Malware Analysis

August 28, 2019 10:08

RAT Ratatouille: Backdooring PCs with leaked RATs

Executive summary Orcus RAT and RevengeRAT are two of the most popular remote access trojans (RATs) in use across the threat landscape. Since its emergence in 2016, various adversaries used RevengeRAT to attack organizations and individuals around the world. The source code asso

By Holger Unterbrink

November 8, 2018 12:11

Metamorfo Banking Trojan Keeps Its Sights on Brazil

This blog post was authored by Edmund Brumaghin, Warren Mercer, Paul Rascagneres, and Vitor Ventura. Executive Summary Financially motivated cybercriminals have used banking trojans for years to steal sensitive financial information from victims. They are often created to gath

By Paul Rascagneres

Delphi Malware Research Trojan Malware Analysis Powershell Brazil Banking Trojan

September 26, 2018 10:09

VPNFilter III: More Tools for the Swiss Army Knife of Malware

# code Summary VPNFilter — a multi-stage, modular framework that has infected hundreds of thousands of network devices across the globe — is now known to possess even greater capabilities. Cisco Talos recently discovered seven additional third-stage VPNFilter modules that add

By Edmund Brumaghin

VPN Filter Malware Analysis VPNFilter