This is the second part of Russian APT series. "APT29 - The Dukes Cozy Bear: APT29 is threat group that has been attributed to the R...

 We posted our take on the Trump's server story. If you have any feedback or corrections, send me an email (see my blog profile on Con...

 This post is for all of you, Russian malware lovers/haters. Analyze it all to your heart's content. Prove or disprove Russian h...

Research: SentinelOne, Tim Strazzere  Hiding in plain sight? Sample credit: Tim Strazzere List of files 9f7ead4a7e9412225be540c30e0...

Bitcoin mining malware for Linux servers - samples Research: Dr. Web. Linux.Lady Sample Credit:  Tim Strazzere MD5 list: 0DE8BCA75...

Research:  New OS X Ransomware KeRanger Infected Transmission BitTorrent Client Installer by Claud Xiao Sample credit: Claud Xiao Fi...

After 7 years of Contagio existence, Google Safe Browsing services notified Mediafire (hoster of Contagio and Contagiominidump files...

http://www.welivesecurity.com/2015/07/30/operation-potao-express/ http://www.welivesecurity.com/wp-content/uploads/2015/07/Operation-Pota...

Update May 12, 2015 Added  CVE-2015-0359 and updates for CVE-2015-0336   Exploit kit table 2014- 2015 (Sortable HTML table) ...

I get emails from readers asking for specific malware samples and thought I would make a mini post about it. Yes, I often obtain sam...

Just some links for your enjoyment List of security conferences in 2014 Video archives:

AlienSpy Java based cross platform RAT is another reincarnation of ever popular Unrecom/Adwind and Frutas RATs that have been circulating...

Research:  F-Secure: OnionDuke: APT Attacks Via the Tor Network Download Download. Email me if you need the passw...

PART II Wirelurker for Windows (WinLurker) Research:  Palo Alto Claud Xiao: Wirelurker for Windows Sample credit: Claud Xiao PAR...

Someone kindly shared their sample of the shellshock malware described by the Malware Must die group - you can read their analysis here...

Here are all samples (+ more) mentioned in this post by Fireeye : T he Little Signature That Could: The Curious Case of CZ Solution ...

'Tis the season. Here is a nice collection of ~100 Mac OS malware and Word document exploits carrying MacOS payload (all are CVE-...

The library of malware traffic patterns have been popular. We found it very useful as well ourselves and we encourage you to send your ...

Hope it is not a copyright violation and won't cause too much hate. I know Defcon will post better and complete data soon but many / m...

Wikipedia Update - Sept 4, 2013 I added more descriptions and changed NjRat / Backdoor.LV to  Vidgrab  - in the traffic communicati...

Exploits directed at Wordpress and/or Joomla content management systems(CMS) have been increasing at a dramatic rate over the past yea...

Update May 6, 2013 We added ability to download corresponding samples and pcaps (when available) Traffic analysis has been the primar...

This is a detailed MD5 listing of CVE-2013-0640 pdf files that were posted earlier. I got a few requests for samples that were already pos...

This is another excellent publication by Brian Mariani & Frédéric Bourla (High Tech Bridge) describing their discovery and research ...

Signature and security product testing often requires large numbers of sorted malicious and clean files to eliminate false positives and n...