Semantic search

This page or action requires Javascript to work, please enable Javascript in your browser or use a browser where this is supported so that functionality can be served and is provided as requested. For further assistance, please have a look at the noscript help page.

Search Clear all entries

	Author	Editor	Botnet
Emerging attack vectors - RSA slide deck	Ed Skoudis
Etude sur le fonctionnement du Trojan.Matsnu.1 codant les données des utilisateurs		Dr.Web	Rannoh
Exploring the market for stolen passwords	Brian Krebs	Brian Krebs	Andromeda Citadel
FAQ on Kelihos.B/Hlux.B sinkholing	David Dittrich	The Honeynet Project	Kelihos
Fake FBI Ransomware analysis	Hynek Blinka	AVG	Reveton
Fast look at an infection by a Blackhole Exploit Kit 2.0	Kafeine
Festi botnet analysis & investigation	Aleksandr Matrosov Eugene Rodionov	ESET	Festi
Flame, Duqu and Stuxnet: in-depth code analysis of mssecmgr.ocx	Aleksandr Matrosov Eugene Rodionov	ESET	Duqu Flame Stuxnet
Flame: replication via Windows Update MITM proxy	Aleks	Kaspersky lab	Flame
Flamer analysis: framework reconstruction	Aleksandr Matrosov Eugene Rodionov	ESET	Flame
Flamer: highly sophisticated and discreet threat targets the Middle East		Symantec	Flame
Flamer: urgent suicide		Symantec	Flame
Flashfake Mac OS X botnet confirmed	Igor Soumenkov	Kaspersky lab	Flashback
Fortiguard: Android/Stiniter.A!tr		Fortinet
From Georgia, with love Win32/Georbot		ESET
From Sakura to Reveton via Smoke Bot - or a botnet distribution of Reveton	Kafeine		Smoke Bot Reveton
Full analysis of Flame's Command & Control servers	GReAT	Kaspersky lab	Flame
Full analysis of Flame's command & control servers	GReAT	Kaspersky lab	Flame
Gangstaservice Winlock Affiliate	Xylitol	Xylibox	Casier
Gauss: Nation-state cyber-surveillance meets banking Trojan	GReAT	Kaspersky lab	Flame Gauss Stuxnet
Gauss: abnormal distribution	GReAT	Kaspersky lab	Gauss
Get gamed and rue the day...	Methusela Cebrian Ferrer	Microsoft	Andromeda
Getting more "personal" & deeper into Cridex with parfeit credential stealer infection	Hendrik Adrian		Cridex
Gimemo finally targeting USA with Camera Feature too	Kafeine		Gimemo
Gimemo wants to play in the big league	Kafeine		Gimemo
Guys behind Gauss and Flame are the same	Ali Islam	FireEye	Flame Gauss
Harvesting data on the Xarvester botmaster	Brian Krebs	Brian Krebs	Srizbi Xarvester
HerpesNet botnet 1.7	Lycroft Eugenia	Toolzware	HerpesNet
IRC bot for Android	Denis Maslennikov	Kaspersky lab
Industrial espionage and targeted attacks: understanding the characteristics of an escalating threat	Olivier Thonnard Gavin O’Gorman Leyla Bilge Seán Kiernan Martin Lee	RAID 2012	Nitro Sykipot Taidoor Stuxnet Hydraq
Inside Andromeda Bot v2.06 Webpanel / AKA Gamarue - Botnet Control Panel	Kafeine		Andromeda
Inside Blackhole Exploits Kit v1.2.4 - Exploit Kit Control Panel	Kafeine
Inside Citadel 1.3.4.5 C&C & Builder - Botnet Control Panel	Kafeine		Citadel
Inside Impact exploit kit	Kafeine	Kafeine
Inside Pony 1.7 / Fareit C&C - Botnet Control Panel	Kafeine	Malware don't need cofee	Pony
Inside Smoke Bot - Botnet Control Panel	Kafeine		Smoke Bot
Inside Smoke Bot - botnet control panel	Kafeine		Smoke Bot
Inside Ulocker	Xylitol		ULocker
Inside Upas Kit (1.0.1.1) aka Rombrast C&C - Botnet Control Panel	Kafeine	Blogspot	Upas
Inside an APT campaign with multiple targets in India and Japan		Trend Micro
Inside the Grum botnet	Brian Krebs	Brian Krebs	Grum
Inside view of Lyposit aka (for its friends) Lucky LOCKER	Kafeine		Lyposit
Insights into Win32/Bradop		Microsoft	Bradop
Interconnection of Gauss with Stuxnet, Duqu & Flame	Eugene Rodionov	ESET	Duqu Flame Gauss Stuxnet
Introducing Ponmocup-Finder	Tom U		Ponmocup
It’s 2012 and Armageddon has arrived	Jeff Edwards	Arbor SERT
It’s not the end of the world: DarkComet misses by a mile	Jeff Edwards	Arbor Networks	DarkComet
Java Runtime Environment 1.7 Zero-Day Exploit Delivers Backdoor	Manuel Gatbunton	Trend Labs
Java Zero-Days and the Blackhole Exploit Kit	Jon Oliver	Trend Micro
Joint strike force against Dorifel		SurfRight	Dorifel
Karagny.L unpack	RootBSD	Malware.lu	Casier
Kaspersky Lab et Seculert annoncent la récente découverte de « Madi », une nouvelle attaque de cyberespionnage au Moyen‑Orient	Kaspersky Lab	Global Security Mag	Madi
