Publication context
These are external encyclopedia contributions. The methodology notes on this site are published separately.
Research Contributions
Published encyclopedia references and threat-analysis contributions.
Selected threat encyclopedia entries from my contribution work at Trend Micro. Each link opens the original publication for its full technical details and publication history.
Coverage
Backdoor loaders, coinminers, trojans, downloaders, and malware families documented for Trend Micro.
Trend Micro
Selected encyclopedia contributions.
Original entries covering malware behavior, delivery, persistence, and affected systems.
Threat Encyclopedia
BKDR_BINLODR.ZNFJ-A
Backdoor loader reference covering dropper- or web-delivered arrival and its dependency on an additional component to execute correctly.
Open reference →
Threat Encyclopedia
COINMINER_MALXMR.TIBAFZ-VBS
VBS-assisted coinminer entry documenting delivery through other malware or malicious sites and the follow-on miner execution chain.
Open reference →
Threat Encyclopedia
JS_NEMUCOD.THEADAH
JavaScript Nemucod trojan reference describing malicious-site delivery, dropped components, and registry-related system changes.
Open reference →
Threat Encyclopedia
COINMINER_MALXMR.TIBAFZ
Coinminer analysis reference focused on dropper- or web-based delivery with persistence-oriented host modifications during execution.
Open reference →
Threat Encyclopedia
TROJ_DLOADER.VSNTK
Downloader trojan entry outlining malicious-site delivery and parameter-driven retrieval of remote payloads in a staged infection chain.
Open reference →
Threat Encyclopedia
VBS_DLOADER.TIFOEBR
VBS downloader reference covering malicious-site delivery, saved payload staging, and execution of downloaded files from roaming-profile storage.
Open reference →
Threat Encyclopedia
Trojan.JS.MANAGEX.A
Modular JavaScript adware-trojan entry centered on browser-extension based information gathering and dropped Chromium extension artifacts.
Open reference →
Threat Encyclopedia
Coinminer.Win32.MALXMR.SMBM4
Windows coinminer reference describing malicious-site delivery and registry changes used to hide files during miner deployment.
Open reference →
Threat Encyclopedia
Worm.VBS.DUNIHI.TVV
VBS worm reference documenting dropper- or web-based arrival with follow-on filesystem and registry activity during propagation.
Open reference →