I added a Malware C2 Panels tracker on the blog. It can be located at http://tracker.viriback.com A search feature in the header is available to search for a specific malware family, or search part of a url. You can also…
Recent LiteHTTP activities and IOCs
This post serves as a dump of IOCs seen in the last 90 days related to LiteHTTP malware. The interest into LiteHTTP came from a bump in sighting in the month of may 2018. One particular instance of a control…
6 months of QuantLoader
Last december 2017, I started to actively hunt for Malware c2 web panels via virustotal submissions and open source data. I encountered 37 families of malware that had an HTTP web panels. Some are very common, like lokibot, pony, some…