https://zerophagemalware.com/2019/07/24/july-24-2019-an-update-on-what-ive-been-up-to/2019-07-24T11:37:24+00:00monthlyhttps://zerophagemalware.com/about/https://zerophagemalware.com/wp-content/uploads/2017/01/zerophageicon21.pngzerophageicon22019-07-24T10:50:08+00:00weekly0.6https://zerophagemalware.com/2018/08/17/rig-ek-via-hookads-drops-azorult-loading-quasar-rat/https://zerophagemalware.com/wp-content/uploads/2018/08/qusarratdrop.pngqusarRATdrophttps://zerophagemalware.com/wp-content/uploads/2018/08/threats.pngThreatshttps://zerophagemalware.com/wp-content/uploads/2018/08/appout.pngappouthttps://zerophagemalware.com/wp-content/uploads/2018/08/azorultquasarappany.pngAzoRultQuasarAppAnyhttps://zerophagemalware.com/wp-content/uploads/2018/08/quasarratout2.pngQuasarRATOut2https://zerophagemalware.com/wp-content/uploads/2018/08/quasarratout.pngQuasarRATOUThttps://zerophagemalware.com/wp-content/uploads/2018/08/azorult2.pngAzorult2https://zerophagemalware.com/wp-content/uploads/2018/08/azorult1.pngAzoRult1https://zerophagemalware.com/wp-content/uploads/2018/08/rigcatch.pngRigCatchhttps://zerophagemalware.com/wp-content/uploads/2018/08/hookadsdecode.pngHookAdsDecode2018-08-17T16:23:00+00:00monthlyhttps://zerophagemalware.com/2018/06/15/gransoftek-drops-gandcrab-via-ascentor-loader/https://zerophagemalware.com/wp-content/uploads/2018/06/downloadgand.pngdownloadgandhttps://zerophagemalware.com/wp-content/uploads/2018/06/urlscan2.pngurlscan2https://zerophagemalware.com/wp-content/uploads/2018/06/urlscan1.pngurlscan1https://zerophagemalware.com/wp-content/uploads/2018/06/strings2.pngstrings2https://zerophagemalware.com/wp-content/uploads/2018/06/stringsloader.pngstringsLoaderhttps://zerophagemalware.com/wp-content/uploads/2018/06/htadownload.pngHTADownloadhttps://zerophagemalware.com/wp-content/uploads/2018/06/scripthta.pngscripthtahttps://zerophagemalware.com/wp-content/uploads/2018/06/cve.pngCVEhttps://zerophagemalware.com/wp-content/uploads/2018/06/grandtttraffic.pngGrandTttraffichttps://zerophagemalware.com/wp-content/uploads/2018/06/scriptonpage.pngscriptonpage2018-06-20T08:01:07+00:00monthlyhttps://zerophagemalware.com/2018/05/22/rig-ek-via-ngay-drops-smokeloader-xmr-miner/https://zerophagemalware.com/wp-content/uploads/2018/05/miner.pngminerhttps://zerophagemalware.com/wp-content/uploads/2018/05/any5.pngany5https://zerophagemalware.com/wp-content/uploads/2018/05/any3.pngany3https://zerophagemalware.com/wp-content/uploads/2018/05/any4.pngany4https://zerophagemalware.com/wp-content/uploads/2018/05/any2.pngany2https://zerophagemalware.com/wp-content/uploads/2018/05/any1.pngany1https://zerophagemalware.com/wp-content/uploads/2018/05/compsite.pngcompsitehttps://zerophagemalware.com/wp-content/uploads/2018/05/ngay.pngNgay2018-05-22T23:47:33+00:00monthlyhttps://zerophagemalware.com/2018/04/16/rig-ek-via-malvertising-drops-smoke-loader/https://zerophagemalware.com/wp-content/uploads/2018/04/vitali.pngVitalihttps://zerophagemalware.com/wp-content/uploads/2018/04/chaps3.pngchaps3https://zerophagemalware.com/wp-content/uploads/2018/04/chaps4.pngchaps4https://zerophagemalware.com/wp-content/uploads/2018/04/chaps2.pngchaps2https://zerophagemalware.com/wp-content/uploads/2018/04/chaps1.pngchaps1https://zerophagemalware.com/wp-content/uploads/2018/04/bhat.pngBhathttps://zerophagemalware.com/wp-content/uploads/2018/04/initialtweet.pngInitialTweethttps://zerophagemalware.com/wp-content/uploads/2018/04/anyrun.pngAnyRunhttps://zerophagemalware.com/wp-content/uploads/2018/04/rigsmokepic.pngRigSmokePic2018-04-16T16:08:50+00:00monthlyhttps://zerophagemalware.com/2018/04/09/rig-ek-drops-gandcrab-ransomware-via-fcve-2018-4878/https://zerophagemalware.com/wp-content/uploads/2018/04/flashpart.pngFlashparthttps://zerophagemalware.com/wp-content/uploads/2018/04/gandcrab.pngGandCrabhttps://zerophagemalware.com/wp-content/uploads/2018/04/gandcrab2.pngGandCrab2https://zerophagemalware.com/wp-content/uploads/2018/04/flashexploit.pngFlashExploithttps://zerophagemalware.com/wp-content/uploads/2018/04/rigeklandingpage.pngRigEkLandingPAgehttps://zerophagemalware.com/wp-content/uploads/2018/04/rigekgandcrab.pngRigEKGandCrab2018-04-09T23:49:12+00:00monthlyhttps://zerophagemalware.com/2018/02/10/grandsoft-ek-via-slots-drops-leviarcoin-miner/https://zerophagemalware.com/wp-content/uploads/2018/02/domain.pngdomainhttps://zerophagemalware.com/wp-content/uploads/2018/