I did some spring cleaning yesterday and came up with these malware and exploit pcaps. Such pca...

Update May 6, 2013 We added ability to download corresponding samples and pcaps (when available...

The Explot Pack Table has been updated and you can view it here. Exploit Pack Table Update 1...

This is a detailed MD5 listing of CVE-2013-0640 pdf files that were posted earlier. I got a few re...

This is another excellent publication by Brian Mariani & Frédéric Bourla (High Tech Bridge) ...

Signature and security product testing often requires large numbers of sorted malicious and clean ...

If all you needed for happiness is to destroy a few virtual machines, here are the samples for...

These are the samples described in the Mandiant Report APT1, in the Indicators of Compromise (IOCs...

Someone shared a sample of the Linux rootkit affecting  servers running CloudLinux, CentOS &am...

In January 2013,  Iurii Khvyl and Peter Kruse from CSIS posted analysis of Shylock variant capa...

Just a few accumulated samples here found and shared by others. This one is for Linux SSHDoor m...

I am sure you remember excellent reverse engineering presentations by High-Tech Bridge experts I p...

FireEye posted details about the sleep function found in Kelihos/Hlux ( An encounter with Tro...

Update: Jan 18, 2013 - Here is a nice analysis  BatchWiper  Analysis by Emanuele De Lucia The nex...

Here are 7 binaries for Skynet Tor botnet aka Trojan.Tbot.  Claudio's analysis is wonderful...

Stocking stuffers. ZeroAccess rootkit is far from new and exciting but but this is a fresh lot wi...

More presents to come, pa rum pum pum pum     rum pum pum pum, rum pum pum pum

Here is another notable development of 2012 - Linux malware ( see Wirenet trojan posted earlier to...

Holiday presents. Research: Symantec. Trojan.Stabuniq Found on Financial Institution Servers...

End of the year presents. Point of Sale (POS) infostealer, aka Dexter. I got 3 more "teste...