zeusmuseum.

https://zeusmuseum.com/

#zeus #malware #history

Buer, a new loader emerges in the underground marketplace

https://www.proofpoint.com/us/threat-insight/post/buer-new-loader-emerges-underground-marketplace (co-author)

TA505 Distributes New SDBbot Remote Access Trojan with Get2 Downloader

https://www.proofpoint.com/us/threat-insight/post/ta505-distributes-new-sdbbot-remote-access-trojan-get2-downloader

LookBack Malware Targets the United States Utilities Sector with Phishing Attacks Impersonating Engineering Licensing Boards

https://www.proofpoint.com/us/threat-insight/post/lookback-malware-targets-united-states-utilities-sector-phishing-attacks (LookBack malware reversing)

Chinese APT “Operation LagTime IT” Targets Government Information Technology Agencies in Eastern Asia

https://www.proofpoint.com/us/threat-insight/post/chinese-apt-operation-lagtime-it-targets-government-information-technology (Cotx RAT malware reversing)

AndroMut Downloader

https://www.proofpoint.com/us/threat-insight/post/ta505-begins-summer-campaigns-new-pet-malware-downloader-andromut-uae-south (co-author)

Cryptopals Set 2: Block crypto

Set 2 is up on GitHub.

Steal or Get Off the KPOT

https://www.proofpoint.com/us/threat-insight/post/new-kpot-v20-stealer-brings-zero-persistence-and-memory-features-silently-steal

Cryptopals Set 1: Basics

Working my way through the Cryptopals crypto challenges using Python. Set 1 is up on GitHub.

DanaBot control panel revealed

https://www.proofpoint.com/us/threat-insight/post/danabot-control-panel-revealed

ServHelper and FlawedGrace - New malware introduced by TA505

https://www.proofpoint.com/us/threat-insight/post/servhelper-and-flawedgrace-new-malware-introduced-ta505 (co-author)