2016

(Year/Month)

Botnets

• Starting in 2016: Bashlight, Cerber, Coverton, CryptXXX, Floki, Jigsaw, Maktub Locker, Mirai, Revenge RAT
• Ending in 2016:

Publications

	Author	Editor	Botnet	Campaign
Android Marcher now marching via porn sites		Zscaler	Marcher
Attack on Zygote: a new twist in the evolution of mobile threats	Nikita Buchka Mikhail Kuzin	Kaspersky Securelist	Triada
CTB-Locker is back: the web server edition	Ido Naor	Kaspersky Securelist	CTB-Locker
CryptXXX: new ransomware from the actors behind Reveton, dropping via Angler	Kafeine	Proofpoint	CryptXXX Bedep Reveton
First step in cross-platform Trojan bankers from Brazil done	Dmitry Bestuzhev	Kaspersky Securelist
Hackers are increasingly targeting IoT Devices with Mirai DDoS Malware	Waqas Amir	HackRead	Mirai
MMD-0056-2016 - Linux/Mirai, how an old ELF malcode is recycled	Unixfreaxjp	Malware Must Die	Mirai
Microsoft security updates January 2016	Kurt Baumgartner	Kaspersky Securelist
New crypto-ransomware JIGSAW plays nasty games	Jasen Sumalapao	TrendLabs Security Intelligence Blog	Jigsaw
PETYA crypto-ransomware overwrites MBR to lock users out of their computers	Jasen Sumalapao	TrendLabs Security Intelligence Blog	Petya
Petya ransomware skips the files and encrypts your hard drive instead	Lawrence Abrams	Bleeping Computer	Petya
PlugX malware: A good hacker is an apologetic hacker	Dmitry Tarakanov	Kaspersky Securelist	PlugX
Social networks – A bonanza for cybercriminals	Ruslan Stoyanov	Kaspersky Securelist
Source Code for IoT Botnet ‘Mirai’ Released	Brian Krebs	Krebs on Security	Mirai Bashlight
The graphic design of "Maktub Locker" ransomware		F-Secure	Maktub Locker
Three month FrameworkPOS malware campaign nabs ~43,000 credit cards from point of sale systems	Luis Mendieta	Anomali	FrameworkPOS
TreasureHunt: a custom POS malware tool	Nart Villeneuve	FireEye	TreasureHunt
Trojan downloaders on the rise: don’t let Locky or TeslaCrypt ruin your day	Josep Albors	ESET Welivesecurity	TeslaCrypt Locky Nemucod
Updated Sundown Exploit Kit Uses Steganography	Brooks Li Joseph C. Chen	TrendLabs Security Intelligence Blog
Zeus variant Floki bot targets PoS data	Tom Spring	Threatpost	Floki