corpus.blog
41554 blogs · [ { "id": "01a08c65-23ca-710b-820d-c67d592347b0", "title": "BestAV (Fake Antispyware affiliate) exposed", "url": "https://www.xylibox.com/2020/01/bestav-fake-antispyware-affiliate.html", "published_at": "2025-09-13T15:26:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d595e54b2", "title": "Citadel 0.0.1.1 (Atmos)", "url": "https://www.xylibox.com/2016/02/citadel-0011-atmos.html", "published_at": "2016-02-19T13:26:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d59618b54", "title": "Betabot retrospective", "url": "https://www.xylibox.com/2015/04/betabot-retrospective.html", "published_at": "2015-04-15T19:19:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d59bf1627", "title": "Alina 'sparks' source code review", "url": "https://www.xylibox.com/2015/01/alina-sparks-source-code-review.html", "published_at": "2015-01-14T23:07:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d59d95b02", "title": "Tiberium/Consuella USPS money laundering service", "url": "https://www.xylibox.com/2015/01/tiberiumconsuella-usps-money-laundering.html", "published_at": "2015-01-14T09:03:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d5a01f67b", "title": "Cryptorbit locker", "url": "https://www.xylibox.com/2015/01/cryptorbit-locker.html", "published_at": "2015-01-13T00:53:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d5a7cfeca", "title": "Captain Barbarossa", "url": "https://www.xylibox.com/2015/01/captain-barbarossa.html", "published_at": "2015-01-13T00:49:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d5b251215", "title": "Phase (Win32/PhaseBot-A)", "url": "https://www.xylibox.com/2015/01/phase-win32phasebot-a.html", "published_at": "2015-01-12T20:48:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d5b2756d4", "title": "Neutrino bot", "url": "https://www.xylibox.com/2015/01/neutrino-bot.html", "published_at": "2015-01-12T20:48:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d5baccf62", "title": "iBanking", "url": "https://www.xylibox.com/2015/01/ibanking.html", "published_at": "2015-01-12T20:47:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d5c5f1f17", "title": "i/o", "url": "https://www.xylibox.com/2014/12/io.html", "published_at": "2014-12-20T17:45:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d5d2c93a0", "title": "Install service for Malware affiliates and individuals", "url": "https://www.xylibox.com/2014/05/install-service-for-malware-affiliates.html", "published_at": "2014-05-05T11:16:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d5d692103", "title": "ATSEngine", "url": "https://www.xylibox.com/2014/05/atsengine.html", "published_at": "2014-05-03T23:12:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d5e496c2f", "title": "Android.Trojan.Rubobi.A (SmsPiratBot)", "url": "https://www.xylibox.com/2014/04/androidtrojanrubobia-smspiratbot.html", "published_at": "2014-04-27T20:36:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d5e4dcdf5", "title": "Lame scareware", "url": "https://www.xylibox.com/2014/04/lame-scareware.html", "published_at": "2014-04-27T19:09:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d5edf6572", "title": "Android/FakeToken.A", "url": "https://www.xylibox.com/2014/04/androidfaketokena.html", "published_at": "2014-04-20T11:07:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d5fdce89f", "title": "ZeusVM and steganography", "url": "https://www.xylibox.com/2014/04/zeusvm-and-steganography.html", "published_at": "2014-04-13T19:20:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d60d71a9e", "title": "Zeus 1.1.3.4", "url": "https://www.xylibox.com/2014/03/zeus-1134.html", "published_at": "2014-03-04T18:30:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d613bd5e8", "title": "Plasma HTTP", "url": "https://www.xylibox.com/2014/02/plasma-http.html", "published_at": "2014-02-14T22:19:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d61c23a6c", "title": "Decoding Zeus 2.9.6.1 dynamic config", "url": "https://www.xylibox.com/2014/01/decoding-zeus-2961-config.html", "published_at": "2014-01-11T17:18:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d621e6917", "title": "Troj/WowSpy-A", "url": "https://www.xylibox.com/2014/01/trojwowspy-a.html", "published_at": "2014-01-10T00:10:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d6234d3c3", "title": "Jolly Roger Stealer", "url": "https://www.xylibox.com/2014/01/jolly-roger-stealer.html", "published_at": "2014-01-02T19:48:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d62e69375", "title": "How the protection of Citadel got cracked", "url": "https://www.xylibox.com/2013/12/how-protection-of-citadel-got-cracked.html", "published_at": "2013-12-31T13:28:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d635a78bf", "title": "Win32/BruteForce.WP", "url": "https://www.xylibox.com/2013/12/win32bruteforcewp.html", "published_at": "2013-12-20T20:44:00+00:00" }, { "id": "01a08c65-23ca-710b-820d-c67d638dcaf8", "title": "Win32/Atrax.A", "url": "https://www.xylibox.com/2013/12/win32atraxa.html", "published_at": "2013-12-06T19:03:00+00:00" } ] posts Claim your blog
Back to xylibox.com
Blog · corpus.blog/blogs/xylibox.com/posts

xylibox.com

xylibox.com

2025

BestAV (Fake Antispyware affiliate) exposedoriginal ↗
13 Sept 2025

2016

Citadel 0.0.1.1 (Atmos)original ↗
19 Feb 2016

2015

Betabot retrospectiveoriginal ↗
15 Apr 2015
Alina 'sparks' source code revieworiginal ↗
14 Jan 2015
Tiberium/Consuella USPS money laundering serviceoriginal ↗
14 Jan 2015
Cryptorbit lockeroriginal ↗
13 Jan 2015
Captain Barbarossaoriginal ↗
13 Jan 2015
Phase (Win32/PhaseBot-A)original ↗
12 Jan 2015
Neutrino botoriginal ↗
12 Jan 2015
iBankingoriginal ↗
12 Jan 2015

2014

i/ooriginal ↗
20 Dec 2014
Install service for Malware affiliates and individualsoriginal ↗
5 May 2014
ATSEngineoriginal ↗
3 May 2014
Android.Trojan.Rubobi.A (SmsPiratBot)original ↗
27 Apr 2014
Lame scarewareoriginal ↗
27 Apr 2014
Android/FakeToken.Aoriginal ↗
20 Apr 2014
ZeusVM and steganographyoriginal ↗
13 Apr 2014
Zeus 1.1.3.4original ↗
4 Mar 2014
Plasma HTTPoriginal ↗
14 Feb 2014
Decoding Zeus 2.9.6.1 dynamic configoriginal ↗
11 Jan 2014
Troj/WowSpy-Aoriginal ↗
10 Jan 2014
Jolly Roger Stealeroriginal ↗
2 Jan 2014

2013

How the protection of Citadel got crackedoriginal ↗
31 Dec 2013
Win32/BruteForce.WPoriginal ↗
20 Dec 2013
Win32/Atrax.Aoriginal ↗
6 Dec 2013