Malware Traffic Analysis Net
2025-01-28: Malware infection from web inject activity
1 day 22 hours ago
2025-01-23: Fake installer leads to Koi Loader/Koi Stealer
3 days 2 hours ago
2025-01-22: Traffic Analysis Exercise - Download from fake software site
1 week ago
2025-01-21: Quick post for Koi Loader/Koi Stealer activity
1 week ago
2025-01-13: KongTuke campaign leads to infection abusing BOINC platform
2 weeks 3 days ago
2025-01-09: CVE-2017-0199 XLS --> HTA --> VBS --> steganography --> DBatLoader/GuiLoader style malware
2 weeks 5 days ago
2025-01-04: Four days of scans and probes and web traffic hitting my web server
3 weeks 4 days ago
2024-11-14 - Raspberry Robin infection using WebDAV server
2 months 2 weeks ago
2024-10-23 - Redline Stealer infection
3 months 1 week ago
2024-10-17 - Two days of server scans and probes and web traffic
3 months 1 week ago
2024-10-07 - Data dump (Formbook, possible Astaroth/Guildma, Redline Stealer, unidentified malware)
3 months 3 weeks ago
2024-10-03 - SmartLoader to Lumma Stealer
3 months 3 weeks ago
2024-10-01 - Ukrainian language malspam pushes RMS-based malware
3 months 3 weeks ago
2024-09-19 - File downloader to Lumma Stealer
4 months 1 week ago
2024-09-17 - Snake KeyLogger (VIP Recovery) infection, FTP exfil
4 months 1 week ago
2024-09-16 - Snake KeyLogger (VIP Recovery) infection, SMTP exfil
4 months 1 week ago
2024-09-12 - Approximately 11 days of server scans and probes
4 months 2 weeks ago
2024-09-11 - Data dump: Remcos RAT and XLoader (Formbook)
4 months 2 weeks ago
2024-09-04 - Traffic Analysis Exercise: Big Fish in a Little Pond
4 months 3 weeks ago
Checked
3 hours 7 minutes ago
A malware traffic analysis blog
Malware Traffic Analysis Net feed