Malware

TROJ_EQUATED.G

This malware is related to the Shadow Broker dump that was released on late April, 2017. It exploits various vulnerabilities in Windows.
Read more   

TROJ_ETERNALROM.A

TROJ_ETERNALROM.A is a hacking tool released by a hacking group called Shadow Brokers.
Read more   

TROJ_EDUSCHO.A

This malware, detected April 2017, is a Trojan related to the hacking group Shadow Brokers' leak. The exploit targets server vulnerabilities and leverages internet and network protocols.
Read more   

TROJ_CVE20170199.D

This malware exploits a vulnerability found in Microsoft Office known as CVE-2017-0199. There are reports that exploits using the said vulnerability are in the wild.
Read more   

TROJ_CVE20170199.G

This malware exploits a vulnerability found in Microsoft Office known as CVE-2017-0199. There are reports that exploits using the said vulnerability are in the wild.
Read more   

TROJ_CVE20170199.E

This malware exploits a vulnerability found in Microsoft Office known as CVE-2017-0199. There are reports that exploits using the said vulnerability are in the wild.
Read more   

TROJ_CVE20170199.A

This malware exploits a vulnerability found in Microsoft Office known as CVE-2017-0199. There are reports that exploits using the said vulnerability are in the wild.
Read more   

TROJ_CVE20170199.JEJOVK

This malware exploits a vulnerability found in Microsoft Office known as CVE-2017-0199. There are reports that exploits using the said vulnerability are in the wild.
Read more   

ELF_IMEIJ.A

New Linux Arm malware spread via RFIs in cgi-bin scripts. This Backdoor executes commands from a remote malicious user, effectively compromising the affected system.
Read more   

RANSOM_NETIX.A

This malware, detected late January 2017, infects users through a Netflix login generator application. Once users attempt to use the application, the ransomware is installed and then executed on their system.
Read more