanced and persistent attack techniques (part 1) 0 en The “Hikit” rootkit: advanced and persistent attack techniques (part 1) The “Hikit” rootkit: advanced and persistent attack techniques (part 2) 0 en The “Hikit” rootkit: advanced and persistent attack techniques (part 2) Threat spotlight: Angler lurking in the domain shadows 0 en Threat spotlight: Angler lurking in the domain shadows Three month FrameworkPOS malware campaign nabs ~43,000 credit cards from point of sale systems 0 en Three month FrameworkPOS malware campaign nabs ~43,000 credit cards from point of sale systems Tilon-son of Silon 0 en Tilon-son of Silon Tilon/SpyEye2 intelligence report 0 en Tilon/SpyEye2 intelligence report TinyNuke may be a ticking time bomb 0 en TinyNuke may be a ticking time bomb Tis the season for shipping and phishing 0 en Tis the season for shipping and phishing Top 50 bad hosts & networks 2011 Q4 0 en Top 50 bad hosts & networks 2011 Q4 Top spam botnets exposed 0 en Top spam botnets exposed Torpig - Back to the future or how the most sophisticated trojan in 2008 reinvents itself 0 en Torpig - Back to the future or how the most sophisticated trojan in 2008 reinvents itself TorrentLocker ransomware uses email authentication to refine spam runs 0 en TorrentLocker ransomware uses email authentication to refine spam runs Tracking down the author of the PlugX RAT 0 en Tracking down the author of the PlugX RAT Traffic direction systems as malware distribution tools 0 en Traffic direction systems as malware distribution tools Travnet botnet steals huge amount of sensitive data 0 en Travnet botnet steals huge amount of sensitive data Travnet trojan could be part of APT campaign 0 en Travnet trojan could be part of APT campaign TreasureHunt: a custom POS malware tool 0 en TreasureHunt: a custom POS malware tool Trend Micro discovers MalumPoS; malware targeting hotels and other US industries 0 en Trend Micro discovers MalumPoS; malware targeting hotels and other US industries Trojan ChePro, the CPL storm 0 en Trojan ChePro, the CPL storm Trojan Nap aka Kelihos/Hlux - Feb. 2013 status update 0 en Trojan Nap aka Kelihos/Hlux - Feb. 2013 status update Trojan downloaders on the rise: don’t let Locky or TeslaCrypt ruin your day 0 en Trojan downloaders on the rise: don’t let Locky or TeslaCrypt ruin your day Trojan horse using sender policy framework 0 en Trojan horse using sender policy framework Trojan moves its configuration to Twitter, LinkedIn, MSDN and Baidu 0 en Trojan moves its configuration to Twitter, LinkedIn, MSDN and Baidu Trojan on the loose: an in-depth analysis of police trojan 0 en Trojan on the loose: an in-depth analysis of police trojan Trojan.Prinimalka: bits and pieces 0 en Trojan.Prinimalka: bits and pieces Trojan.Ransomgerpo criminal arrested 0 en Trojan.Ransomgerpo criminal arrested Trojan.Taidoor takes aim at policy think tanks 0 en Trojan.Taidoor takes aim at policy think tanks Trojan.Tatanarg.B careful! 0 en Trojan.Tatanarg.B careful! Trojan.Whitewell: what’s your (bot) Facebook status today? 0 en Trojan.Whitewell: what’s your (bot) Facebook status today? Trojan.ZeroAccess infection analysis 0 en Trojan.ZeroAccess infection analysis Trusteer warns of new two headed trojan attack against online banks 0 en Trusteer warns of new two headed trojan attack against online banks Twitter + Pastebin = malware update 0 en Twitter + Pastebin = malware update Un WOMBAT pour évaluer la cybercriminalité 0 en Un WOMBAT pour évaluer la cybercriminalité Under the hood of Carberp: Malware & configuration analysis 0 en Under the hood of Carberp: Malware & configuration analysis Under the hood of the