IPsec Helper is a backdoor implant used by Agrius APT. Agrius is attributed to Iran and allegedly targets Israeli systems. IPsec Helper is written in .net and provides many services to its owner.
XFSCashNCR ATM Malware is found to be targeting Chile's NCR ATMs. There no packing or encrypting in malware which suggest that it is in development stage also it Supports multi-currency but requires input...
Zeppelin Ransomware is successor of VegaLocker and is written in Delphi. Zeppelin is a highly configurable malware and can be deployed as an EXE, DLL, or wrapped in a PowerShell loader.
Prometheus Ransomware encrypts user data with and ask a ransom of $15000 in Monero (XMR) coins. Attackers threatens to release all the data they claimed to have siphoned off.
Matryoshka Ransomware encrypts user data and asked a ransom of $75 worth of Monero (XMR) coin to return files back and gives a 20 days deadline to fulfill there demands.