Collaborate Disseminate
The ability of these simple files to open Excel and download any data from the internet makes them extremely dangerous. Continue reading Creative Spam Thinks Outside the Macro with .IQY Attachments
A roundup of security news from April 30 – May 6, including Necurs malspam, Spartacus ransomware, Twitter passwords, and cybersecurity studies.
Categories:
Security world
Week in security
Tags: MalwarebytesnecursransomwaresecuritySpartac… Continue reading Week in security (April 30 – May 6)
The Necurs gang tries out a new trick to load malware and bypass security defenses.
Categories:
Criminals
Threat analysis
Tags: botnetmalspamnecurssambaSMBspam
(Read more…)
The post Internet Shortcut used in Necurs malspam campaign a… Continue reading Internet Shortcut used in Necurs malspam campaign
Emails try to get recipients to share revealing photos of themselves so scammers can later extort them later. Continue reading Romance Scams Drive Necurs Botnet Activity in Run Up to Valentine’s Day
The cybergang behind the Necurs botnet launched a massive romance-themed spam campaign in the lead up to Valentine’s Day, impersonating single Russian women looking for dates online.
The post Necurs Spammers Go All In to Find a Valentine’s Day Victim appeared first on Security Intelligence.
Continue reading Necurs Spammers Go All In to Find a Valentine’s Day Victim
A recently discovered Dridex campaign had a few peculiar characteristics, including the use of FTP instead of HTTP. Continue reading New Dridex Variant Emerges With An FTP Twist
Microsoft published guidance for Windows admins on how to safely disable Dynamic Data Exchange (DDE) fields in Office that are being used to spread malware in email-based attacks. Continue reading Microsoft Provides Guidance on Mitigating DDE Attacks
Researchers have spotted Locky ransomware infections emanating from the Necurs botnet via Word attachments using a DDE technique that Microsoft says is an Office feature and does not merit a security patch. Continue reading Necurs-Based DDE Attacks Now Spreading Locky Ransomware
The Necurs botnet is back again, this time spreading a downloader that takes screen grabs of victims’ desktops and reports encountered errors back to the attackers.
Read More Continue reading Necurs attackers now want to see your desktop
Over the last 2 days the Necurs botnet has reduced the numbers of Locky malspam emails being sent ( still lots being sent, but in lower numbers than earlier this week and last week ). They are concurrently spamming out “dating spam” in massive numbers. Quite what they expect to … Continue reading → Continue reading Necurs botnet really spamming dating spam