Coronavirus-Themed APT Attack Spreads Malware

The APT group was spotted sending spear-phishing emails that purport to detail information about coronavirus – but they actually infect victims with a custom RAT. Continue reading Coronavirus-Themed APT Attack Spreads Malware

Coronavirus-Themed APT Attack Spreads Malware

The APT group was spotted sending spear-phishing emails that purport to detail information about coronavirus – but they actually infect victims with a custom RAT. Continue reading Coronavirus-Themed APT Attack Spreads Malware

Spyware Pushers Modify Equation Editor Exploit to Bypass AV Detection

In a case that shows you can teach an old exploit new tricks, a group of attackers who push information-stealing malware modified a well-known exploit in a way that it bypasses detection by most antivirus programs. The incident was reported by researc… Continue reading Spyware Pushers Modify Equation Editor Exploit to Bypass AV Detection

[SANS ISC] New Campaign Using Old Equation Editor Vulnerability

I published the following diary on isc.sans.edu: “New Campaign Using Old Equation Editor Vulnerability“:
Yesterday, I found a phishing sample that looked interesting:
From: sales@tjzxchem[.]com
To: me
Subject: RE: Re: Proforma Invoice INV 0… Continue reading [SANS ISC] New Campaign Using Old Equation Editor Vulnerability

Spectre Patches Reach More CPUs as New Attack Variants Appear

Intel has released microcode patches to address the Spectre vulnerability on additional families of CPUs. Meanwhile, researchers have found a new way of implementing the Meltdown and Spectre attacks, but the variants are covered by existing patches. &#… Continue reading Spectre Patches Reach More CPUs as New Attack Variants Appear