Collaborate Disseminate
February has been a relatively busy month in the world of Mac malware, and now it has gotten busier with the appearance of the second piece of ransomware ever to affect macOS. Categories: Mac
Threat analysisTags: Adobe Premier ProAppleFindzipmacmacOSm… Continue reading Mac ransomware on piracy sites
Google Chrome may be one of the more secure browsers but an increasing number of malicious extensions are being forced onto users. The one we analyze can hide itself and receive commands from a remote server in order to hijack the browser with incessan… Continue reading Rogue Chrome extension pushes tech support scam
Researchers Claudio Guarnieri and Collin Anderson recently discovered new Mac malware, which they have dubbed MacDownloader.Categories: Mac
Malware
Threat analysisTags: Adobe Flash PlayerApplemacMacDownloadermacOSmalwarephishingspearphishing(Read mor… Continue reading MacDownloader malware targeting defense industry
Behind compromised sites or malvertising, you will often find trails that can take you back years and see how infection chains evolved, or didn’t, over time.Categories: Exploits
Threat analysisTags: campaigneitestexploit kitsiframemalvertisingmalwarer… Continue reading A look back at the Zyns iframer campaign
 |
|
| The developers of Locky Bart already had very successful ransomware campaigns running called “Locky” and “Locky v2”. After some users reported being infected with Locky Bart, we investigated it to find the differences as to gain greater knowledge and understanding of this new version.
Categories: Tags: analysisAnti-Ransomwarebackend serverbartbinaryLockyLocky Bart ransomwareransomware |
Continue reading Locky Bart ransomware and backend server analysis
Recently, among the payloads delivered by exploit kits, we often find Terdot.A/Zloader – a downloader installing on the victim machine a ZeuS-based malware.Categories: Cybercrime
Malware
Malware
Threat analysisTags: bankerbanking malwaremalwareterdo… Continue reading Zbot with legitimate applications on board
Virlocker is back, the nightmare is still real. But we have found a way to at least recover your important files even if the affected machine can be considered a loss.Categories: Malware
Threat analysisTags: file infectingfile recoverymalwarepolymorph… Continue reading VirLocker’s comeback; including recovery instructions
Virlocker is back, the nightmare is still real. But we have found a way to at least recover your important files even if the affected machine can be considered a loss.Categories: Malware
Threat analysisTags: file infectingfile recoverymalwarepolymorph… Continue reading VirLocker’s comeback; including recovery instructions
 |
|
| We’ve found a scam in a box company that also offers intelligence leads. That is, they’ll sell you the scam and point you at the most vulnerable targets first.
Categories: Tags: botnetBPO Experts GlobalBPOreseroucesDellscams as a servicetech supporttech support scamTSSwinlogon |
Continue reading Tech support scams, stolen data, and botnets
From March 2016 we’ve observed the evolution of an interesting low-level ransomware, Petya. Now, we are facing an outbreak of the fourth version – this time under a new name – Goldeneye, and, appropriately, a new, golden theme.Categories: Malware
Malw… Continue reading Goldeneye Ransomware – the Petya/Mischa combo rebranded