Search

Mutopy (also known as Rodecap) is a malware family of Trojans used to download other malware. It also randomizes the way it drops its copies so that anti-malware products will have difficulty in cleaning the affected system.

WORM_BRONTOK.JM

This worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.It uses Windows Task Scheduler to create a scheduled task that executes the dropped copy.It modifies files, d...

RANSOM.WIN32.FLYTERPER.THIOGAH

This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.It connects to certain websites to send and receive information.It encrypts files with specific file ex...

Backdoor.Win32.EXSEEG.A

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.It executes commands from a remote malicious user, effectively compromising the affected system. It conne...

Ransom.Win64.RAWLD.THAAFBE

This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.It executes then deletes itself afterward.It drops files as ransom note. It avoids encrypting files wit...

Ransom_AMNESIA.G

This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.It is capable of encrypting files in the affected system.

Trojan.Win32.ZENPAK.GFCY

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.It executes then deletes itself afterward.

TROJ_KRYPTIK.LPB

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.It modifies the Internet Explorer Zone Settings.

TROJ_DELF.CTJ

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

20-063 (December 22, 2020)

* indicates a new version of an existing ruleDeep Packet Inspection Rules:DNS Server1010633* - Identified DNS Trojan.Linux.Anchor.A Traffic1010613* - Identified DNS Trojan.Win32.Trickbot.Dns Traffic1010632* - Identified DNS...

TSPY_AGENT.A

This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

TROJ_AGENT_032617.TOMB

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

WORM_BRONTOK.BSX

This worm arrives by connecting affected removable drives to a system. It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.It uses Windows Task Scheduler to create a sc...

WORM_MOZGOO.C

This worm arrives by connecting affected removable drives to a system. It arrives by accessing affected shared networks.It executes commands from a remote malicious user, effectively compromising the affected system.

TROJ_FRAUDLO.SMD

This Trojan connects to certain URLs. It may do this to remotely inform a malicious user of its installation. It may also do this to download possibly malicious files onto the computer, which puts the computer at a greater risk of infection by other...

RAMNIT