Rozena belongs to a growing family of file less malware. Its executable is disguised with Microsoft Office Word Document's icon that lure its victim to open it. Upon execution, it creates a file in Windows Temporary folder with a filename Hi6kI7hcxZwUI.
GravityRAT is an Advance Persistence Threat (APT) that allegedly targets India, United States and United Kingdom. GravityRAT uses Microsoft Word as a medium to proliferate. Once the user open the document it insisted to enable macros upon which is executes the zipped payload.
Kwampirs Trojan by a new hacking group dubbed by Symantec Orangeworm targeted toward health sector in america, Europe and Asia. It targets X-ray machines and MRI machines. It spread via network shares rapidly and does not conceal itself.
The developer of this ransomware used the Annabelle doll from the movie franchise of the same name, an american horror film.This ransomware encrypts user data, and then requires a ransom of 0.1 BTC to bring back the files.
NanoCore RAT first appeared in 2013 with its latest version released in 2015. It was freely available to purchase for between $25 to $50. In July, 2017 its creator found guilty.