Collaborate Disseminate
Back-to-back Drupal zero-day vulnerabilities are being monetized with malicious web cryptominers.
Categories:
Cryptomining
Threat analysis
Tags: CMScontent management systemsdrupaldrupalgeddonmalicious cryptomining
(Read more…)
The p… Continue reading A look into the Drupalgeddon client-side attacks
A new Adobe Reader zero-day exploit has been discovered, including a full sandbox escape.
Categories:
Exploits
Threat analysis
Tags: 0dayadobeAdobe ReaderCVE-2018-4990CVE-2018-8120zero day
(Read more…)
The post Adobe Reader zero-day … Continue reading Adobe Reader zero-day discovered alongside Windows vulnerability
Internet Explorer is yet again leveraged for a zero-day exploit delivered via Office document—the first zero-day observed for IE in over two years.
Categories:
Exploits
Threat analysis
Tags: 0dayCVE-2018-8174zero day
(Read more…)
… Continue reading Internet Explorer zero-day: browser is once again under attack
We take a look at a new Netflix phish in circulation, using the time-honored trick of claiming the recipient is about to lose access unless they hand over some personal information.
Categories:
Social engineering
Threat analysis
Tags: Appleemai… Continue reading Netflix phish claims your membership is on hold
Kuik adware, which forces affected machines to join a domain controller, is using this unusual technique to push Google Chrome extensions and coin miner applications. In this blog, we’ll provide technical analysis of the adware and custom removal … Continue reading Kuik: a simple yet annoying piece of adware
The same group behind the Shoppers Stop tech scam campaign is at it again, injecting malicious ad code into thousands of sites and redirecting to a templated warning page.
Categories:
Social engineering
Threat analysis
Tags: malvertisingtech su… Continue reading Shoppers Stop tech scam draws from thousands of forced ad injections
The Necurs gang tries out a new trick to load malware and bypass security defenses.
Categories:
Criminals
Threat analysis
Tags: botnetmalspamnecurssambaSMBspam
(Read more…)
The post Internet Shortcut used in Necurs malspam campaign a… Continue reading Internet Shortcut used in Necurs malspam campaign
So here it is… the first one you’ve received. Everything has been building up to this.
You spent days preparing the business case, weeks designing the training program… and it’s finally paid off.
The first user-reported phi… Continue reading 6 Steps to Quickly Defang Reported Phishing Emails
Spartacus ransomware is a fairly new variant seen in 2018. We’ll walk you through the malware sample to analyze the code in detail, and help you learn how to get an obfuscated .NET sample into a readable state.
Categories:
Malware
Threat analysi… Continue reading Spartacus ransomware: introduction to a strain of unsophisticated malware
A new variant of the Crossrider adware has been spotted that is infecting Macs in a unique way, using a configuration profile to keep its effects resident in the system.
Categories:
Mac
Threat analysis
Tags: Advanced Mac Cleaneradwareconfigurat… Continue reading New Crossrider variant installs configuration profiles on Macs