Malware Traffic Analysis Net
2025-01-28: Malware infection from web inject activity
8 months 2 weeks ago
2025-01-23: Fake installer leads to Koi Loader/Koi Stealer
8 months 2 weeks ago
2025-01-22: Traffic Analysis Exercise - Download from fake software site
8 months 2 weeks ago
2025-01-21: Quick post for Koi Loader/Koi Stealer activity
8 months 3 weeks ago
2025-01-13: KongTuke campaign leads to infection abusing BOINC platform
8 months 4 weeks ago
2025-01-09: CVE-2017-0199 XLS --> HTA --> VBS --> steganography --> DBatLoader/GuiLoader style malware
9 months ago
2025-01-04: Four days of scans and probes and web traffic hitting my web server
9 months 1 week ago
2024-11-14 - Raspberry Robin infection using WebDAV server
10 months 4 weeks ago
2024-10-23 - Redline Stealer infection
11 months 2 weeks ago
2024-10-17 - Two days of server scans and probes and web traffic
11 months 2 weeks ago
2024-10-07 - Data dump (Formbook, possible Astaroth/Guildma, Redline Stealer, unidentified malware)
1 year ago
2024-10-03 - SmartLoader to Lumma Stealer
1 year ago
2024-10-01 - Ukrainian language malspam pushes RMS-based malware
1 year ago
2024-09-19 - File downloader to Lumma Stealer
1 year ago
2024-09-17 - Snake KeyLogger (VIP Recovery) infection, FTP exfil
1 year ago
2024-09-16 - Snake KeyLogger (VIP Recovery) infection, SMTP exfil
1 year ago
2024-09-12 - Approximately 11 days of server scans and probes
1 year ago
2024-09-11 - Data dump: Remcos RAT and XLoader (Formbook)
1 year 1 month ago
2024-09-04 - Traffic Analysis Exercise: Big Fish in a Little Pond
1 year 1 month ago
Checked
3 hours 17 minutes ago
A malware traffic analysis blog
Malware Traffic Analysis Net feed