cyber attack on U.S. banks 0 en Under the hood of the cyber attack on U.S. banks Unexpected reboot: Necurs 0 en Unexpected reboot: Necurs Unveiling an Indian cyberattack infrastructure - a special report 0 en Unveiling an Indian cyberattack infrastructure - a special report Unveiling the network criminal infrastructure of TDSS/TDL4 - DGAv14: a case study on a new TDSS/TDL4 variant 0 en Unveiling the network criminal infrastructure of TDSS/TDL4 - DGAv14: a case study on a new TDSS/TDL4 variant Upas Kit (aka Rombrast) integrates webinjects 0 en Upas Kit (aka Rombrast) integrates webinjects Upatre, Dyre used in Univ. of Florida attack 0 en Upatre, Dyre used in Univ. of Florida attack Update to Citadel : 1.3.5.1 Rain Edition. 0 en Update to Citadel : 1.3.5.1 Rain Edition. Update to Citadel : v.1.3.4.5 0 en Update to Citadel : v.1.3.4.5 Updated Sundown Exploit Kit Uses Steganography 0 en Updated Sundown Exploit Kit Uses Steganography Urausy has big plan for Europe - Targeting 3 new countries among which Norway ! 0 en Urausy has big plan for Europe - Targeting 3 new countries among which Norway ! Urausy improving its localization - A (the\?) Gaelic Ransomware with Interpol impersonation as default landing 0 en Urausy improving its localization - A (the\?) Gaelic Ransomware with Interpol impersonation as default landing Urausy ransomware - July 2013 design refresh - "Summer 2013 collection" 0 en Urausy ransomware - July 2013 design refresh - "Summer 2013 collection" Urausy: Colorfull design refresh (+HR) & EC3 Logo 0 en Urausy: Colorfull design refresh (+HR) & EC3 Logo Uroburos: the snake rootkit 0 en Uroburos: the snake rootkit Using libemu to create malware flow graph 0 en Using libemu to create malware flow graph VOlk-botnet takes over Latin America 0 en VOlk-botnet takes over Latin America Vawtrak gains momentum and expands targets 0 en Vawtrak gains momentum and expands targets Versatile and infectious: Win64/Expiro is a cross-platform file infector 0 en Versatile and infectious: Win64/Expiro is a cross-platform file infector VinSelf - A new backdoor in town 0 en VinSelf - A new backdoor in town ViperRAT: The mobile APT targeting the Israeli Defense Force that should be on your radar 0 en ViperRAT: The mobile APT targeting the Israeli Defense Force that should be on your radar Virus Gendarmerie : variante Office Centrale de Luttre contre la criminalité – controle informationnel 0 en Virus Gendarmerie : variante Office Centrale de Luttre contre la criminalité – controle informationnel Virus scanners for virus authors 0 en Virus scanners for virus authors Virus scanners for virus authors, part II 0 en Virus scanners for virus authors, part II Virut malware fuels Waledac botnet resurgence 0 en Virut malware fuels Waledac botnet resurgence W32.Changeup: how the worm was created 0 en W32.Changeup: how the worm was created W32.Duqu, the precursor to the next Stuxnet 0 en W32.Duqu, the precursor to the next Stuxnet W32.Flamer: spreading mechanism tricks and exploits 0 en W32.Flamer: spreading mechanism tricks and exploits W32.Qakbot in detail 0 en W32.Qakbot in detail W32.Shadesrat (Blackshades) author arrested 0 en W32.Shadesrat (Blackshades) author arrested W32.Stuxnet dossier 0 en W32.Stuxnet dossier W32.Tinba (Tinybanker) The turkish incident 0 en W32.Tinba (Tinybanker) The turkish incident W32.Xpaj.B: making easy money from complex code 0 en W32.Xpaj.B: making easy money from complex code Waledac Botnet - Deployment and Communication Analysis 0 en Waledac Botnet - Deployment and Communication Analysis Waledac gets cozy with Virut 0 en Waledac gets cozy with Virut Walking through Win32/Jabberbot.A instant messaging C&C 0 en Walking through Win32/Jabberbot.A instant messaging C&C Watch out for CoreBot, new stealer in the wild 0 en Watch out for CoreBot, new stealer in the wild Weelsof use SSL C&C 0 en Weelsof use SSL C&C What was that Wiper thing? 