DanaBot

PrivateLoader is a downloader malware family. It is used as part of a PPI service, to deliver payloads of multiple malware families.

This research is a continuation of our annual financial threat reports providing an overview of the latest trends and key events across the financial threat landscape. The study covers the common p...

NullMixer is a dropper delivering a number of Trojans, such as RedLine Stealer, SmokeLoader, Satacom, and others.

ESET researchers have found new versions of the DanaBot Trojan, which now features a new C&C protocol and modifications to architecture and campaign IDs.

ESET Research shares its findings on the workings of Danabot, an infostealer recently disrupted in a multinational law enforcement operation.

A flaw in DanaBot's C2 server code caused a memory leak that we named "DanaBleed", exposing sensitive data and offering researchers a look into DanaBot’s operations.

Researchers at Zscaler discovered a DDoS attack launched by DanaBot against the Ukrainian Ministry of Defense.

Two large software supply chain attacks distributed the DanaBot malware. DanaBot is a malware-as-a-service platform that focuses credential theft.

A technical analysis of the DanaBot malware's obfuscation techniques.