ANTHROPOID SPIDER

Technical analysis of WarZoneRAT malware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Technical analysis of WarZoneRAT malware

2023%20Q2%20Botnet%20Threat%20Update.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 2023%20Q2%20Botnet%20Threat%20Update.pdf

Securonix Threat Labs Security Advisory: New MULTI#STORM Attack Campaign Involving Python-based Loader Masquerading as OneDrive Utilities Dropping Multiple RAT Payloads Using Security Analytics

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Securonix Threat Labs Security Advisory: New MULTI#STORM Attack Campaign Involving Python-based Loader Masquerading as OneDrive Utilities Dropping Multiple RAT Payloads Using Security Analytics

Tomiris called, they want their Turla malware back

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Tomiris called, they want their Turla malware back

2023%20Q1%20Botnet%20Threat%20Update.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 2023%20Q1%20Botnet%20Threat%20Update.pdf

[QuickNote] Decrypting the C2 configuration of Warzone RAT

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor [QuickNote] Decrypting the C2 configuration of Warzone RAT

Ave Maria and the Chambers of Warzone RAT | Huntress

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ave Maria and the Chambers of Warzone RAT | Huntress

奇安信威胁情报中心

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 奇安信威胁情报中心

mas_6-1.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor mas_6-1.pdf

2022%20Q3%20Botnet%20Threat%20Update.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 2022%20Q3%20Botnet%20Threat%20Update.pdf

Russia-Nexus UAC-0113 Emulating Telecommunication Providers in Ukraine

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Russia-Nexus UAC-0113 Emulating Telecommunication Providers in Ukraine

Malware Being Distributed by Disguising Itself as Icon of V3 Lite - ASEC

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware Being Distributed by Disguising Itself as Icon of V3 Lite - ASEC

WarzoneRAT Can Now Evade Detection With Process Hollowing

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor WarzoneRAT Can Now Evade Detection With Process Hollowing

Secure Communications Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Secure Communications Blog

New SYK Crypter Distributed Via Discord

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor New SYK Crypter Distributed Via Discord

Phishing Campaign Delivering Three Fileless Malware: AveMariaRAT / BitRAT / PandoraHVNC – Part I | FortiGuard Labs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Phishing Campaign Delivering Three Fileless Malware: AveMariaRAT / BitRAT / PandoraHVNC – Part I | FortiGuard Labs

Malware development: persistence - part 3. COM DLL hijack. Simple C++ example.

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware development: persistence - part 3. COM DLL hijack. Simple C++ example.

Secure Communications Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Secure Communications Blog

DBatLoader: Abusing Discord to Deliver Warzone RAT

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor DBatLoader: Abusing Discord to Deliver Warzone RAT

Operation “Armor Piercer:” Targeted attacks in the Indian subcontinent using commercial RATs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Operation “Armor Piercer:” Targeted attacks in the Indian subcontinent using commercial RATs

Water Basilisk Uses New HCrypt Variant to Flood Victims with RAT Payloads

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Water Basilisk Uses New HCrypt Variant to Flood Victims with RAT Payloads

https://www.trendmicro.com/content/dam/trendmicro/global/en/research/21/i/apt-c-36-updates-its-long-term-spam-campaign-against-south-american-entities-with-commodity-rats/BlindEagleIOCList.txt

Malpedia library date Trend Micro fromORKLCCS '25 data

Archived copy on ORKL Detailsfor https://www.trendmicro.com/content/dam/trendmicro/global/en/research/21/i/apt-c-36-updates-its-long-term-spam-campaign-against-south-american-entities-with-commodity-rats/BlindEagleIOCList.txt

APT-C-36 Updates Its Long-term Spam Campaign Against South American Entities With Commodity RATs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor APT-C-36 Updates Its Long-term Spam Campaign Against South American Entities With Commodity RATs

Automation to Combat Evolving Obfuscation – Cipher Tech Solutions, Inc.

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Automation to Combat Evolving Obfuscation – Cipher Tech Solutions, Inc.

WARZONE RAT – Beware Of The Trojan Malware Stealing Data Triggering From Various Office Documents - Home

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor WARZONE RAT – Beware Of The Trojan Malware Stealing Data Triggering From Various Office Documents - Home

Cyber Threats 2020: A Year in Retrospect

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cyber Threats 2020: A Year in Retrospect

Confucius APT Deploys Warzone RAT

Malpedia library date Uptycs fromORKLCCS '25 data

Archived copy on ORKL Detailsfor Confucius APT Deploys Warzone RAT

2020: The year in malware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 2020: The year in malware

Do you want to bake a donut? Come on, let’s go update~ Go away, Maria.

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Do you want to bake a donut? Come on, let’s go update~ Go away, Maria.

Warzone RAT Comes With UAC Bypass Technique

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Warzone RAT Comes With UAC Bypass Technique

APT trends report Q3 2020

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor APT trends report Q3 2020

Salfram: Robbing the place without removing your name tag

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Salfram: Robbing the place without removing your name tag

2020-q2-spamhaus-botnet-threat-report.pdf

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor 2020-q2-spamhaus-botnet-threat-report.pdf

CTNT_Q1_2020_COVID-Report_Final.pdf

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor CTNT_Q1_2020_COVID-Report_Final.pdf

Report2020CrowdStrikeGlobalThreatReport

Malpedia library date fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Report2020CrowdStrikeGlobalThreatReport

Warzone: Behind the enemy lines - Check Point Research

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Warzone: Behind the enemy lines - Check Point Research

FIN7.5_ the infamous cybercrime rig “FIN7” continues its activities

date in the CCS '25 data FireEye fromORKLCCS '25 data

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor FIN7.5_ the infamous cybercrime rig “FIN7” continues its activities

Fin7 hacking group targets more than 130 companies after leaders’ arrest

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Fin7 hacking group targets more than 130 companies after leaders’ arrest

FIN7.5- the infamous cybercrime rig “FIN7” continues its activities

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor FIN7.5- the infamous cybercrime rig “FIN7” continues its activities

FIN7.5: the infamous cybercrime rig “FIN7” continues its activities

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor FIN7.5: the infamous cybercrime rig “FIN7” continues its activities

Fin7 hacking group targets more than 130 companies after leaders’ arrest

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Fin7 hacking group targets more than 130 companies after leaders’ arrest

Threat Alert: AVE MARIA Infostealer on the Rise

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat Alert: AVE MARIA Infostealer on the Rise

EmpireMonkey malware distribution

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor EmpireMonkey malware distribution

New Global Cyber Attack on Point of Sale Sytem

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor New Global Cyber Attack on Point of Sale Sytem

New Global Cyber Attack on Point of Sale Systems

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor New Global Cyber Attack on Point of Sale Systems