VirusTotal

Reported Context (9)

Here are some examples from samples in VirusTotal: Cruciferra Crypter Uses Extensive Evasion to Deliver RATs and Infostealers
In early June, an Apple XProtect update surfaced a Mach-O sample that had been uploaded to VirusTotal on May 22. The XProtect rule targets the file purely on its hash rather than on any internal strings or bytecode, yet macOS.Gaslight Uses Prompt Injection to Disrupt AI-Assisted Malware Analysis
The same illusion mechanism extends to VirusTotal, where some samples from this campaign receive benign votes and “safe” comments. Rust Clipboard Hijacker Targets Windows and macOS Using Fake Reputation to Lure Crypto Users
At the time of writing, the malicious domain amp-samaresmanor[.]pages[.]dev is blocklisted by 2 security vendors on VirusTotal, and currently, 5 websites are infected with this. WordPress Malware Uses Google IP Checks to Cloak Content from Site Owners
VtChatter — malware that uses comments to a file on VirusTotal as a bidirectional C2 channel. APT31 Targeted Russian IT Firms With New Malware and Cloud-Based C2

Malware (34)

People (6)

Threat Actors (5)

MITRE ATT&CK (61)

Vendors (17)

Products (40)

Tools (31)

Industries (11)

Countries (11)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.