0 en What was that Wiper thing? What’s the buzz with Bafruz 0 en What’s the buzz with Bafruz Where Are They Today? Cybercrime Trojans That No One Misses: Shifu Malware 0 en Where Are They Today? Cybercrime Trojans That No One Misses: Shifu Malware Who's behind the Koobface botnet? - An OSINT analysis 0 en Who's behind the Koobface botnet? - An OSINT analysis Who's behind the world's largest spam botnet? 0 en Who's behind the world's largest spam botnet? Why forums? An empirical analysis into the facilitating factors of carding forums 0 en Why forums? An empirical analysis into the facilitating factors of carding forums Win32/64:Napolar: New trojan shines on the cyber crime-scene 0 en Win32/64:Napolar: New trojan shines on the cyber crime-scene Win32/Gataka - or should we say Zutick? 0 en Win32/Gataka - or should we say Zutick? Win32/Gataka banking Trojan - Detailed analysis 0 en Win32/Gataka banking Trojan - Detailed analysis Win32/Gataka: a banking Trojan ready to take off 0 en Win32/Gataka: a banking Trojan ready to take off Win32/Sality newest component: a router’s primary DNS changer named Win32/RBrute 0 en Win32/Sality newest component: a router’s primary DNS changer named Win32/RBrute Win32/Spy.Ranbyus modifying Java code in RBS Ukraine systems 0 en Win32/Spy.Ranbyus modifying Java code in RBS Ukraine systems Win32/Virlock: First Self-Reproducing Ransomware is also a Shape Shifter 0 en Win32/Virlock: First Self-Reproducing Ransomware is also a Shape Shifter Win32/Vundo 0 en Win32/Vundo Winlock affiliate 0 en Winlock affiliate Wire Transfer Spam Spreads Upatre 0 en Wire Transfer Spam Spreads Upatre Worm:VBS/Jenxcus 0 en Worm:VBS/Jenxcus XPAJ: reversing a Windows x64 bootkit 0 en XPAJ: reversing a Windows x64 bootkit Xarvester, the new Srizbi? 0 en Xarvester, the new Srizbi? Xpaj Botnet intercepts up to 87 million searches per year 0 en Xpaj Botnet intercepts up to 87 million searches per year You can’t be invulnerable, but you can be well protected 0 en You can’t be invulnerable, but you can be well protected You dirty RAT! Part 1 – DarkComet 0 en You dirty RAT! Part 1 – DarkComet You dirty RAT! part 2 – BlackShades NET 0 en You dirty RAT! part 2 – BlackShades NET Your botnet is my botnet: analysis of a botnet takeover 0 en Your botnet is my botnet: analysis of a botnet takeover Your files are encrypted with a “Windows 10 Upgrade” 0 en Your files are encrypted with a “Windows 10 Upgrade” ZACCESS/SIREFEF arrives with new infection technique 0 en ZACCESS/SIREFEF arrives with new infection technique ZeroAccess - new steps in evolution 0 en ZeroAccess - new steps in evolution ZeroAccess anti-debug uses debugger 0 en ZeroAccess anti-debug uses debugger ZeroAccess rootkit launched by signed installers 0 en ZeroAccess rootkit launched by signed installers ZeroAccess's way of self-deletion 0 en ZeroAccess's way of self-deletion ZeroAccess: code injection chronicles 0 en ZeroAccess: code injection chronicles ZeroLocker won't come to your rescue 0 en ZeroLocker won't come to your rescue Zeroing in on malware propagation methods 0 en Zeroing in on malware propagation methods ZeuS Gameover overview 0 en ZeuS Gameover overview ZeuS ransomware feature: win unlock 0 en ZeuS ransomware feature: win unlock ZeuS v2 Malware Analysis - Part II 0 en ZeuS v2 Malware Analysis - Part II ZeuS – P2P+DGA variant – mapping out and