02/hash2.pnghash2https://zerophagemalware.com/wp-content/uploads/2018/02/hashes.pnghasheshttps://zerophagemalware.com/wp-content/uploads/2018/02/payloaddrop.pngpayloaddrophttps://zerophagemalware.com/wp-content/uploads/2018/02/minercoin.pngminercoinhttps://zerophagemalware.com/wp-content/uploads/2018/02/processspam.pngprocessspamhttps://zerophagemalware.com/wp-content/uploads/2018/02/grandsoft2.pngGrandSoft2https://zerophagemalware.com/wp-content/uploads/2018/02/grandsoft1.pngGrandSoft1https://zerophagemalware.com/wp-content/uploads/2018/02/slotsredirect.pngSlotsredirecthttps://zerophagemalware.com/wp-content/uploads/2018/02/grandsoftminer.pngGrandSoftMiner2018-02-10T00:20:49+00:00monthlyhttps://zerophagemalware.com/2018/01/23/maldoc-rtf-drop-loda-logger/https://zerophagemalware.com/wp-content/uploads/2018/01/lodac2.pnglodac2https://zerophagemalware.com/wp-content/uploads/2018/01/scriptlet.pngscriptlethttps://zerophagemalware.com/wp-content/uploads/2018/01/phishing-email.pngphishing emailhttps://zerophagemalware.com/wp-content/uploads/2018/01/lodalogger.pngLodaLoggerhttps://zerophagemalware.com/wp-content/uploads/2018/01/lodapic.pnglodapic2018-01-23T13:17:01+00:00monthlyhttps://zerophagemalware.com/2017/12/11/malware-snatch-loader-reloaded/https://zerophagemalware.com/wp-content/uploads/2017/12/capture.pngCapturehttps://zerophagemalware.com/wp-content/uploads/2017/12/uploads.pnguploadshttps://zerophagemalware.com/wp-content/uploads/2017/12/admin.pngadminhttps://zerophagemalware.com/wp-content/uploads/2017/12/c2.pngC2https://zerophagemalware.com/wp-content/uploads/2017/12/exc2.pngexc2https://zerophagemalware.com/wp-content/uploads/2017/12/trusted.pngtrustedhttps://zerophagemalware.com/wp-content/uploads/2017/12/processes.pngProcesseshttps://zerophagemalware.com/wp-content/uploads/2017/12/c2first.pngC2First2017-12-11T01:38:58+00:00monthlyhttps://zerophagemalware.com/2017/10/17/rig-ek-drops-ursnifisfb-variant/https://zerophagemalware.com/wp-content/uploads/2017/10/post.pngPOSThttps://zerophagemalware.com/wp-content/uploads/2017/10/datastore.pngdatastorehttps://zerophagemalware.com/wp-content/uploads/2017/10/webinjects.pngwebinjectshttps://zerophagemalware.com/wp-content/uploads/2017/10/folder.pngFolderhttps://zerophagemalware.com/wp-content/uploads/2017/10/copy.pngcopyhttps://zerophagemalware.com/wp-content/uploads/2017/10/zinkhole.pngzinkholehttps://zerophagemalware.com/wp-content/uploads/2017/10/3021.png302https://zerophagemalware.com/wp-content/uploads/2017/10/uirsnifrifg.pngUIrsnifRifg2017-10-17T18:58:15+00:00monthlyhttps://zerophagemalware.com/2017/10/14/rig-ek-drops-smoke-loaders-leading-to-xmr-miner/https://zerophagemalware.com/wp-content/uploads/2017/10/miner.pngminerhttps://zerophagemalware.com/wp-content/uploads/2017/10/minercopmms.pngminercopmmshttps://zerophagemalware.com/wp-content/uploads/2017/10/rigminer2.pngrigminerhttps://zerophagemalware.com/wp-content/uploads/2017/10/smokeloader1.pngSmokeLoader1https://zerophagemalware.com/wp-content/uploads/2017/10/compromised-site.pngcompromised sitehttps://zerophagemalware.com/wp-content/uploads/2017/10/xmrrig.pngXMRRighttps://zerophagemalware.com/wp-content/uploads/2017/10/infos.pnginfos2017-10-14T19:08:50+00:00monthlyhttps://zerophagemalware.com/2017/10/13/rig-ek-via-malvertising-drops-a-miner/https://zerophagemalware.com/wp-content/uploads/2017/10/rigminer1.pngRigMinerhttps://zerophagemalware.com/wp-content/uploads/2017/10/smoke.pngsmokehttps://zerophagemalware.com/wp-content/uploads/2017/10/smoke2.pngsmoke2https://zerophagemalware.com/wp-content/uploads/2017/10/uwotm8.pngUWOTM8https://zerophagemalware.com/wp-content/uploads/2017/10/final.pngfinalhttps://zerophagemalware.com/wp-content/uploads/2017/10/gege.pnggegehttps://zerophagemalware.com/wp-content/uploads/2017/10/302.png302https://zerophagemalware.com/wp-content/uploads/2017/10/30222.png30222https://zerophagemalware.com/wp-content/uploads/2017/10/rigminer.pngRigMinerhttps://zerophagemalware.com/wp-content/uploads/2017/10/stas.pngstas2017-10-13T18:51:50+00:00monthlyhttps://zerophagemalware.com/2017/09/21/rig-ek-via-rulan-drops-an-infostealer/https://zerophagemalware.com/wp-content/uploads/2017/09/steal.pngstealhttps://zerophagemalware.com/wp-content/uploads/2017/09/load.pngloadhttps://zerophagemalware.com/wp-content/uploads/2017/09/rulan1.pngrulanhttps://zerophagemalware.com/wp-content/uploads/2017/09/riginfo.pngRigInfo2017-09-21T13:03:48+00:00monthlyhttps://zerophagemalware.com/2017/09/11/rig-ek-via-rulan-drops-quant-loader-leads-to-ursnif/https://zerophagemalware.com/wp-content/uploads/2017/09/ursnif.pngUrsnifhttps://zerophagemalware.com/wp-content/uploads/2017/09/quantloader1.pngQuantLoaderhttps://zerophagemalware.com/wp-content/uploads/2017/09/dreambot.pngdreambothttps://zerophagemalware.com/wp-content/uploads/2017/09/haquant.pngHAQuanthttps://zerophagemalware.com/wp-content/uploads/2017/09/quant.pngQuanthttps://zerophagemalware.com/wp-content/uploads/2017/09/rigparams.pngRigParamshttps://zerophagemalware.com/wp-content/uploads/2017/09/rigkey2.pngRigKey2https://zerophagemalware.com/wp-content/uploads/2017/09/rigkey1.pngRigKey1https://zerophagemalware.com/wp-content/uploads/2017/09/rulan.pngRulanhttps://zerophagemalware.com/wp-content/uploads/2017/09/quantloader.pngQuantLoader2017-09-11T08:16:53+00:00monthlyhttps://zerophagemalware.com/2017/08/06/rig-ek-drops-bunitu-smoke-loader-andromeda-and-a-miner/https://zerophagemalware.com/wp-content/uploads/2017/08/andromeda.pngAndromedahttps://zerophagemalware.com/wp-content/uploads/2017/08/rigparams.pngRigParamshttps://zerophagemalware.com/wp-content/uploads/2017/08/rc4key.pngrc4Keyhttps://zerophagemalware.com/wp-content/uploads/2017/08/quadrig.pngquadrighttps://zerophagemalware.com/wp-content/uploads/2017/08/miningbot.pngMiningBothttps://zerophagemalware.com/wp-content/uploads/2017/08/buinut.pngBuinuthttps://zerophagemalware.com/wp-content/uploads/2017/08/smokeloader.pngSmokeloaderhttps://zerophagemalware.com/wp-content/uploads/2017/08/tds.pngTDShttps://zerophagemalware.com/wp-content/uploads/2017/08/robos.pngRoboshttps://zerophagemalware.com/wp-content/uploads/2017/08/rulan.pngRulan2017-08-18T19:59:28+00:00monthlyhttps://zerophagemalware.com/2017/08/03/rig-ek-via-malvertising-drops-a-trojaninfostealer/https://zerophagemalware.com/wp-content/uploads/2017/08/5888.png5888https://zerophagemalware.com/wp-content/uploads/2017/08/godmode.pngGodmodehttps://zerophagemalware.com/wp-content/uploads/2017/08/params.pngParamshttps://zerophagemalware.com/wp-content/uploads/2017/08/rigtrojan.pngRigTrojanhttps://zerophagemalware.com/wp-content/uploads/2017/08/growing.pngGrowing2017-08-03T01:07:49+00:00monthlyhttps://zerophagemalware.com/2017/08/01/rig-ek-via-javascript-re-director-drops-urlzone-trojan-banker/https://zerophagemalware.com/wp-content/uploads/2017/08/rigurlzone.pngRigUrlZonehttps://zerophagemalware.com/wp-content/uploads/2017/08/refreshtoco.pngRefreshtocohttps://zerophagemalware.com/wp-content/uploads/2017/08/redirector.pngredirectorhttps://zerophagemalware.com/wp-content/uploads/2017/08/302.png3022017-08-01T12:15:45+00:00monthlyhttps://zerophagemalware.com/2017/08/01/magnitude-ek-xml-package-and-changes/https://zerophagemalware.com/wp-content/uploads/2017/08/obfus.pngobfushttps://zerophagemalware.com/wp-content/uploads/2017/08/flashfile.pngFlashFilehttps://zerophagemalware.com/wp-content/uploads/2017/08/landingpage.pnglandingpagehttps://zerophagemalware.com/wp-content/uploads/2017/08/xml.pngXMLhttps://zerophagemalware.com/wp-content/uploads/2017/08/magnigate2.pngMagnigate2https://zerophagemalware.com/wp-content/uploads/2017/08/magnigate1.pngMagnigate1https://zerophagemalware.com/wp-content/uploads/2017/08/letsvape.pngletsvapehttps://zerophagemalware.com/wp-content/uploads/2017/08/letsvape2.pngletsvape2https://zerophagemalware.com/wp-content/uploads/2017/08/magnituderender.pngMagnitudeRenderhttps://zerophagemalware.com/wp-content/uploads/2017/08/magnitudepackage.pngMagnitudePackage2017-08-01T07:57:14+00:00monthlyhttps://zerophagemalware.com/2017/07/31/three-rig-ek-campaigns/https://zerophagemalware.com/wp-content/uploads/2017/07/rulan.pngRulanhttps://zerophagemalware.com/wp-content/uploads/2017/07/hookads2.pngHookads2https://zerophagemalware.com/wp-content/uploads/2017/07/hookads1.pngHookads1https://zerophagemalware.com/wp-content/uploads/2017/07/bunitu280717.pngBunitu2807172017-07-31T15:36:10+00:00monthlyhttps://zerophagemalware.com/2017/07/16/rig-ek-via-malvertising-drops-panda-banker/2017-07-16T15:49:30+00:00monthlyhttps://zerophagemalware.com/2017/07/14/rig-ek-delivers-kronos-banker/https://zerophagemalware.com/wp-content/uploads/2017/07/kronoscnc.pngkronosCnChttps://zerophagemalware.com/wp-content/uploads/2017/07/tripleframe.pngtripleFramehttps://zerophagemalware.com/wp-content/uploads/2