Collaborate Disseminate
Microsoft’s decision to disable macros by default last year has forced hacking crews to find new, and sometimes old, ways to get a foothold.
The post Cybercriminals have adapted since Microsoft’s decision to block macros appeared first on CyberScoop.
Continue reading Cybercriminals have adapted since Microsoft’s decision to block macros
In early April, we detected a significant increase in attacks that use banking Trojans of the QBot family (aka QakBot, QuackBot, and Pinkslipbot). The malware would be delivered through e-mails that were based on real business letters the attackers had gotten access to. Continue reading QBot banker delivered through business correspondence
Statistics on spam and phishing with the key trends in 2022: two-stage spear phishing, hijacking of social network and instant messaging accounts, import substitution, and survey phishing. Continue reading Spam and phishing in 2022
Statistics on spam and phishing with the key trends in 2022: two-stage spear phishing, hijacking of social network and instant messaging accounts, import substitution, and survey phishing. Continue reading Spam and phishing in 2022
This report contains technical analysis of the Trojan-Banker named QakBot (aka QBot, QuackBot or Pinkslipbot) and its information stealing, web injection and other modules. Continue reading QakBot technical analysis
Cyber cops in Ukraine carried out an arrest and several raids last week in connection with the author of a U-Admin, a software package used to administer what’s being called “one of the world’s largest phishing services.” The operation was carried out in coordination with the FBI and authorities in Australia, which was particularly hard hit by phishing scams perpetrated by U-Admin customers. Continue reading Arrest, Raids Tied to ‘U-Admin’ Phishing Kit
I published the following diary on isc.sans.edu: “Example of Word Document Delivering Qakbot“: Qakbot is back on stage at the moment! Many security companies already reported some peaks of activity around this malware. On my side, I also spotted several samples. The one that I’ll cover today has been reported by one of our
The post [SANS ISC] Example of Word Document Delivering Qakbot appeared first on /dev/random.
Continue reading [SANS ISC] Example of Word Document Delivering Qakbot
Emotet has resurfaced after a five-month hiatus, with more than 250,000 malspam messages being sent to email recipients worldwide. Continue reading Emotet Returns in Malspam Attacks Dropping TrickBot, QakBot
ProLock is relatively new, but already the ransomware is making waves by using QakBot infections to access networks, gain persistence and avoid detection. Continue reading ProLock Ransomware Teams Up With QakBot Trojan to Infect Victims
Have your computers been hit by the ProLock ransomware? You might want to read this before you pay any money to the criminals behind the attack.
Continue reading The ProLock ransomware doesn’t tell you one important thing about decrypting your files