RoughTed: The anti ad-blocker malvertiser

A look at RoughTed, a purveyor of ad-blocker aware malvertising responsible for a range of scams, exploits, and malware.
Categories:
Cybercrime
Malware
Tags: ad-mavenadwareexploit kitsexploitsMagnitudemalvertisingPUPsRIGRoughTedscamstech support scam… Continue reading RoughTed: The anti ad-blocker malvertiser

New ‘Jaff’ ransomware via Necurs asks for 2 BTC

The dreaded Necurs botnet delivers a new ransomware with a high ransom ask in this newest spam campaign.

Categories:

Tags:

(Read more…)

The post New ‘Jaff’ ransomware via Necurs asks for 2 BTC appeared first on Malwarebytes Labs.

Continue reading New ‘Jaff’ ransomware via Necurs asks for 2 BTC

A story of fonts by the EITest HoeflerText campaign

The HoeflerText campaign is known for a fake font download that delivers the Spora ransomware. But did you know it also uses special characters in the dropper’s file name?
Categories:
Cybercrime
Social engineering
Tags: chromeeitestfonthoeflertextmal… Continue reading A story of fonts by the EITest HoeflerText campaign

Sundown EK gone missing, Terror EK flavours seen in active drive-by campaigns

With another player out at the moment, we take a look at a rebranded exploit kit in current malware campaigns.
Categories:
Exploits
Threat analysis
Tags: exploits kitsSundown EKTerror EK

(Read more…)

The post Sundown EK gone missing, Terror EK f… Continue reading Sundown EK gone missing, Terror EK flavours seen in active drive-by campaigns

Malvertising on iOS pushes eyebrow-raising VPN app

A malvertising campaign on iOS is pushing a scareware page tricking Apple users into installing a free VPN app that comes with serious privacy implications.
Categories:
Social engineering
Threat analysis
Tags: AppleiOSiPhonemalvertisingmalwareMyMobil… Continue reading Malvertising on iOS pushes eyebrow-raising VPN app

Websites compromised in ‘Decimal IP’ campaign

This URL is quite probably unlike anything you’ve ever seen before and yet still works and redirects to malware.

Categories:

Tags:

(Read more…)

The post Websites compromised in ‘Decimal IP’ campaign appeared first on Malwarebytes Labs.

Continue reading Websites compromised in ‘Decimal IP’ campaign

Canada and the U.K. hit by Ramnit Trojan in new malvertising campaign

This new malvertising campaign on adult websites was pushing the Ramnit information stealer.
Categories:
Exploits
Tags: exoclickmalvertisingramnitRIGRIGEK

(Read more…)

The post Canada and the U.K. hit by Ramnit Trojan in new malvertising campaig… Continue reading Canada and the U.K. hit by Ramnit Trojan in new malvertising campaign