Collaborate Disseminate
More than a hundred banks and financial institutions across the world have been infected with a dangerous sophisticated, memory-based malware that’s almost undetectable, researchers warned.
Newly published report by the Russian security firm Kaspersky… Continue reading New “Fileless Malware” Targets Banks and Organizations Spotted in the Wild
This threat was originally discovered by a bank’s security team, after detecting Meterpreter code inside the physical memory of a domain controller (DC). Kaspersky Lab participated in the forensic analysis, discovering the use of PowerShell scripts within the Windows registry. Additionally it was discovered that the NETSH utility as used for tunnelling traffic from the victim’s host to the attacker´s C2. Continue reading Fileless attacks against enterprise networks
A new ransomware sample called PowerWare uses Windows PowerShell to download a malicious script and avoid storing files on the compromised machine. Continue reading Fileless PowerWare Ransomware Found on Healthcare Network