Collaborate Disseminate
This post describes how WMI hijackers work and why they are hard to find on an affected system. It also shows an example of such a hijacker called Yeabests after the domain it hijacks to.Categories: Cybercrime
MalwareTags: elexhijackerPieter ArntzPUPs… Continue reading Explained: WMI hijackers
The hosts file is the internet variant of a personal phonebook. We discuss a few malware variants that replace or change that phonebook, so you end up calling the wrong sites. The ones they want you to call.Categories: Cybercrime
MalwareTags: dnshijac… Continue reading Hosts file hijacks
We show two examples of HTA induced infections we have seen recently. Nothing fancy, but feel free to consider it a general warning, that malware authors are expanding the number of file extensions they are using, to spread their payload.Categories: Cy… Continue reading Surfacing HTA infections
This may be a new trend among browser hijackers, but it seems more than a coincidence that we found two browser hijackers using a very similar approach to reach their goal of taking victims to the sites of their choice.Categories: Cybercrime
MalwareTa… Continue reading File-in-the-middle hijackers
 |
|
| EoRezo is a detection name that is in use for a big part of the adware family called Tuto4PC. The adware is bundled with other software and with tutorials (about software). The adware, although annoying, is usually harmless by itself, but that can’t be said about the advertisements and sites it opens on the victim’s computer.
Categories: Tags: eorezoPieter ArntzPUPsearch protecttuto4pc |
Sinkholes and watering holes are two words not automatically associated with computer security, yet they are in use to describe two tactics that are used in this field. Categories: Cybercrime
Social engineeringTags: Pieter Arntzsinkholesinkholesthe mo… Continue reading Intentional security holes
This post is a sequel to Tech support scammers using Winlogon. As we have found after writing that post there are many variants of this scam.Categories: Cybercrime
Social engineeringTags: +1-844-459-8882Pieter Arntzscamshelltech supportwinlogon(Read m… Continue reading Tech support scammer follow-up
Typosquatting is a term you may have seen when reading about internet scams. In essence it relies on users making typing errors (typos) when entering a site or domain name.Categories: Cybercrime
Social engineeringTags: fakePieter Arntzthe more you kno… Continue reading Explained: typosquatting
Email spoofing basically comes down to sending emails with a false sender address. This can be used in various ways by threat actors. Categories: Cybercrime
Social engineeringTags: emailphishPieter Arntzspamspoofedspoofing(Read more…) Continue reading Email spoofing