Category Archives: Dyre

Ne’er-Do-Well News and Cyber Justice

Posted on by

Way back in the last millennium when I was a lowly copy aide at The Washington Post, I pitched the Metro Section editor on an idea for new column: “And the Good News Is…” The editor laughed me out of her office. But I still think it’s a decent idea — particularly in the context of cybersecurity — to periodically highlight the good news when people allegedly responsible for spewing so much badness online are made to face justice. Continue reading Ne’er-Do-Well News and Cyber Justice→

Trick Bot – Dyreza’s successor

Posted on by
Recently, our analyst Jérôme Segura captured an interesting payload in the wild. It turned out to be a new bot, that, at the moment of the analysis, hadn’t been described yet.

Categories:

Tags:

(Read more…)

Continue reading Trick Bot – Dyreza’s successor→

ACH Payment Notification malspam delivers trickbot / dyre banking Trojan

Posted on by

The next in the never ending series of malware downloaders is an email with the subject of  ACH Payment Notification pretending to come from ap_vendor_pay2@bankofamerica.com with a  with a random named / numbered  zip attachment  containing a .scr file. The icon … Continue reading →

Source

Continue reading ACH Payment Notification malspam delivers trickbot / dyre banking Trojan→

Credit Note CN-81553 from Nordstrom Inc (7907) malspam delivers trickbot / dyre banking Trojan

Posted on by

The next in the never ending series of malware downloaders is an email with the subject of  Credit Note CN-81553 from Nordstrom Inc (7907) pretending to come from Accounts <message-service@post.xero.com>  with a random named / numbered  zip attachment  containing a .scr … Continue reading →

Source

Continue reading Credit Note CN-81553 from Nordstrom Inc (7907) malspam delivers trickbot / dyre banking Trojan→

Cybercrime Overtakes Traditional Crime in UK

Posted on by

In a notable sign of the times, cybercrime has now surpassed all other forms of crime in the United Kingdom, the nation’s National Crime Agency (NCA) warned in a new report. It remains unclear how closely the rest of the world tracks the U.K.’s experience, but the report reminds readers that the problem is likely far worse than the numbers suggest, noting that cybercrime is vastly under-reported by victims. Continue reading Cybercrime Overtakes Traditional Crime in UK→

FBI: $2.3 Billion Lost to CEO Email Scams

Posted on by

The U.S. Federal Bureau of Investigation (FBI) this week warned about a “dramatic” increase in so-called “CEO fraud,” e-mail scams in which the attacker spoofs a message from the boss and tricks someone at the organization into wiring funds to the fraudsters. The FBI estimates that these scams have cost organizations more than $2.3 billion in losses over the past three years. Continue reading FBI: $2.3 Billion Lost to CEO Email Scams→

Dyre Botnet Using Malicious Microsoft Word Macros

Posted on by

The Dyre group, a major malware spam producer, has changed their initial malware dropper to utilize Microsoft Word document macros instead of the usual executable types, such as .exe files contained in a .zip. Dyre’s Hedsen spambot, responsible for the bulk of Upatre emails we’ve been tracking, now uses a template to send infected-macro Word files […]

The post Dyre Botnet Using Malicious Microsoft Word Macros appeared first on ThreatTrack Security Labs Blog.

Continue reading Dyre Botnet Using Malicious Microsoft Word Macros→

Dyre Botnet Using Malicious Microsoft Word Macros

Posted on by

The Dyre group, a major malware spam producer, has changed their initial malware dropper to utilize Microsoft Word document macros instead of the usual executable types, such as .exe files contained in a .zip. Dyre’s Hedsen spambot, responsible for the bulk of Upatre emails we’ve been tracking, now uses a template to send infected-macro Word files […]

The post Dyre Botnet Using Malicious Microsoft Word Macros appeared first on ThreatTrack Security Labs Blog.

Continue reading Dyre Botnet Using Malicious Microsoft Word Macros→