PokemonGo Ransomware comes with some clever tricks

We have all seen the current popularity and craze with PokemonGo, it’s no surprise cyber-criminals would plan on using this to their advantage and imitate the game with malicious substitutions. Categories: Malware
Threat analysisTags: malwarepokemonpo… Continue reading PokemonGo Ransomware comes with some clever tricks

Shakti Trojan: Document Thief

Recently, Bleeping Computer published a short article about an unrecognized Trojan that grabs documents from the attacked computer and uploads them into a malicious server. Looking at the characteristics of the tool, we suspect that it has been prepared for the purpose of corporate espionage. So far, no AV has given any meaningful identification to this malware—it is detected under generic names. Since not much is known about its internals, we decided to take a closer look.

Categories:

Tags:

(Read more…)

Continue reading Shakti Trojan: Document Thief

Smoke Loader – downloader with a smokescreen still alive

This time we will have a look at another payload from recent RIG EK campaign. It is Smoke Loader (also known as Dofoil), a bot created several years ago. One of its early versions was advertised on the black marker in 2011.Categories: Malware
Threat a… Continue reading Smoke Loader – downloader with a smokescreen still alive