Collaborate Disseminate
By Waqas
The patch was issued to prevent the execution of code that downloaded the Microsoft Cabinet archive containing a malicious executable.
This is a post from HackRead.com Read the original post: Attackers bypass Microsoft security patch to drop F… Continue reading Attackers bypass Microsoft security patch to drop Formbook malware
A new threat group uses NSIS as an installer to target industrial companies with revolving payloads, including LokiBot, FormBook, BetaBot, Agent Tesla and Netwire. Continue reading RATicate Group Hits Industrial Firms With Revolving Payloads
We haven’t seen any Formbook malware / Trojan / Info-Stealer hitting the UK for ages, so it was quite surprising to see this one arrive overnight. Unlike previous versions who generally used exploits or macros / embedded ole objects in Microsoft … Continue reading Formbook back hitting UK in fake order emails
Malware infection technique called TxHollower gets updated with stealthy features. Continue reading New Loader Variant Behind Widespread Malware Attacks
Never-before-seen dropper found in FormBook samples that has increased persistence and obfuscation capabilities. Continue reading New FormBook Dropper Harbors Obfuscation, Persistence
A very slightly strange and less usual malware campaign this morning that does eventually deliver Formbook. The email is nothing special, very terse & bland that just says ” Kindly find the attachment”. It has 2 Microsoft Word Doc attac… Continue reading Fake Hillconmining Incoming20414 email delivers Formbook
Bad actors are leveraging a new file hosting service in order to launch attack campaigns involving FormBook and other malware. Near the end of March, researchers at Deep Instinct observed a new FormBook attack. The infection chain for this campaign beg… Continue reading Malware Actors Using New File Hosting Service to Launch Attacks
Another Formbook malware campaign that didn’t seem to want to fire off properly in Anyrun initially. I am not sure if there genuinely is an issue with the file or whether the error message was a “red herring”. However opening the expl… Continue reading Formbook via fake Urgent Enquiry email
A somewhat involved and slightly complicated and devious chain in this Formbook campaign. What is slightly concerning are some of the sites involved, especially the live download site http://globalbank.us/ which looks like it has been been purchased b… Continue reading Fake order with 2 lnk files delivers Formbook
We have been seeing a lot of formbook malware recently. This campaign is very similar to all the others we frequently see. The only reason for mentioning it is that it is very unusual for malware campaigns to take place over a weekend. Most of this typ… Continue reading Fake Quotation request delivers Formbook