understanding the threat 0 en ZeuS – P2P+DGA variant – mapping out and understanding the threat ZeuS-P2P monitoring and analysis 0 en ZeuS-P2P monitoring and analysis ZeuS: me talk pretty Finnish one day 0 en ZeuS: me talk pretty Finnish one day ZeuSbot/Spyeye P2P updated, fortifying the botnet 0 en ZeuSbot/Spyeye P2P updated, fortifying the botnet Zeus variant Floki bot targets PoS data 0 en Zeus variant Floki bot targets PoS data Zorenium bot not half the threat it claims to be 0 en Zorenium bot not half the threat it claims to be Новый сэмпл Pandora DDoS Bot 0 en Новый сэмпл Pandora DDoS Bot ‘Dexter’ virus targets point-of-sale terminals 0 en ‘Dexter’ virus targets point-of-sale terminals ‘Project Blitzkrieg’ promises more aggressive cyberheists against U.S. banks 0 en ‘Project Blitzkrieg’ promises more aggressive cyberheists against U.S. banks “Nemanja” botnet identified by IntelCrawler – Over a thousand point-of-sales, grocery management and accounting systems are compromised all over the world 0 en “Nemanja” botnet identified by IntelCrawler – Over a thousand point-of-sales, grocery management and accounting systems are compromised all over the world "Crypto Ransomware" CTB-Locker (Critroni.A) on the rise 0 en "Crypto Ransomware" CTB-Locker (Critroni.A) on the rise "NetTraveler is Running!" - Red Star APT attacks compromise high-profile victims 0 en "NetTraveler is Running!" - Red Star APT attacks compromise high-profile victims "njRAT" Uncovered 0 en "njRAT" Uncovered 'Tigger' trojan keeps security researchers hopping 0 en 'Tigger' trojan keeps security researchers hopping 1940 IPs for a BHEK/ULocker server - Nexcess-Net 0 en 1940 IPs for a BHEK/ULocker server - Nexcess-Net A DDoS family affair: Dirt Jumper bot family continues to evolve 0 en A DDoS family affair: Dirt Jumper bot family continues to evolve A Foray into Conficker’s Logic and Rendezvous Points 0 en A Foray into Conficker’s Logic and Rendezvous Points A ScarePakage variant is targeting more countries : impersonating Europol and AFP 0 en A ScarePakage variant is targeting more countries : impersonating Europol and AFP A case study on Storm worm 0 en A case study on Storm worm A chat with NGR Bot 0 en A chat with NGR Bot A new iteration of the TDSS/TDL-4 malware using DGA-based command and control 0 en A new iteration of the TDSS/TDL-4 malware using DGA-based command and control A peek inside the Darkness (Optima) DDoS Bot 0 en A peek inside the Darkness (Optima) DDoS Bot A peek inside the PickPocket botnet 0 en A peek inside the PickPocket botnet A quick update on spambot Kelihos 0 en A quick update on spambot Kelihos A study of the Ilomo / Clampi botnet 0 en A study of the Ilomo / Clampi botnet A study on botnet detection techniques 0 en A study on botnet detection techniques APT1: technical backstage 0 en APT1: technical backstage AbaddonPOS: A new point of sale threat linked to Vawtrak 0 en AbaddonPOS: A new point of sale threat linked to Vawtrak Acquisition and analysis of volatile memory from Android devices 0 en Acquisition and analysis of volatile memory from Android devices Actually, my name is Duqu - Stuxnet is my middle name 0 en Actually, my name is Duqu - Stuxnet is my middle name Adobe Flash Player 0-day and HackingTeam's Remote Control System 0 en Adobe Flash Player 0-day and HackingTeam's Remote Control System Adrenalin botnet. The trend marks the Russian crimeware 0 en Adrenalin botnet. The trend marks the Russian crimeware Advancing the fight against botnets with consumer notifications 0 en Advancing the fight against botnets with consumer notifications Aldi Bot - bka.de DDoS 0 en Aldi Bot - bka.de