Collaborate Disseminate
By Waqas
Dubbed MasterMana by researchers; the botnet utilizes every available option to target its victims including dropping backdoors and phishing attacks through business email compromise commonly known as BEC.
This is a post from HackRead.com Read… Continue reading MasterMana botnet hits users by evading detection with URL shorteners
Malware infection technique called TxHollower gets updated with stealthy features. Continue reading New Loader Variant Behind Widespread Malware Attacks
More than a dozen US-based web servers were used to host 10 malware families, distributed through mass phishing campaigns. Malware families include Dridex, GandCrab, Neutrino, IcedID and others. Evidence suggests the existence of distinct threat actors… Continue reading Mapping Out a Malware Distribution Network
A variant of the STOP ransomware family is downloading the Azorult infostealer onto victim’s machines as part of its infection process. Security researcher Michael Gillespie was the first to detect this malicious activity. While testing some of t… Continue reading STOP Ransomware Variant Installing Azorult Infostealer
I am quite impressed with the level of Social Engineering with this malware delivery Malspam campaign. With Brexit fast approaching and the likelihood of no deal between UK and Europe, many companies are increasingly trying to build a relationship wit… Continue reading Azorult via fake Chinese Government New Import Export Regulations
Some days we have lots of problems trying to decide what malware is being delivered. Today is an exception. The bad actor has made it bleeding obvious by his use of the file names & url paths. I suppose this semi-clueless Skiddie has purchased an o… Continue reading Making it Bleeding Obvious
The Gazorp online builder makes it easy to start stealing passwords, credit-card information, cryptocurrency wallet data and more. Continue reading Dark Web Azorult Generator Offers Free Binaries to Cybercrooks
The Necurs botnet has been observed pushing an unusual malware campaign that almost exclusively targets users and employees within the financial sector. Necurs is one of the largest and longest-lived botnet that’s still in operation today. Over t… Continue reading Necurs Botnet Launches Campaign Against Banks
This generic email with the subject of “Invoice Due” coming from help@simplexhealthcare.info with a malicious password protected word doc attachment does eventually deliver some sort of malware. Recently password protected word docs have… Continue reading False Invoice Due email with password protected attachment delivers malware
The researchers saw the new version in action in a large email campaign on July 18, just one day after it debuted in underground forums. Continue reading Updated AZORult Spyware Comes with Sophisticated New Techniques