FAUTLReports

Tearing Apart the Undetected (OSX)Coldroot RAT

2018-02-17

file_types:bin malware_types:rat architecture:x86_64 file_types:python file_types:sh file_types:bash malware_types:backdoor malware_types:keylogger platforms:macos techniques:packing

Analyzing OSX/CreativeUpdater

2018-02-05

Objective-See

file_types:ruby file_types:zip file_types:python file_types:sh file_types:so techniques:persistence malware_types:trojan malware_types:dropper file_types:xml platforms:macos

Analyzing CrossRAT

2018-01-24

Objective-See

file_types:dll platforms:linux file_types:bin architecture:x86_64 platforms:ubuntu platforms:centos platforms:arch linux platforms:suse platforms:kali linux platforms:fedora

Analysis of a Polish BankBot

2018-01-16

CERT.PL

Author: Agnieszka Bielec

malware_types:botnet malware_types:trojan platforms:android source_tag:analysis source_tag:malware malware_types:bankbot

An Unpatched Kernel Bug

2018-01-16

Objective-See

file_types:so file_types:c platforms:macos disassembler:hopper

Ay MaMi - Analyzing a New macOS DNS Hijacker: OSX/MaMi

2018-01-11

Objective-See

file_types:bin architecture:x86_64 file_types:sh file_types:so platforms:windows file_types:xml platforms:macos file_types:mach-o debugger:lldb file_types:objective-c

All Your Docs Are Belong To Us

2018-01-01

Objective-See

file_types:txt file_types:bin malware_types:loader file_types:so malware_types:virus techniques:persistence file_types:cpp platforms:macos file_types:rtf cve:cve-2010-3333

Mac Malware of 2017

2017-12-23

Objective-See

malware_types:ransomware file_types:ruby file_types:zip file_types:txt file_types:pdf file_types:bin architecture:x86_64 file_types:python file_types:json file_types:mach-o

Why <blank> Gets You Root

2017-11-29

Objective-See

file_types:so platforms:macos debugger:lldb cve:cve-2017-13872

From the Top to the Bottom; Tracking down CVE-2017-7149

2017-11-25

Objective-See

architecture:x86_64 file_types:so file_types:c platforms:macos debugger:lldb file_types:dylib file_types:objective-c cve:cve-2017-7149

OceanLotus Blossoms: Mass Digital Surveillance and Attacks Targeting ASEAN, Asian Nations, the Media, Human Rights Groups, and Civil Society

2017-11-06

VOLEXITY

Author: Dave Lassalle, Sean Koessel, Steven Adair

A deeper look at Tofsee modules

2017-10-19

CERT.PL

Author: Jarosław Jedynak

source_tag:analysis source_tag:malware source_tag:tofsee

Ramnit – in-depth analysis

2017-09-29

CERT.PL

Author: Michał Praszmo

file_types:html source_tag:analysis source_tag:malware source_tag:ramnit

High Sierra's 'Secure Kernel Extension Loading' is Broken

2017-09-05

Objective-See

disassembler:die file_types:sh file_types:so platforms:windows platforms:macos

WTF is Mughthesec!? Poking on a Piece of Undetected Adware

2017-08-08

Objective-See

file_types:bin file_types:so malware_types:virus cloud_environments:vmware file_types:xml platforms:macos malware_types:adware

Real News, Fake Flash: Mac OS X Users Targeted

2017-07-24

VOLEXITY

Author: Volexity

file_types:javascript

OSX/MacRansom: Analyzing new Ransomware Targeting Macs

2017-06-12

Objective-See

malware_types:ransomware file_types:txt file_types:bin file_types:so file_types:bash techniques:persistence techniques:encryption platforms:macos debugger:lldb techniques:anti-analysis

Mole ransomware: analysis and decryptor

2017-05-30

CERT.PL

Author: Jarosław Jedynak

malware_types:ransomware file_types:so techniques:encryption techniques:decryptor source_tag:analysis source_tag:malware source_tag:tools

Analysis of Emotet v4

2017-05-24

CERT.PL

Author: Paweł Srokosz

malware_types:botnet malware_types:trojan malware_families:dridex source_tag:analysis source_tag:malware malware_families:emotet source_tag:dhl

OSX/Proton.B; a Brief Analysis, at 6 Miles Up

2017-05-10

Objective-See

file_types:zip file_types:txt file_types:bin file_types:sh file_types:macho file_types:xml file_types:scr platforms:macos file_types:mach-o file_types:objective-c

Malware Analysis Reports