2015

(Year/Month)

Botnets

• Starting in 2015: Bedep, CoreBot, GamaPoS, Hammertoss, LogPOS, MalumPoS, NitlovePOS, Shifu, TreasureHunt, ViperRAT
• Ending in 2015: Beebone, Simda

Publications

	Author	Editor	Botnet	Campaign
AbaddonPOS: A new point of sale threat linked to Vawtrak	Darien Huss	Proofpoint	Neverquest AbaddonPOS
An overnight sensation — CoreBot returns as a full-fledged financial malware	Limor Kessem Martin Korman	Security Intelligence	CoreBot
Angler Exploit Kit – Operating at the Cutting Edge	Abel Toro	Websense
Buh-bye Beebone! Law enforcement kills polymorphic virus-spreading botnet	John Zorabedian	Sophos	Beebone
CVE-2015-0311 (Flash up to 16.0.0.287) integrating Exploit Kits	Kafeine	Malware don't need cofee
Carbanak/Anunak in the BlueCoat malware analysis appliance	Snorre Fagerland	BlueCoat	Qadars Anunak (botnet)	Anunak
Carbanak: Multi-million dollar cybercrime gang focuses on banks rather than their customers	Symantec Security Response	Symantec		Anunak
Chasing cybercrime: network insights of Dyre and Dridex trojan bankers	Blueliv	Blueliv	Dyre Dridex
Equation: the Death Star of malware galaxy	GReAT	Kaspersky Securelist		Equation
Fast look at Sundown EK	Kafeine	Malware don't need cofee
FighterPOS: a new one-man PoS malware campaign	Trend Micro Forward-Looking Threat Research Team	Trend Micro	FighterPOS
Gamarue dropping Lethic bot	Amandeep Kumar Nirmal Singh	Zscaler	Andromeda Lethic
Hammertoss: stealthy tactics define a Russian cyber threat group		FireEye	Hammertoss	APT29
Kaspersky security bulletin 2015. Overall statistics for 2015	Maria Garnaeva Jornt van der Wiel Denis Makrushin Anton Ivanov Yury Namestnikov	Kaspersky Securelist	Dyre CTB-Locker CryptoLocker FakeToken Cryptowall CoinVault TeslaCrypt ChePro Marcher Cryakl Shade Scatter Upatre
Le dropper de CTB-Locker	Christophe Rieunier		CTB-Locker
LogPOS - new point of sale malware using mailslots	Nick Hoffman	Morphick	Backoff Alina LogPOS Eagle Spark Getmypass LusyPOS Daredevil NewPOSThings
Microsoft partners with Interpol, industry to disrupt global malware attack affecting more than 770,000 PCs in past six months	Rex Plantado Tommy Blizard Rodel Finones Tanmay Ganacharya	Microsoft	Simda
New GamaPoS malware piggybacks on Andromeda botnet; spreads in 13 US states	Jay Yaneza	Trend Micro	GamaPoS
New RATs emerge from leaked Njw0rm source code	Michael Marcos	Trend Labs	Njw0rm Kjw0rm Sir DoOom
New point-of-sale malware distributed by Andromeda botnet	Lucian Constantin	CIO IDG News	GamaPoS
NewPosThings has new PoS things	Jay Yaneza	TrendLabs Security Intelligence Blog	NewPOSThings
NitlovePOS: another new POS malware	Nart Villeneuve Daniel Regalado	FireEye	NitlovePOS
NjRAT & H-Worm variant infections continue to rise		Zscaler	Njw0rm NjRAT
One-man PoS malware operation captures 22,000 credit card details in Brazil		TrendLabs Security Intelligence Blog	FighterPOS
PoisonIvy adapts to communicate through authentication proxies	Shusei Tomonaga	JPCERT-CC	Poison Ivy
Post-mortem of a zombie: Conficker cleanup after six years	Hadi Asghari Michael Ciere Michel J.G. van Eeten	24th USENIX Security Symposium	Conficker
Ransomware report: the rise of BandarChor	FSLabs	F-Secure	BandarChor
Stolen passwords allowed hackers to steal over one billion rubles	Thu Pham	Duo security	RDPdoor	Anunak
The Andromeda/Gamarue botnet is on the rise again	Paul Rascagnères	GData	Andromeda
The DGA of Symmi	Johannes Bader	Johannes Bader	Beebone
Threat spotlight: Angler lurking in the domain shadows	Joel Esler Nick Biasini	CISCO
Tis the season for shipping and phishing	Andrey Kostin	Kaspersky Securelist
TorrentLocker ransomware uses email authentication to refine spam runs	Jon Oliver	TrendLabs Security Intelligence Blog	TorrentLocker
Trend Micro discovers MalumPoS; malware targeting hotels and other US industries	Jay Yaneza	Trend Micro	MalumPoS
Upatre, Dyre used in Univ. of Florida attack	Teri Robinson	SC Magazine	Dyre Upatre
Watch out for CoreBot, new stealer in the wild	Limor Kessem Martin Korman	Security Intelligence	CoreBot
You can’t be invulnerable, but you can be well protected	Vyacheslav Zakorzhevsky	Kaspersky Securelist
Your files are encrypted with a “Windows 10 Upgrade”	TALOS	CISCO	CTB-Locker