MMD-0053-2016 - A bit about ELF/STD IRC Bot: x00's CBack aka xxx.pokemon(.)inc Latest UPDATE incident of this threat is-->[link]BackgroundI received the report of the host... 2016-4-16 00:50:0 | 阅读: 9 | 收藏 | Malware Must Die! - blog.malwaremustdie.org pokemoninc upx i386 0100 irc

MMD-0052-2016 - Overview of "SkidDDoS" ELF++ IRC Botnet Tag: kaiten, ktx, tsunami, STD, stdbot, torlus, Qbot, gayfgt, lizard, lizkebab, antichrist, sinden,... 2016-2-7 18:8:0 | 阅读: 20 | 收藏 | Malware Must Die! - blog.malwaremustdie.org hxxp gtop binarys dogdicks 214

MMD-0051-2016 - Debunking a tiny ELF remote backdoor (shellcode shellshock part 2) The backgroundIn September 2014 during the ShellShock exploitation incidents was in the rush, one... 2016-2-3 17:33:0 | 阅读: 12 | 收藏 | Malware Must Die! - blog.malwaremustdie.org reverse shellcode machine socketcall mprotect

MMD-0050-2016 - Incident report: ELF Linux/Torte infection (in Wordpress) The indicatorSeveral hours ago, it was detected a suspicious inbound access on a Wordpress site w... 2016-1-12 11:20:0 | 阅读: 11 | 收藏 | Malware Must Die! - blog.malwaremustdie.org i386 php malicious windows

MMD-0049-2016 - A case of java trojan (downloader/RCE) for remote minerd hack BackgroundThis is a short post for supporting the takedown purpose. Warning: Sorry, this time ther... 2016-1-9 19:50:0 | 阅读: 11 | 收藏 | Malware Must Die! - blog.malwaremustdie.org remote trojan minerd coded download

MMD-0048-2016 - DDOS.TF = (new) ELF & Win32 DDoS service with ASP + PHP/MySQL MOF webshells BackgroundLinux exploitation by bad actors from People Republic of China (in short: PRC) is not a... 2016-1-5 10:39:0 | 阅读: 23 | 收藏 | Malware Must Die! - blog.malwaremustdie.org windows quadranet myss 236 ddostf

MMD-0047-2015 - SSHV: SSH bruter ELF botnet malware w/hidden process kernel module BackgroundApparently Linux ELF malware is becoming an interesting attraction from several actors... 2015-12-24 01:52:0 | 阅读: 8 | 收藏 | Malware Must Die! - blog.malwaremustdie.org malicious jerry ssh openly

MMD-0046-2015 - Kelihos 10 nodes CNC on NJIIX, New Jersey USA, with a known russian crook who rented them Global variable declaration to read correctly#include int main(void) { char * email = "XXXXX\(... 2015-12-21 20:53:0 | 阅读: 12 | 收藏 | Malware Must Die! - blog.malwaremustdie.org interserver 206 herder kelihos cencored

MMD-0045-2015 - KDefend: a new ELF threat with a disclaimer BackgroundIt's been a while not writing new analysis in our blog & this timing is just perfect.... 2015-12-4 05:44:0 | 阅读: 14 | 收藏 | Malware Must Die! - blog.malwaremustdie.org 225 analysis tcf coder