017/07/kronos.pngKronoshttps://zerophagemalware.com/wp-content/uploads/2017/07/functions.pngfunctions2017-07-14T02:18:58+00:00monthlyhttps://zerophagemalware.com/2017/07/04/magnitude-ek-drops-cerber-scriplet-changed-to-bmp/https://zerophagemalware.com/wp-content/uploads/2017/07/scriptletdecode.pngScriptletDecodehttps://zerophagemalware.com/wp-content/uploads/2017/07/scripletobfs.pngScripletObfshttps://zerophagemalware.com/wp-content/uploads/2017/07/magprocesses.pngMagProcesseshttps://zerophagemalware.com/wp-content/uploads/2017/07/scripletcall.pngScripletCallhttps://zerophagemalware.com/wp-content/uploads/2017/07/magnitudebmp.pngMagnitudeBMP2017-07-04T01:56:10+00:00monthlyhttps://zerophagemalware.com/2017/06/28/magnitude-ek-drops-cbrb-cerber-ransomware/https://zerophagemalware.com/wp-content/uploads/2017/06/doublelanding.pngDoubleLandinghttps://zerophagemalware.com/wp-content/uploads/2017/06/processes.pngprocesseshttps://zerophagemalware.com/wp-content/uploads/2017/06/magnitudeek28.pngMagnitudeEK28https://zerophagemalware.com/wp-content/uploads/2017/06/cerberpic.pngcerberpic2017-06-28T01:47:09+00:00monthlyhttps://zerophagemalware.com/2017/06/24/rig-magnitude-1000-follower-post/2017-06-24T15:46:39+00:00monthlyhttps://zerophagemalware.com/2017/06/22/rig-ek-via-js-redirector-leads-to-pushdo-dropping-cutwail/https://zerophagemalware.com/wp-content/uploads/2017/06/violentposts.pngviolentpostshttps://zerophagemalware.com/wp-content/uploads/2017/06/smtpspam.pngSMTPspamhttps://zerophagemalware.com/wp-content/uploads/2017/06/harmless.pngHarmlesshttps://zerophagemalware.com/wp-content/uploads/2017/06/adultsite.pngadultsitehttps://zerophagemalware.com/wp-content/uploads/2017/06/rigcutwail.pngRigCutwailhttps://zerophagemalware.com/wp-content/uploads/2017/06/startup.pngstartuphttps://zerophagemalware.com/wp-content/uploads/2017/06/pushdo.pngPushdohttps://zerophagemalware.com/wp-content/uploads/2017/06/post.pngPOSThttps://zerophagemalware.com/wp-content/uploads/2017/06/frametorig.pngFrameToRighttps://zerophagemalware.com/wp-content/uploads/2017/06/jsredirector.pngJsRedirector2017-06-22T23:17:21+00:00monthlyhttps://zerophagemalware.com/2017/06/16/four-rig-ek-flows-from-malvertising-bunitu-chthonic/https://zerophagemalware.com/wp-content/uploads/2017/06/indexz-2.pngIndexZ-2https://zerophagemalware.com/wp-content/uploads/2017/06/indexz.pngIndexZhttps://zerophagemalware.com/wp-content/uploads/2017/06/small.pngsmallhttps://zerophagemalware.com/wp-content/uploads/2017/06/302malvert.png302Malvert2017-06-16T23:49:00+00:00monthlyhttps://zerophagemalware.com/2017/06/14/rig-ek-via-malvertising-drops-dreambot/https://zerophagemalware.com/wp-content/uploads/2017/06/popunderreturn.pngpopunderreturnhttps://zerophagemalware.com/wp-content/uploads/2017/06/rigurlparams.pngrigurlparamshttps://zerophagemalware.com/wp-content/uploads/2017/06/dreambotactions2.pngdreambotactions2https://zerophagemalware.com/wp-content/uploads/2017/06/popunder3.pngpopunderhttps://zerophagemalware.com/wp-content/uploads/2017/06/popunder2.pngpopunderhttps://zerophagemalware.com/wp-content/uploads/2017/06/adbanner1.pngadbannerhttps://zerophagemalware.com/wp-content/uploads/2017/06/dreambot1.pngdreambothttps://zerophagemalware.com/wp-content/uploads/2017/06/dreambottraffic.pngdreambottraffic2017-06-14T12:21:40+00:00monthlyhttps://zerophagemalware.com/2017/06/12/rig-ek-via-malvertising-drops-zloader-and-chthonic/https://zerophagemalware.com/wp-content/uploads/2017/06/fakeflash.pngFakeFlashhttps://zerophagemalware.com/wp-content/uploads/2017/06/chtonic1.pngChtonic1https://zerophagemalware.com/wp-content/uploads/2017/06/zloader1.pngZloader1https://zerophagemalware.com/wp-content/uploads/2017/06/chth2.pngChth2https://zerophagemalware.com/wp-content/uploads/2017/06/vtpic.pngVTPichttps://zerophagemalware.com/wp-content/uploads/2017/06/chtonicpic.pngChtonicPichttps://zerophagemalware.com/wp-content/uploads/2017/06/dcdcy96xcaeyez2.jpgDCDcY96XcAEyez22017-06-12T16:05:05+00:00monthlyhttps://zerophagemalware.com/2017/06/07/rig-ek-via-fake-eve-online-website-drops-bunitu/https://zerophagemalware.com/wp-content/uploads/2017/06/frametomal.pngframetomalhttps://zerophagemalware.com/wp-content/uploads/2017/06/smallgate.pngsmallgatehttps://zerophagemalware.com/wp-content/uploads/2017/06/roughted2.pngroughted2017-06-07T12:00:50+00:00monthlyhttps://zerophagemalware.com/go-back/2017-06-06T17:17:39+00:00weekly0.6https://zerophagemalware.com/2017/06/06/rig-ek-via-rough-ted-delivers-chthonic/https://zerophagemalware.com/wp-content/uploads/2017/06/zeuscnc2.pngzeuscnc2https://zerophagemalware.com/wp-content/uploads/2017/06/rigflow.pngrigflowhttps://zerophagemalware.com/wp-content/uploads/2017/06/zeuscnc.pngzeuscnchttps://zerophagemalware.com/wp-content/uploads/2017/06/strings.pngstringshttps://zerophagemalware.com/wp-content/uploads/2017/06/roughted1.pngroughtedhttps://zerophagemalware.com/wp-content/uploads/2017/06/httpequiv.pnghttpequivhttps://zerophagemalware.com/wp-content/uploads/2017/06/gergeggr.pnggergeggr2017-06-06T13:04:31+00:00monthlyhttps://zerophagemalware.com/2017/06/05/rig-ek-via-roughted-drops-a-miner/2017-06-05T11:03:05+00:00monthlyhttps://zerophagemalware.com/2017/05/31/magnitude-ek-via-roughted-drops-cerber-ransomware/2017-05-31T09:09:01+00:00monthlyhttps://zerophagemalware.com/2017/05/30/rig-ek-via-roughted-malvertising-drops-kovter/https://zerophagemalware.com/wp-content/uploads/2017/05/exerpt.pngExerpthttps://zerophagemalware.com/wp-content/uploads/2017/05/prelanding1.pngprelandinghttps://zerophagemalware.com/wp-content/uploads/2017/05/hugescript.pngHugeScripthttps://zerophagemalware.com/wp-content/uploads/2017/05/iframescript.pngIframeScripthttps://zerophagemalware.com/wp-content/uploads/2017/05/roughtedfirst.pngRoughTedFirsthttps://zerophagemalware.com/wp-content/uploads/2017/05/rigroughtedkovter.pngRigRoughTedKovterhttps://zerophagemalware.com/wp-content/uploads/2017/05/roughted.pngRoughTedhttps://zerophagemalware.com/wp-content/uploads/2017/05/compromisedsite.pngcompromisedSite2017-05-30T22:16:57+00:00monthlyhttps://zerophagemalware.com/2017/05/25/magnitude-ek-via-malvertising-delivers-cerber-ransomware/https://zerophagemalware.com/wp-content/uploads/2017/05/damtfqawsaif4t1.jpgdamtfqawsaif4t1https://zerophagemalware.com/wp-content/uploads/2017/05/scripletdeobs.pngScripletDeobshttps://zerophagemalware.com/wp-content/uploads/2017/05/cerberbeef.pngCerberBeefhttps://zerophagemalware.com/wp-content/uploads/2017/05/scriptlet.pngScriptlethttps://zerophagemalware.com/wp-content/uploads/2017/05/240517magnitudecerber.png240517MagnitudeCerber2017-05-25T16:49:22+00:00monthlyhttps://zerophagemalware.com/2017/05/19/rig-ek-via-tds-drops-smoke-loader-leads-to-teamviewer/2017-05-19T16:37:10+00:00monthlyhttps://zerophagemalware.com/2017/05/17/magnitude-ek-via-malvertising-drops-cerber-ransomware/2017-05-17T13:51:33+00:00monthlyhttps://zerophagemalware.com/2017/05/15/rig-ek-drops-pony-leads-to-philadelphia-ransomware/https://zerophagemalware.com/wp-content/uploads/2017/05/ponybadge.pngPonyBadgehttps://zerophagemalware.com/wp-content/uploads/2017/05/pony.pngPonyhttps://zerophagemalware.com/wp-content/uploads/2017/05/badge.pngbadgehttps://zerophagemalware.com/wp-content/uploads/2017/05/locked.pngLockedhttps://zerophagemalware.com/wp-content/uploads/2017/05/noisy.pngnoisyhttps://zerophagemalware.com/wp-content/uploads/2017/05/rigponyransom.pngRigPonyRansomhttps://zerophagemalware.com/wp-content/uploads/2017/05/ransom.pngransomhttps://zerophagemalware.com/wp-content/uploads/2017/05/ransomnote.pngRansomNotehttps://zerophagemalware.com/wp-content/uploads/2017/05/dropped.pngDroppedhttps://zerophagemalware.com/wp-content/uploads/2017/05/hehenuclear.pngHehenuclear2017-05-15T00:44:28+00:00monthlyhttps://zerophagemalware.com/2017/05/14/rig-ek-delivers-chthonic/https://zerophagemalware.com/wp-content/uploads/2017/05/capabilities.pngCapabilitieshttps://zerophagemalware.com/wp-content/uploads/2017/05/comcnc.pngcomcnchttps://zerophagemalware.com/wp-content/uploads/2017/05/prelanding.pngPreLandinghttps://zerophagemalware.com/wp-content/uploads/2017/05/rigchthonic.pngRigChthonic2017-05-14T13:05:30+00:00monthlyhttps://zerophagemalware.com/2017/05/12/rig-ek-drops-bunitu-proxy-trojan/https://zerophagemalware.com/wp-content/uploads/2017/05/dns.pngDNShttps://zerophagemalware.com/wp-content/uploads/2017/05/rigbunitu.pngRigBunitu2017-05-14T14:15:29+00:00monthlyhttps://zerophagemalware.com/2017/05/09/rig-ek-drops-failed-payload-new-params/https://zerophagemalware.com/wp-content/uploads/2017/05/smallgate.pngSmallGatehttps://zerophagemalware.com/wp-content/uploads/2017/05/cmdaction.pngcmdactionhttps://zerophagemalware.com/wp-content/uploads/2017/05/newparams.pngNewParamshttps://zerophagemalware.com/wp-content/uploads/2017/05/rigekfailed1.pngRigEKFailedhttps://zerophagemalware.com/wp-content/uploads/2017/05/rigekfailed.pngRigEKFailed2017-05-09T02:19:51+00:00monthlyhttps://zerophagemalware.com/2017/04/27/rig-ek-via-decimal-redirect-drops-smoke-loader/https://zerophagemalware.com/wp-content/uploads/2017/04/iframetorigandgif.pngiframetorigandgifhttps://zerophagemalware.com/wp-content/uploads/2017/04/decimalredirect.pngDecimalRedirecthttps://zerophagemalware.com/wp-content/uploads/2017/04/35.gif35https://zerophagemalware.com/wp-content/uploads/2017/04/rigsmoke1.pngRigsmokehttps://zerophagemalware.com/wp-content/uploads/2017/04/rigsmoke.pngRigsmoke2017-04-27T17:13:14+00:00monthlyhttps://zerophagemalware.com/2017/02/28/rig-ek-via-malvertising-delivers-bunitu/https://zerophagemalware.com/wp-content/uploads/2017/02/bunitu270217.pngbunitu2702172017-04-27T00:48:03+00:00monthlyhttps://zerophagemalware.com/2017/04/27/multiple-magnitude-ek-drops-cerber-ransomware-samples/https://zerophagemalware.com/wp-content/uploads/2017/04/cerberpuzzle.pngCerberPuzzlehttps://zerophagemalware.com/wp-content/uploads/2017/04/language.pngLanguagehttps://zerophagemalware.com/wp-content/uploads/2017/04/cerberpic1.pngCerberPichttps://zerophagemalware.com/wp-content/uploads/2017/04/cerbericon.pngCerberIconhttps://zerophagemalware.com/wp-content/uploads/2017/04/cerberdecrypt.pngCerberDecrypthttps://zerophagemalware.com/wp-content/uploads/2017/04/mag3.pngMag3https://zerophagemalware.com/wp-content/uploads/2017/04/mag2.pngMag2https://zerophagemalware.com/wp-content/uploads/2017/04/mag1.pngMag1https://zerophagemalware.com/wp-content/uploads/2017/04/26magcerber.png26MagCerber2017-04-27T14:56:52+00:00monthlyhttps://zerophagemalware.com/2017/04/21/magnitude-ek-delivers-cerber/https://zerophagemalware.com/wp-content/uploads/2017/04/cerberpic.pngCerberPichttps://zerophagemalware.com/wp-content/uploads/2017/04/payloadexecutes.pngPayloadExecuteshttps://zerophagemalware.com/wp-content/uploads/2017/04/flashtopayload.pngFlashToPayloadhttps://zerophagemalware.com/wp-content/uploads/2017/04/magnitudeekcerber.pngMagnitudeEKCerber2017-04-21T02:07:02+00:00monthlyhttps://zerophagemalware.com/2017/04/20/magnitude-ek-urls-from-14-20-april/https://zerophagemalware.com/wp-content/uploads/2017/04/scriplet.pngscriplethttps://zerophagemalware.com/wp-content/uploads/2017/04/200417magnitudeek1.png200417MagnitudeEKhttps://zerophagemalware.com/wp-content/uploads/2017/04/shellcode.pngShellcodehttps://zerophagemalware.com/wp-content/uploads/2017/04/payloadpic.pngpayloadpichttps://zerophagemalware.com/wp-content/uploads/2017/04/magnitudeflash.pngMagnitudeFlashhttps://zerophagemalware.com/wp-content/uploads/2017/04/landingpage2.pngLandingPage2https://zerophagemalware.com/wp-content/uploads/2017/04/2ndlanding.png2ndLandinghttps://zerophagemalware.com/wp-content/uploads/2017/04/deobfuscated.pngDeobfuscatedhttps://zerophagemalware.com/wp-content/uploads/2017/04/landingpage.pngLandingPAgehttps://zerophagemalware.com/wp-content/uploads/2017/04/gatetoek.pngGateToEK2017-04-27T18:31:17+00:00monthlyhttps://zerophagemalware.com/2017/04/14/terror-ek-via-malvertising-drops-smoke-loader/https://zerophagemalware.com/wp-content/uploads/2017/04/payload.pngpayloadhttps://zerophagemalware.com/wp-content/uploads/2017/04/payloadcall2.pngpayloadcallhttps://zerophagemalware.com/wp-content/uploads/2017/04/payloadcall1.pngpayloadcallhttps://zerophagemalware.com/wp-content/uploads/2017/04/calltoflash.pngCalltoFlashhttps://zerophagemalware.com/wp-content/uploads/2017/04/payloadcall.pngpayloadcallhttps://zerophagemalware.com/wp-content/uploads/2017/04/iframe.pngiframehttps://zerophagemalware.com/wp-content/uploads/2017/04/pw2.pngPW2https://zerophagemalware.com/wp-content/uploads/2017/04/pw.pngPWhttps://zerophagemalware.com/wp-content/uploads/2017/04/smokeparty.pngSmokePartyhttps://zerophagemalware.com/wp-content/uploads/2017/04/130417-terrorek.png130417-TerrorEK2017-04-14T11:11:32+00:00monthlyhttps://zerophagemalware.com/2017/04/11/unknown-ek-from-magnitude-ek-gate-drops-loader/https://zerophagemalware.com/wp-content/uploads/2017/04/executing.pngexecutinghttps://zerophagemalware.com/wp-content/uploads/2017/04/document.pngdocumenthttps://zerophagemalware.com/wp-content/uploads/2017/04/exploit1.pngexploit1https://zerophagemalware.com/wp-content/uploads/2017/04/gate3.pngGate3https://zerophagemalware.com/wp-content/uploads/2017/04/gate2.pngGate2https://zerophagemalware.