Ducktail fashion week
The Ducktail malware, designed to hijack Facebook business and ads accounts, sends marketing professionals fake ads for jobs with major clothing manufacturers. Continue reading Ducktail fashion week
Category Archives: Trojan
New SecuriDropper Malware Bypasses Android 13 Restrictions, Disguised as Legitimate Applications
A new malware is bypassing an Android 13 security measure that restricts permissions to apps downloaded out of the legitimate Google Play Store. Continue reading New SecuriDropper Malware Bypasses Android 13 Restrictions, Disguised as Legitimate Applications
Gaming-related cyberthreats in 2023: Minecrafters targeted the most
Gaming-related threat landscape in 2023: desktop and mobile malware disguised as Minecraft, Roblox and other popular games, and the most widespread phishing schemes. Continue reading Gaming-related cyberthreats in 2023: Minecrafters targeted the most
WhatsApp spy mod spreads through Telegram, attacks Arabic-speaking users
A WhatsApp mod with a built-in spy module has been spreading through Arabic and Azeri Telegram channels since August 2023. Continue reading WhatsApp spy mod spreads through Telegram, attacks Arabic-speaking users
Stealer for PIX payment system, new Lumar stealer and Rhysida ransomware
In this report, we share our latest crimeware findings: GoPIX targeting PIX payment system; Lumar stealing files and passwords; Rhysida ransomware supporting old Windows. Continue reading Stealer for PIX payment system, new Lumar stealer and Rhysida ransomware
Updated MATA attacks industrial companies in Eastern Europe
In early September 2022, we discovered several new malware samples belonging to the MATA cluster. The campaign had been launched in mid-August 2022 and targeted over a dozen corporations in Eastern Europe from the oil and gas sector and defense industry. Continue reading Updated MATA attacks industrial companies in Eastern Europe
Can Firejails protect against malicious links?
I would like to ask, if Firejails on Linux, protects when clicking a malicious link in the browser e.g. from downloading a keylogger or a trojan.
Continue reading Can Firejails protect against malicious links?
TeX Live PDFs marked as malware
I ran a malware scan using TotalAV on an Apple silicon Mac and it found 4 PDFs within the texlive folder that supposedly contain malware patterns. Two types of patterns were found:
EXP/KAB.Talu
PHISH/KAB.Talu
I ran the sample-sigconf-bib… Continue reading TeX Live PDFs marked as malware
A cryptor, a stealer and a banking trojan
In this report, we share our latest crimeware findings: the ASMCrypt cryptor/loader related to DoubleFinger, a new Lumma stealer and a new version of Zanubis Android banking trojan. Continue reading A cryptor, a stealer and a banking trojan
Threat landscape for industrial automation systems. Statistics for H1 2023
In the first half of 2023, the percentage of ICS computers on which malicious objects were blocked decreased from H2 2022 by just 0.3 pp to 34%. Continue reading Threat landscape for industrial automation systems. Statistics for H1 2023