DDoS Alina: casting a shadow on POS 0 en Alina: casting a shadow on POS Alina: following the shadow part 1 0 en Alina: following the shadow part 1 Alina: following the shadow part 2 0 en Alina: following the shadow part 2 All-in-one malware: an overview of Sality 0 en All-in-one malware: an overview of Sality An Analysis of the iKeeB (duh) iPhone botnet (Worm) 0 en An Analysis of the iKeeB (duh) iPhone botnet (Worm) An advanced hybrid peer-to-peer botnet 0 en An advanced hybrid peer-to-peer botnet An analysis of Dorkbot’s infection vectors (part 2) 0 en An analysis of Dorkbot’s infection vectors (part 2) An analysis of the cross-platform backdoor NetWeirdRC 0 en An analysis of the cross-platform backdoor NetWeirdRC An analysis of underground forums 0 en An analysis of underground forums An encounter with trojan Nap 0 en An encounter with trojan Nap An evaluation of current and future botnet defences 0 en An evaluation of current and future botnet defences An interesting case of JRE sandbox breach (CVE-2012-0507) 0 en An interesting case of JRE sandbox breach (CVE-2012-0507) An internet census taken by an illegal botnet – A qualitative assessment of published measurements 0 en An internet census taken by an illegal botnet – A qualitative assessment of published measurements An overnight sensation — CoreBot returns as a full-fledged financial malware 0 en An overnight sensation — CoreBot returns as a full-fledged financial malware An overview of exploit packs 0 en An overview of exploit packs An overview of messaging botnets 0 en An overview of messaging botnets Analyse de Xtreme RAT 0 en Analyse de Xtreme RAT Analyse et poncage du botnet HerpesNet 0 en Analyse et poncage du botnet HerpesNet Analyse of the sample cdorked.A 0 en Analyse of the sample cdorked.A Analyse statique de Duqu stage 1 0 en Analyse statique de Duqu stage 1 Analyse statique de Duqu stage 2 0 en Analyse statique de Duqu stage 2 Analysis of DarkMegi aka NpcDark 0 en Analysis of DarkMegi aka NpcDark Analysis of TDL4 0 en Analysis of TDL4 Analysis of Ysreef (a variant of Tobfy) 0 en Analysis of Ysreef (a variant of Tobfy) Analysis of a PlugX malware variant used for targeted attacks 0 en Analysis of a PlugX malware variant used for targeted attacks Analysis of a VBScript bot 0 en Analysis of a VBScript bot Analysis of a stage 3 Miniduke malware sample 0 en Analysis of a stage 3 Miniduke malware sample Analysis of a “/0” stealth scan from a botnet 0 en Analysis of a “/0” stealth scan from a botnet Analysis of functions used to encode strings in Flame (GDB script) 0 en Analysis of functions used to encode strings in Flame (GDB script) Analysis of ngrBot 0 en Analysis of ngrBot Analysis of the Finfisher lawful interception malware 0 en Analysis of the Finfisher lawful interception malware Analysis of the malware of Red October - Part 1 0 en Analysis of the malware of Red October - Part 1 Analysis of the malware of Red October - Part 2 0 en Analysis of the malware of Red October - Part 2 Analysis: Malware Win32/Rimecud.B 0 en Analysis: Malware Win32/Rimecud.B Analyzing a new exploit pack 0 en Analyzing a new exploit pack Anaru malware now live and ready to steal 0 en Anaru malware now live and ready to steal And real name of Magnitude is.... 0 en And real name of Magnitude is.... Android Marcher now marching via porn sites 0 en Android Marcher now marching via porn sites Android RATs branch out with Dendroid 0 en Android RATs branch out with Dendroid Android malware pairs man-in-the-middle with remote-controlled banking trojan 0 en Android malware pairs man-in-the-middle with remote-controlled banking trojan Android