Locky ransomware on aggressive hunt for victims
Millions of spam emails spread new ransomware variant on the day it first appeared.Read More
View ArticleJapan targeted with regionalized malicious spam campaigns
Trojan.Cidox and Trojan.Bebloh among threats used by spammers tailoring spam for specific countries, including Brazil, India, and now Japan.Read More
View ArticleRussian bank employees received fake job offers in targeted email attack
Employees at six Russian banks were sent spoofed emails delivering Trojan.Ratopak in a narrow, targeted attack.Read More
View ArticleAndroid ransomware variants created directly on mobile devices
Attackers used legitimate tools on mobile devices to create variants of Android.Lockdroid.E.Read More
View ArticleCollaborative Operation Blockbuster aims to send Lazarus back to the dead
A cross-industry initiative aims to tackle a disruptive attack group called Lazarus. Attacks linked with the threat actor targeted the US and South Korea, and some involved destructive malware.Read More
View ArticleSpam offering fake Visa benefits, rewards leads to TeslaCrypt ransomware
Spam campaign baits users with Visa Total Rewards emails containing malware that leads to Trojan.Cryptolocker.N infections.Read More
View ArticleDROWN vulnerability could sink secure internet connections
New SSL/TLS vulnerability (CVE-2016-0800) could allow attackers to obtain encryption keys.Read More
View ArticleBusiness email compromise scammers add tax return fraud to their toolbox
Prolific scammers that consistently target businesses in CEO fraud attempts have recently branched out into W2 related fraud schemes.Read More
View ArticleBurrp compromised to serve Angler EK and deliver TeslaCrypt ransomware
An Indian restaurant recommendation site contains injected code which redirects users to the Angler EK, which in turn drops TeslaCrypt (Trojan.Cryptolocker.N) on the computer.Read More
View ArticleKeRanger: First Mac OS X ransomware emerges
Compromised BitTorrent installer used to spread ransomware that encrypts files on Mac OS X computers.Read More
View ArticleMicrosoft Patch Tuesday – March 2016
This month the vendor is releasing 13 bulletins, five of which are rated Critical.Read More
View ArticlePhishers are creating YouTube channels to document their attacks
Phishing attacks have linked back to YouTube channels where phishers explain their attacks and promote their tools while looking for buyers.Read More
View ArticleLatest Intelligence for February 2016
The Latest Intelligence for February 2016 reveals that one in every 125 emails sent last month contained malware.Read More
View ArticleSuckfly: Revealing the secret life of your code signing certificates
A China-based APT group has an insatiable appetite for stolen code-signing certificates.Read More
View ArticleFinancial threats 2015: 73 percent drop in financial Trojan infections but...
Although detections dropped, financial Trojans are becoming far more capable and criminals are increasingly targeting institutions directly.Read More
View ArticleNew iOS vulnerability could allow attackers to crack encrypted iMessage...
CVE-2016-1788 is difficult to exploit, but within the capabilities of nation state attackers. Users are advised to update to iOS 9.3 to reduce the risk of attack.Read More
View ArticleMalware is being signed with multiple digital certificates to evade detection
Malware authors are signing threats with multiple digital certificates to account for a shift from SHA1 to SHA2.Read More
View ArticleSeven Iranians charged in relation to cyberattacks against US
The attackers mainly used Brobot malware to build a botnet of compromised servers to perform DDoS attacks against US banks and other organizations.Read More
View ArticleTaiwan targeted with new cyberespionage back door Trojan
Backdoor.Dripion was custom developed, deployed in a highly targeted fashion, and used command and control servers disguised as antivirus company websites.Read More
View ArticleMost prevalent Android ransomware in the West arrives in Japan
Android.Lockdroid ransomware expands to Asia by targeting Japan first. The malware poses as a system update and locks the device from use.Read More
View Article