FAUTLReports

HandBrake Hacked! OSX/Proton (re)Appears

2017-05-07

file_types:zip file_types:bin file_types:sh file_types:so file_types:macho malware_types:virus malware_types:trojan file_types:xml platforms:macos file_types:mach-o

Two Bugs, One Func(), part three

2017-04-24

Objective-See

file_types:so file_types:c platforms:macos platforms:ios

Two Bugs, One Func(), part two

2017-04-06

Objective-See

architecture:x86_64 file_types:python file_types:so file_types:c platforms:macos debugger:lldb

Two Bugs, One Func(), part one

2017-03-27

Objective-See

malware_types:ransomware platforms:linux file_types:bin file_types:sh file_types:so file_types:bash techniques:encryption disassembler:ida pro platforms:macos debugger:lldb

Have you been haunted by the Gh0st RAT today?

2017-03-23

VOLEXITY

Author: Volexity

malware_types:rat malware_types:trojan

Happy Birthday to Objective-See

2017-03-19

Objective-See

file_types:dll file_types:so platforms:macos file_types:dylib malware_types:adware

MMD-0062-2017 - IoT/Studels SSH-TCP Forward Threat

2017-03-08

MalwareMustDie

Author: unixfreaxjp

platforms:linux file_types:python techniques:honeypot malware_types:botnet file_types:so file_types:go cve:cve-2005-2700 cve:cve-2004-0751 cve:cve-2005-3357 disassembler:radare2

From Italy With Love?

2017-02-17

Objective-See

techniques:code injection architecture:x86_64 file_types:so malware_types:downloader malware_types:virus file_types:c malware_types:backdoor platforms:macos debugger:lldb file_types:objective-c

New Attack, Old Tricks

2017-02-06

Objective-See

file_types:zip file_types:bin techniques:phishing file_types:python file_types:so techniques:persistence file_types:cmd file_types:xml platforms:macos file_types:dylib

Evil: A poor man’s ransomware in JavaScript

2017-01-18

CERT.PL

Author: Jarosław Jedynak

malware_types:ransomware file_types:javascript source_tag:analysis source_tag:malware source_tag:evil

Technical analysis of CryptoMix/CryptFile2 ransomware

2017-01-04

CERT.PL

Author: Jarosław Jedynak

malware_types:ransomware source_tag:analysis source_tag:malware source_tag:cryptfile2 source_tag:cryptomix

Mac Malware of 2016

2017-01-01

Objective-See

malware_types:ransomware file_types:zip platforms:linux file_types:pdf file_types:python file_types:php malware_types:trojan file_types:xls file_types:mach-o file_types:rtf

'Untranslocating' an App

2016-12-15

Objective-See

file_types:zip file_types:bin file_types:so file_types:go techniques:persistence platforms:macos file_types:mach-o file_types:dylib

MMD-0061-2016 - EnergyMech 2.8 overkill mod

2016-12-03

MalwareMustDie

Author: unixfreaxjp

platforms:linux architecture:x86 file_types:sh file_types:elf malware_types:botnet file_types:so disassembler:radare2 malware_types:downloader file_types:php file_types:bash

[0day] Bypassing Apple's System Integrity Protection

2016-12-01

Objective-See

malware_types:loader file_types:so file_types:go cloud_environments:vmware techniques:sandbox file_types:xml platforms:macos file_types:mach-o file_types:dylib file_types:objective-c

Forget the NSA, it's Shazam that's always listening!

2016-11-13

Objective-See

file_types:so file_types:c platforms:macos debugger:lldb file_types:objective-c

PowerDuke: Widespread Post-Election Spear Phishing Campaigns Targeting Think Tanks and NGOs

2016-11-09

VOLEXITY

Author: Steven Adair

techniques:phishing

MMD-0060-2016 - Linux/UDPfker and ChinaZ threat today

2016-10-30

MalwareMustDie

Author: unixfreaxjp

platforms:linux file_types:html file_types:elf file_types:so file_types:go disassembler:radare2 file_types:php malware_types:virus file_types:c

MMD-0059-2016 - Linux/IRCTelnet (new Aidra)

2016-10-29

MalwareMustDie

Author: unixfreaxjp

platforms:linux architecture:arm malware_types:loader architecture:mips file_types:sh file_types:elf malware_types:rootkit malware_types:virus malware_types:backdoor techniques:persistence

MMD-0058-2016 - Linux/NyaDrop - MIPS IoT bad news

2016-10-14

MalwareMustDie

Author: unixfreaxjp

platforms:linux file_types:pe architecture:arm malware_types:loader architecture:mips techniques:honeypot file_types:elf malware_types:botnet malware_types:virus malware_types:backdoor

Malware Analysis Reports