trojan used to create simple SMS spam botnet 0 en Android trojan used to create simple SMS spam botnet Android.Bmaster: A million-dollar mobile botnet 0 en Android.Bmaster: A million-dollar mobile botnet Android.Counterclank found in official Android market 0 en Android.Counterclank found in official Android market Andromeda 2.7 features 0 en Andromeda 2.7 features Angler Exploit Kit – Operating at the Cutting Edge 0 en Angler Exploit Kit – Operating at the Cutting Edge Anonymous supporters tricked into installing ZeuS trojan 0 en Anonymous supporters tricked into installing ZeuS trojan Another family of DDoS bots: Avzhan 0 en Another family of DDoS bots: Avzhan Anunak:APT against financial institutions 0 en Anunak:APT against financial institutions Análisis del comportamiento de VOlk y sus funcionalidades 0 en Análisis del comportamiento de VOlk y sus funcionalidades Apache binary backdoors on Cpanel-based servers 0 en Apache binary backdoors on Cpanel-based servers Apple releases Java update; includes fix for vulnerability exploited by Flashback malware 0 en Apple releases Java update; includes fix for vulnerability exploited by Flashback malware Apple took 3 years to fix Finfisher trojan hole 0 en Apple took 3 years to fix Finfisher trojan hole Apple zombie malware 'NetWeird' rummages for browser and email passwords 0 en Apple zombie malware 'NetWeird' rummages for browser and email passwords Armenian Bredolab creator jailed for computer sabotage 0 en Armenian Bredolab creator jailed for computer sabotage Attack on Zygote: a new twist in the evolution of mobile threats 0 en Attack on Zygote: a new twist in the evolution of mobile threats Attackers place Command and Control servers inside enterprise walls 0 en Attackers place Command and Control servers inside enterprise walls Attention! All data on your hardrive is encrypted 0 en Attention! All data on your hardrive is encrypted AutoIT ransomware 0 en AutoIT ransomware Avalanche phishers migrate to ZeuS 0 en Avalanche phishers migrate to ZeuS Avatar rootkit: the continuing saga 0 en Avatar rootkit: the continuing saga Back to Stuxnet: the missing link 0 en Back to Stuxnet: the missing link Backdoor uses Evernote as command and control server 0 en Backdoor uses Evernote as command and control server Backdoor:Win32/Caphaw.A 0 en Backdoor:Win32/Caphaw.A Banking trojan Dridex uses macros for infection 0 en Banking trojan Dridex uses macros for infection BareBox: efficient malware analysis on bare-metal 0 en BareBox: efficient malware analysis on bare-metal Battling the Rustock threat 0 en Battling the Rustock threat Battling the Zbot threat 0 en Battling the Zbot threat Behind the Captcha or Inside Blackhole Exploit Kit 2.0 - Exploit Kit Administration Panel 0 en Behind the Captcha or Inside Blackhole Exploit Kit 2.0 - Exploit Kit Administration Panel Bitcrypt broken 0 en Bitcrypt broken Black Dragon: "... and all will burn beneath the shadow of my wings" 0 en Black Dragon: "... and all will burn beneath the shadow of my wings" BlackEnergy competitor – The 'Darkness' DDoS bot 0 en BlackEnergy competitor – The 'Darkness' DDoS bot Blackhole & Cridex: season 2 episode 1: Intuit spam & SSL traffic analysis 0 en Blackhole & Cridex: season 2 episode 1: Intuit spam & SSL traffic analysis Blackhole Ramnit - samples and analysis 0 en Blackhole Ramnit - samples and analysis Blackhole and Cool Exploit kits nearly extinct 0 en Blackhole and Cool Exploit kits nearly extinct Blackhole exploit kit v2 on the rise 0 en Blackhole exploit kit v2 on the rise Blackhole, CVE-2012-0507 and Carberp 0 en Blackhole, CVE-2012-0507 and Carberp INST 102 en INST