com/wp-content/uploads/2017/04/gate1.pngGate1https://zerophagemalware.com/wp-content/uploads/2017/04/magnitudeek1.pngMagnitudeEK2017-04-11T02:31:05+00:00monthlyhttps://zerophagemalware.com/2017/04/10/rig-ek-via-malvertising-delivers-bunitu-2/https://zerophagemalware.com/wp-content/uploads/2017/04/100417-rigbunitu.png100417-RigBunitu2017-04-10T22:41:40+00:00monthlyhttps://zerophagemalware.com/2017/04/02/terror-ek-delivers-zeusvmk-i-n-s/https://zerophagemalware.com/wp-content/uploads/2017/04/terrorekzeusvmkins1.pngTerrorEKZeuSVMKINShttps://zerophagemalware.com/wp-content/uploads/2017/04/terrorekkins2.pngTerrorEKKinshttps://zerophagemalware.com/wp-content/uploads/2017/04/terrorekkins1.pngTerrorEKKinshttps://zerophagemalware.com/wp-content/uploads/2017/04/terrorekkins.pngTerrorEKKinshttps://zerophagemalware.com/wp-content/uploads/2017/04/iframes.pngIframeshttps://zerophagemalware.com/wp-content/uploads/2017/04/terrorpost.pngTerrorPosthttps://zerophagemalware.com/wp-content/uploads/2017/04/terrorekzeusvmkins.pngTerrorEKZeuSVMKINS2017-04-02T14:16:45+00:00monthlyhttps://zerophagemalware.com/2017/04/01/terror-ek-delivers-bitcoin-miner/https://zerophagemalware.com/wp-content/uploads/2017/04/290317terrorek.png290317TerrorEKhttps://zerophagemalware.com/wp-content/uploads/2017/03/2013-2551.png2013-2551https://zerophagemalware.com/wp-content/uploads/2017/03/20146332.png20146332https://zerophagemalware.com/wp-content/uploads/2017/03/20130074.png20130074https://zerophagemalware.com/wp-content/uploads/2017/03/steam.pngSteamhttps://zerophagemalware.com/wp-content/uploads/2017/03/minerd.pngminerdhttps://zerophagemalware.com/wp-content/uploads/2017/03/hybridprocess.pnghybridprocess2017-04-01T16:26:42+00:00monthlyhttps://zerophagemalware.com/2017/03/29/rig-ek-delivers-smoke-loader/https://zerophagemalware.com/wp-content/uploads/2017/03/landingdirect.pngLandingDirecthttps://zerophagemalware.com/wp-content/uploads/2017/03/rigeksmokeloader2.pngRigEKSmokeLoaderhttps://zerophagemalware.com/wp-content/uploads/2017/03/smoke2.pngSmoke2Smoke Loader CNChttps://zerophagemalware.com/wp-content/uploads/2017/03/rigold.pngRigOldOld style Rig URLhttps://zerophagemalware.com/wp-content/uploads/2017/03/smoke1.pngSmoke1Smoke Loader connectivity checkhttps://zerophagemalware.com/wp-content/uploads/2017/03/rig1.pngRig1Rig EK landing pagehttps://zerophagemalware.com/wp-content/uploads/2017/03/rig2.pngRig2Downloading payloadhttps://zerophagemalware.com/wp-content/uploads/2017/03/gate21.pngGate2Gate 2 302 redirecthttps://zerophagemalware.com/wp-content/uploads/2017/03/gate11.pngGate1Gate 1 302 redirecthttps://zerophagemalware.com/wp-content/uploads/2017/03/rigeksmokeloader1.pngRigEKSmokeLoader2017-03-29T06:21:25+00:00monthlyhttps://zerophagemalware.com/2017/03/24/terror-ek-delivers-tofsee-spambot/https://zerophagemalware.com/wp-content/uploads/2017/03/etterror.pngETTerrorhttps://zerophagemalware.com/wp-content/uploads/2017/03/tofseeexe.pngtofseeexehttps://zerophagemalware.com/wp-content/uploads/2017/03/landingpaget1.pngLandingPageT1https://zerophagemalware.com/wp-content/uploads/2017/03/terrorek-tofsee.pngTerrorEK-Tofsee2017-03-24T01:14:50+00:00monthlyhttps://zerophagemalware.com/2017/03/23/magnitude-ek-via-malvertising/https://zerophagemalware.com/wp-content/uploads/2017/03/landingpage2.pngLandingPage2https://zerophagemalware.com/wp-content/uploads/2017/03/landingpage1.pngLandingPage1https://zerophagemalware.com/wp-content/uploads/2017/03/gate2.pngGate2https://zerophagemalware.com/wp-content/uploads/2017/03/gate1.pngGate1https://zerophagemalware.com/wp-content/uploads/2017/03/magnitudeek.pngMagnitudeEK2017-03-23T23:41:00+00:00monthlyhttps://zerophagemalware.com/2017/03/20/rig-ek-delivers-bunitu-proxy-trojan/https://zerophagemalware.com/wp-content/uploads/2017/03/smallgate.pngSmallGatehttps://zerophagemalware.com/wp-content/uploads/2017/03/bunito303gate.pngBunito303Gatehttps://zerophagemalware.com/wp-content/uploads/2017/03/bunituinfographic.pngBunituInfoGraphichttps://zerophagemalware.com/wp-content/uploads/2017/03/rigekbunitu.pngRigEKBunitu2017-03-20T22:43:01+00:00monthlyhttps://zerophagemalware.com/2017/03/18/rig-ek-via-malvertising-delivers-zeus-panda/https://zerophagemalware.com/wp-content/uploads/2017/03/rigekfailed.pngRigEKFailedhttps://zerophagemalware.com/wp-content/uploads/2017/03/rig-domains.pngRig