APT Calypso RAT, Flying Dutchman Samples

2019-10-31 Calypso APT: new group attacking state institutions

Attackers exploit Windows SMB vulnerability CVE-2017-0143 or use stolen credentials to gain access, deploy the custom Calypso RAT and use it to upload other tools such as Mimikatz, EternalBlue and EternalRomance. They move laterally and steal data.

  

Download. Email me if you need the password (see in my profile)

 Malware Inventory (work in progress)

Masad Clipper and Stealer - Windows spyware exfiltrating data via Telegram (samples)

2019-09-25 Juniper. Masad Stealer: Exfiltrating using Telegram 

“Masad Clipper and Stealer” steals browser information, computer files,  and automatically replaces cryptocurrency wallets from the clipboard with its own.

It is written using Autoit scripts and then compiled into a Windows executable.
It uses Telegram to exfiltrate stolen information.

Download. Email me if you need the password (see in my profile)

Download 2

                             Malware Inventory (work in progress)

Amnesia / Radiation Linux botnet targeting Remote Code Execution in CCTV DVR samples

Amnesia / Radiation botnet samples 

Remote Code Execution in CCTV DVR (kerneronsec.com - 2016)

2017-04-06 Palo Alto Unit 42. New IoT/Linux Malware Targets DVRs, Forms Botnet

2016-08-11 CyberX Radiation IoT Cybersecurity campaign

Download. Email me if you need the password (see in my profile)

 Malware Inventory (work in progress)

Linux/AirDropBot samples

Malware Must Die:  MMD-0064-2019 - Linux/AirDropBot

Mirai variant targeting Linksys E-series - Remote Code Execution

tmUnblock.cgi 

Download. Email me if you need the password (see in my profile)

 Malware Inventory (work in progress)

HiddenWasp Linux malware backdoor samples

Intezer HiddenWasp Malware Stings Targeted Linux Systems 

Download. Email me if you need the password (see in my profile)

 Malware Inventory (work in progress)