Update: Adobe Released the patch yesterday and  I posted a few samples below. There were several campaigns with two variants -  1) ...

Update - posted a list of the dropped files for each file and the C&C info from pcaps in the end of the post - for review and easy Go...

I have been away and busy with all kinds of stuff (some malware related and some not :)  but I am back. I played a little recently wi...

Believe it or not, I am still alive and will post something soon.

With the express written permission from the author, here is a an excellent paper " A Detailed Analysis of an Advanced Persistent Thr...

Another day, another sample. CVE-2009-3129 XLS file from kevins19702@gmail.com, but it was actually sent by a Hinet server (I guess Gmail ...

Here is one more sample. Call home to 112.213.126.67 googlemail.proxydns.com

CVE-2011-0611 PDF file with yet another Taidoor Trojan calling home to 211.233.62.148 (LG DACOM KIDC Korea)

I will post a few samples without analysis. This one is CVE-2011-0611 PDF with Taidoor Trojan exploiting Gaddafi's death with outgoing...

We are pleased to introduce DeepEnd Research, an independent information security research group that will focus on threat and inte...

Img: materkat.wordpress.com Oct 20 = Note: I added another file.  According to Symantec: "Duqu does not contain any code r...

   I thought that Russian Matryoshka aka Rustock the Nested Doll would be a good subject after the previous post...

CyberESI Jared Myers from CyberESI posted a fantastic detailed analysis of Taidoor trojan variant he called Trojan. Matryoshka f...

These 4 phish message attempt to utilize CVE-2011-1991 type (1) deskpan.dll in the Display Panning CPL Extension. Here is a clear explan...

Not one, my lord. Besides, it should appear, that if he had The present money to discharge the Jew, He would not take it. Never ...

On September 13, 2011 , Marco Giuliani from Webroot posted a detailed analysis of Mebromi - BIOS rootkit affecting Chinese computers with...

Introducing ESAT NQD32 and "Test Version" of Windows ESAT robot iz  very sad I wasn't planning to make any posts wh...