Here are all samples (+ more) mentioned in this post by Fireeye : T he Little Signature That Could: The Curious Case of CZ Solution ...

'Tis the season. Here is a nice collection of ~100 Mac OS malware and Word document exploits carrying MacOS payload (all are CVE-...

The library of malware traffic patterns have been popular. We found it very useful as well ourselves and we encourage you to send your ...

Hope it is not a copyright violation and won't cause too much hate. I know Defcon will post better and complete data soon but many / m...

Wikipedia Update - Sept 4, 2013 I added more descriptions and changed NjRat / Backdoor.LV to  Vidgrab  - in the traffic communicati...

Exploits directed at Wordpress and/or Joomla content management systems(CMS) have been increasing at a dramatic rate over the past yea...

Update May 6, 2013 We added ability to download corresponding samples and pcaps (when available) Traffic analysis has been the primar...

This is a detailed MD5 listing of CVE-2013-0640 pdf files that were posted earlier. I got a few requests for samples that were already pos...

This is another excellent publication by Brian Mariani & Frédéric Bourla (High Tech Bridge) describing their discovery and research ...

Signature and security product testing often requires large numbers of sorted malicious and clean files to eliminate false positives and n...

If all you needed for happiness is to destroy a few virtual machines, here are the samples for today's headline maker. The malwar...

Update: May 19, 2018 APT 1 resources Threat Actor aliases: Comment Crew, Comment Panda, PLA Unit 61398, TG-8223, APT 1,           BrownF...

Someone shared a sample of the Linux rootkit affecting  servers running CloudLinux, CentOS & cPanel. Here are the links: F eb ...

In January 2013,  Iurii Khvyl and Peter Kruse from CSIS posted analysis of Shylock variant capable of spreading through Skype. You ca...

Just a few accumulated samples here found and shared by others. This one is for Linux SSHDoor malware, which can steal your SSH passwor...

I am sure you remember excellent reverse engineering presentations by High-Tech Bridge experts I posted earlier.   High-Tech Bridge presen...

FireEye posted details about the sleep function found in Kelihos/Hlux ( An encounter with Trojan  Nap ), which is interesting, and i...

Update: Jan 18, 2013 - Here is a nice analysis  BatchWiper  Analysis by Emanuele De Lucia The next time the virus will wake up is Jan 21,...

Stocking stuffers. ZeroAccess rootkit is far from new and exciting but but this is a fresh lot with still active C2 servers. Although th...

More presents to come, pa rum pum pum pum     rum pum pum pum, rum pum pum pum

Here is another notable development of 2012 - Linux malware ( see Wirenet trojan posted earlier too ) Research: ESET Malicious Apache mod...

Holiday presents. Research: Symantec. Trojan.Stabuniq Found on Financial Institution Servers More research:  Stabuniq in-Depth  by...

End of the year presents. Point of Sale (POS) infostealer, aka Dexter. I got 3 more "tester-type" samples and added them belo...

End of the year presents: This is a sample of Hikit rootkit  Aug 2012 Related News and Analysis: The “Hikit” Rootkit: Advanced and ...

End of the year presents: Malicious Java file containing W32.Crisis and OSX.Crisis Related News and Analysis: Aug 2012 Crisis for Win...

End of the year presents: This is a sample of W32.Vobfus / Worm_Vobfus Related News and Analysis: Nov 2012   Trend Micro What’s the...

End of the year presents: These is a sample of W32.Makadocs Related News and Analysis: November 2012 Malware Targeting Windows 8 Uses...

End of the year presents: Backdoor.Wirenet.1 Related News and Analysis: August 2012 The first Trojan in history to steal Linux and M...

End of the year presents: This is a sample of W32.Narilam  Related News and Analysis: Nov 2012 (malware is much older but re-surfaced ...

End of the year presents: These are 4 samples of Skype Dorkbot / W32.Phopifas Related News and Analysis: October 2012 Infection Spre...

Img.baronet4tibet. Tibetan furniture  featuring a leopard and a lion Better late than never. Here are the samples of the rec...

Update November 14, 2012 1. We forgot to mention that in the best tradition of the Antivirus industry, all posters come with one (1) year...