Metamorfo Banking Trojan Abuses AutoHotKey to Avoid Detection
A legitimate binary for creating shortcut keys in Windows is being used to help the malware sneak past defenses, in a rash of new campaigns.
The Metamorfo banking trojan is...
TrickBot Takes Over, After Cops Kneecap Emotet
TrickBot rises to top threat in February, overtaking Emotet in Check Point’s new index.
A massive malicious spam campaign, along with the global takedown of Emotet, has vaulted the TrickBot...
Ransomware Attack Strikes Spain’s Employment Agency
Reports say that the agency in charge of managing Spain’s unemployment benefits has been hit by the Ryuk ransomware.
The Spanish State Employment Service (SEPE) in Spain has been hit...
New steganography attack targets Azerbaijan
A lure document targeting Azerbaijan uses steganography to conceal a remote administration Trojan.
This blog post was authored by Hossein Jazi
Threat actors often vary their techniques to thwart security...
Nim-Based Malware Loader Spreads Via Spear-Phishing Emails
Spear-phishing emails are spreading the NimzaLoader malware loader, which some say may be used to download Cobalt Strike.
The TA800 threat group is distributing a malware loader, which researchers call...
Fake Ad Blocker Delivers Hybrid Cryptominer/Ransomware Infection
A hybrid Monero cryptominer and ransomware bug has hit 20,000 machines in 60 days.
At its previous peak in February, the Monero Miner cryptocurrency ransominer was targeting more than 2,500...
SolarWinds spurs investment in threat hunting, supplier vetting
By:
Derek B. Johnson
Organizations that boosted security budgets in response to the SolarWinds hack invested the most...
Google Play Harbors Malware-Laced Apps Delivering Spy Trojans
A never-before-seen malware-dropper, Clast82, fetches the AlienBot and MRAT malware in a savvy Google Play campaign aimed at Android users.
A malware dropper that paves the way for attackers to...
Dark Web Markets for Stolen Data See Banner Sales
Despite an explosion in the sheer amount of stolen data available on the Dark Web, the value of personal information is holding steady, according to the 2021 Dark Web...
WordPress Injection Anchors Widespread Malware Campaign
Website admins should patch all plugins, WordPress itself and back-end servers as soon as possible.
The downloader malware known as Gootloader is poisoning websites globally as part of an extensive...