Domainshttps://zerophagemalware.com/wp-content/uploads/2017/03/rigekzeuspanda.pngRigEKZeuSPanda2017-03-18T16:50:44+00:00monthlyhttps://zerophagemalware.com/2017/03/13/rig-ek-via-malvertising-delivers-zeus-variant-chthonic/https://zerophagemalware.com/wp-content/uploads/2017/03/rigchthonic.pngRigChthonic2017-03-14T00:12:58+00:00monthlyhttps://zerophagemalware.com/2017/03/08/rig-ek-delivers-august-stealer/https://zerophagemalware.com/wp-content/uploads/2017/03/stealer-9.pngstealer-9https://zerophagemalware.com/wp-content/uploads/2017/03/040317-rigaugust.png040317-RigAugust2017-03-09T13:26:27+00:00monthlyhttps://zerophagemalware.com/2017/03/08/sundown-ek-delivers-zeus-panda-but-c2-offline/https://zerophagemalware.com/wp-content/uploads/2017/03/070317-sundownzeuspanda.png070317-SundownZeuSPanda2017-03-08T21:43:16+00:00monthlyhttps://zerophagemalware.com/2017/03/06/sundown-ek-delivers-zloader-and-zbot/https://zerophagemalware.com/wp-content/uploads/2017/03/stego.pngStegohttps://zerophagemalware.com/wp-content/uploads/2017/03/zbot2.pngZbot2https://zerophagemalware.com/wp-content/uploads/2017/03/zbot.pngZbothttps://zerophagemalware.com/wp-content/uploads/2017/03/compromisedsite.pngCompromisedSitehttps://zerophagemalware.com/wp-content/uploads/2017/03/sundown030717.pngSundown0307172017-03-08T21:01:52+00:00monthlyhttps://zerophagemalware.com/2017/03/02/sundown-ek-delivers-failed-payload/https://zerophagemalware.com/wp-content/uploads/2017/03/techscam.pngtechscamhttps://zerophagemalware.com/wp-content/uploads/2017/03/sundownfail.pngsundownfail2017-03-02T00:46:08+00:00monthlyhttps://zerophagemalware.com/2017/02/21/rig-ek-via-malvertising-drops-unknown-dll/https://zerophagemalware.com/wp-content/uploads/2017/02/rigunkdll.pngrigunkdll2017-02-21T01:06:55+00:00monthlyhttps://zerophagemalware.com/2017/02/15/rig-ek-via-malvertising-delivers-bunitu-trojan/https://zerophagemalware.com/wp-content/uploads/2017/02/bunito-extrra.pngbunito-extrrahttps://zerophagemalware.com/wp-content/uploads/2017/02/rigekbunitu1.pngrigekbunitu2017-02-15T23:48:58+00:00monthlyhttps://zerophagemalware.com/2017/02/15/sundown-ek-via-malvertising-delivers-zloader/https://zerophagemalware.com/wp-content/uploads/2017/02/140217-sundownzloader.png140217-sundownzloader2017-02-15T02:31:31+00:00monthlyhttps://zerophagemalware.com/2017/02/13/rig-via-pseudodarkleech-delivers-cerber-ransomware-3/https://zerophagemalware.com/wp-content/uploads/2017/02/130217-rigcerber.png130217-rigcerber2017-02-14T19:28:42+00:00monthlyhttps://zerophagemalware.com/2017/02/06/rig-via-pseudodarkleech-delivers-cerber-ransomware-2/https://zerophagemalware.com/wp-content/uploads/2017/02/050217-rigcerber1.png050217-rigcerberhttps://zerophagemalware.com/wp-content/uploads/2017/02/050217-rigcerber.png050217-rigcerber2017-02-06T22:16:07+00:00monthlyhttps://zerophagemalware.com/2017/01/30/rig-via-pseudodarkleech-delivers-cerber-ransomware/https://zerophagemalware.com/wp-content/uploads/2017/01/cerberba89.pngcerberba892017-01-30T03:35:57+00:00monthlyhttps://zerophagemalware.com/2017/01/23/phishing-email-company-investigations-leads-to-ursnif/https://zerophagemalware.com/wp-content/uploads/2017/01/malspamphishing.pngmalspamphishing2017-01-26T03:45:15+00:00monthlyhttps://zerophagemalware.com/2017/01/25/rig-v-via-pseudodarkleech-delivers-cerber-2/https://zerophagemalware.com/wp-content/uploads/2017/01/250117-rigcerber.png250117-rigcerber2017-01-25T08:00:40+00:00monthlyhttps://zerophagemalware.com/2017/01/19/rig-v-via-pseudodarkleech-delivers-cerber/https://zerophagemalware.com/wp-content/uploads/2017/01/190117rigcerber.png190117rigcerber2017-01-20T00:51:52+00:00monthlyhttps://zerophagemalware.com/2017/01/17/compromised-site-with-pseudodarkleech-rig-ek-and-cerber-ransomware-and-mobile-malware-redirect/https://zerophagemalware.com/wp-content/uploads/2017/01/mobilemalware.pngmobilemalware2017-01-20T00:51:11+00:00monthlyhttps://zerophagemalware.com/compromised-site-with-pseudodarkleech-rig-ek-and-cerber-ransomware-and-mobile-malware-redirect/2017-01-17T01:02:05+00:00weekly0.6https://zerophagemalware.com/useful-links/2017-01-14T22:50:22+00:00weekly0.6https://zerophagemalware.com/2017/01/14/older-posts-from-twitter/2017-01-14T22:36:27+00:00monthlyhttps://zerophagemalware.com/2017/01/14/welcome-to-zerophage-malware/2017-01-14T22:32:33+00:00monthlyhttps://zerophagemalware.com/contact/2017-01-14T22:29:22+00:00weekly0.6https://zerophagemalware.comdaily1.02019-07-24T11:37:24+00:00