Malware

Backdoor.SH.SHELLBOT.AA

 OVER ALL RISK RATING:

This backdoor comes bundled with a Monero miner, both spread by a botnet. The techniques employed ar...
Read More   

Backdoor.Win64.ANCHOR.A

 OVER ALL RISK RATING:

This is the Trend Micro detection for the backdoor installed by the PowerTrick post-exploitation too...
Read More   

Backdoor.MSIL.REMCOS.AOJ

 OVER ALL RISK RATING:

This malware was seen delivered via malicious spam spoofing the brand DHL as the sender. It came as ...
Read More   

Coinminer.Linux.KERBERDS.A

 OVER ALL RISK RATING:

This new version of KERBERDS, a known crypto-mining malware that uses an ld.so.
Read More   

Trojan.SH.KERBERDS.A

 OVER ALL RISK RATING:

This new version of KERBERDS, a cryptomining malware that uses an ld.so.
Read More   

Trojan.JS.NODSTER.A

 OVER ALL RISK RATING:

This malware is part of the fileless botnet Novter that is delivered via the KovCoreG malvertising c...
Read More   

Trojan.JS.KOVCOREG.A

 OVER ALL RISK RATING:

This malware is part of the fileless botnet Novter distributed by the KovCoreG malvertising campaign...
Read More   

Rootkit.Linux.SKIDMAP.A

 OVER ALL RISK RATING:

This rootkit is used by Skidmap - a Linux malware - to hide its cryptocurrency-mining abilities.This...
Read More   

Coinminer.Win64.MALXMR.TIAOODBZ

 OVER ALL RISK RATING:

This miner figured in the fileless GhostMiner that uses WMI Objects. GhostMiner is known to kill com...
Read More   

Backdoor.Linux.BASHLITE.SMJC2

 OVER ALL RISK RATING:

This backdoor is seen propagating via CVE-2018-18636, a cross-site scripting vulnerability affecting...
Read More