Kelihos back in town using Fast Flux		Abuse.ch	Kelihos Waledac
Kelihos is dead. Long live Kelihos	Gunter Ollmann	Damballa	Kelihos
Kelihos/Hlux botnet returns with new techniques	Maria Garnaeva	Kaspersky lab	Kelihos
Kelihos: not alien resurrection, more attack of the clones	David Harley	ESET	Kelihos Storm Waledac
King of spam:Festi botnet analysis	Aleksandr Matrosov Eugene Rodionov	ESET	Festi
Koobface botnet master KrotReal back in business, distributes ransomware and promotes BHSEO service/product	Dancho Danchev	Dancho Danchev	Koobface
Large-scale analysis of malware downloaders	Christian Rossow Christian Dietrich Herbert Bosz	DIMVA	Andromeda Donbot Gameover Sality Virut Renos Winwebsec Gbot Dofoil Karagany Emit GoldInstall Rodecap Harnig Dabvegi Zwangi Dldr-#2 Dldr-#1 Dldr-#3 TDSS Beebone
Latest SpyEye botnet active and cheaper	Umesh Wanve	McAfee	SpyEye
Learning stateful models for network honeypots	Konrad Rieck Tammo Krueger Hugo Gascon Nicole Krämer	ACM
Legal implications of countering botnets	Liis Vihul Christian Czosseck Katharina Ziolkowski Lauri Aasmann Ivo A. Ivanov Sebastian Brüggemann	NATO Cooperative Cyber Defence Centre of Excellence
Library file in certain Android apps connects to C&C servers	Weichao Sun	Trend Micro
Long life to Kelihos!	Gianluca Giuliani	Websense	Kelihos
MP-DDoser: A rapidly improving DDoS threat	Jeff Edwards	Arbor Sert	MP-DDoser
MP-DDoser:Monitoring a rapidly improving DDoS threat	Jeff Edwards	Arbor Sert	MP-DDoser
MSRT April 2012: Win32/Claretore	Tim Liu	Microsoft
MSRT June '12 - cleanup on aisle one		Microsoft	Kuluoz
MSRT March 2012: breaking bad	Rex Plantado	Microsoft	Dorkbot
MSRT November '12 - Weelsof around the world	Patrick Estavillo	Microsoft	Weelsof
MSRT September '12 - Medfos, hijacking your daily search	Shawn Wang	Microsoft	Medfos
MSRT march: three hioles in one	Shawn Wang	Microsoft	Andromeda
Mac BackDoor.Wirenet.1 config extractor	RootBSD Malware.lu	Malware.lu	Wirenet
Mac Flashback exploiting unpatched Java vulnerability	Brod	F-Secure	Flashback
Madi is back - New Tricks and a new Command&Control server	Nicolas Brulez	Kaspersky lab	Madi
Mahdi malware finds 150 new targets including U.S. and Germany, gets more evasive	Mike Lennon	Wired Business Media	Madi
Major shift in strategy for ZeroAccess rootkit malware, as it shifts to user-mode	James Wyke	Sophos Labs	ZeroAccess
Malicious Apache module injects Iframes	Denis Sinegubko	Unmask Parasites
Malicious Apache module used for content injection: Linux/Chapro.A	Pierre-Marc Bureau	ESET
Malware 2 - from infection to persistence	Mark Nicholls	Context	Carberp
Malware Memory Analysis - Volatility	Basement Tech	Basement PC Tech
Malware Uses Google Go Language	Flora Liu	Symantec	Encriyoko
Malware analysis Rannoh/Matsnu	Paul Rascagnères Hugo Caron	Malware.lu	Rannoh
Malware analysis tutorial 32: exploration of botnet client	Dr. Xiang Fu	Dr. Xiang Fu
Malware attacking POS systems	Adam Blaszczyk	Hexacorn	Dexter
Malware discovered developed with Google's "Go" programming language	Steve Ragan	Wired Business Media	Encriyoko
Malware hunting with the Sysinternals tools	Mark Russinovich	MSDN	Stuxnet
Malware targeting Windows 8 uses Google Docs	Takashi Katsuki	Symantec	Makadocs
McAfee Labs threat advisory : W32.Pinkslipbot		McAfee	Akbot
Measuring botnet populations	Jose Nazario	Arbor Sert	Conficker Miner
Meet CritXPack (Previously Vintage Pack)	Kafeine	Kafeine
Meet ProPack Exploit Pack - yes that's a lot of pack	Kafeine	Blogspot	Lyposit
Meet ‘Flame’, the massive spy malware infiltrating Iranian computers	Kim Zetter		Flame
Members of the largest criminal group engaged in online banking fraud are detained		Group-IB	Carberp
Microsoft and financial services industry leaders target cybercriminal operations from ZeuS botnets	Richard Domingues Boscovich	Microsoft	SpyEye ZeuS Ice-IX
Microsoft disrupts the emerging Nitol botnet being spread through an unsecure supply chain	Richard Domingues Boscovich	Microsoft	Nitol
MoVP 1.3 Desktops, heaps, and ransomware	Michael Hale Ligh	Volatility labs	Accdfisa Tigger
Monkif botnet hides commands in JPEGs	Vikas Taneja	McAfee Labs	Monkif
More Flame/Skywiper CNC behavior uncovered	Ali Islam	FireEye	Flame
More details of the Dorifel servers	Rickey Gevers	Rickey Gevers	Dorifel

Semantic search

Query log

Navigation menu

Search