Malware

RANSOM_PETYA.SMA

This variant of PETYA ransomware is involved in the ongoing attack campaign that Trend Micro discovered late June 2017 . Along with encryption capabilities it also has the ability to steal login credentials.
Read more

RANSOM_ELFEREBUS.A

This malware is a variant of the ransomware family EREBUS and was discovered to be involved in an attack against South Korean webhosting company NAYANA. Users affected by this malware may find their personal files and documents encrypted and thus rendered useless.
Read more

RANSOM_SOREBRECT.B

This malware is a variant of the SOREBRECT malware that Trend Micro discovered on June 2017. It sports fileless, code-injecting capabilities.
Read more

RANSOM_SOREBRECT.A

This malware is a variant of the SOREBRECT malware that Trend Micro discovered on June 2017. It sports fileless, code-injecting capabilities.
Read more

TROJ_POWHOV.A

This malware is part of the malware spam attack Trend Micro uncovered early June of 2017, one that targeted certain organizations in the EMEA region. It has the capability of delivering malware through the act of showing a hyperlink's contents via mouse hover.
Read more

RANSOM_UIWIX.A

This ransomware was uncovered by Trend Micro during late May 2017. The first variant of the UIWIX malware family, it sports fileless infection capabilities as well as the ability to take advantage of the EternalBlue vulnerability.
Read more

RANSOM_WANA.A

This ransomware exploits the MS17-010 vulnerability to spread to other vulnerable computers. This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
Read more

Ransom_WCRY.SM

This ransomware exploits the MS17-010 vulnerability to spread to other vulnerable computers. This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
Read more

ELF_SHISHIGA.A

This malware was discovered on early May 2017 and is found to be capable of brute-forcing Telnet and SSH logins. Users affected by this malware may find the security of their systems compromised and at risk of information theft.
Read more

TROJ_EQUATED.G

This malware is related to the Shadow Broker dump that was released on late April, 2017. It exploits various vulnerabilities in Windows.
Read more