Collaborate Disseminate
When threat actors take to free and disposable cloud services, the battle against malicious cryptomining becomes a lot more difficult.
Categories:
Cryptomining
Threat analysis
Tags: adblockersblacklistcoinhivecryptominerscryptominingGitHub
(… Continue reading Malicious cryptomining and the blacklist conundrum
An uncommon exploit kit adds a fresh Flash Player exploit to distribute the Hermes ransomware in South Korea.
Categories:
Exploits
Threat analysis
Tags: CVE-2018-4878EKexploit kitFashHermesransomware
(Read more…)
The post Hermes rans… Continue reading Hermes ransomware distributed to South Koreans via recent Flash zero-day
Evading detection when distributing payloads is a key part of an effective malware campaign. Hancitor shows that it has yet another trick up its sleeve for that.
Categories:
Malware
Threat analysis
Tags: filelessHancitormacromalwarepayloads
… Continue reading Hancitor: fileless attack with a kernel trick
Almost two years after exposing a group of tech support scammers, we stumbled upon them again, this time under the moniker GeeksHelp.
Categories:
Social engineering
Threat analysis
Tags: AmericaGeeksGeeksFranceGeeksHelptech support scammers
… Continue reading Tech support scammers GeeksHelp caught again, two years later
Continuing on in our Encryption 101 series, we now look at what it takes to break encryption. In order for something as powerful as encryption to break, there needs to be some kind of weakness to exploit. That weakness is often a result of an erro… Continue reading Encryption 101: How to break encryption
We take a look at the colossal DDoS attack on GitHub, the largest-ever on record. How did threat actors do it, and what can companies do to protect against it?
Categories:
Criminals
Threat analysis
Tags: ddosDDos attackGitHubmemcachedmemcrashe… Continue reading Massive DDoS attack washes over GitHub
A recent Chinese drive-by attack dropped Virut, an ancient virus that’s been out of commission since 2013. So what was it doing in this modern attack?
Categories:
Malware
Threat analysis
Tags: avzhanAvzhan DDoS botChinese drive-by attackDDoS bo… Continue reading Blast from the past: stowaway Virut delivered with Chinese DDoS bot
This malvertising campaign uses a popular cryptocurrency theme to redirect users to the RIG exploit kit.
Categories:
Exploits
Threat analysis
Tags: cryptocurrenciesmalvertisingRIGRIGEK
(Read more…)
The post New RIG malvertising campa… Continue reading New RIG malvertising campaign uses cryptocurrency theme as decoy
In this case study on ShiOne ransomware, part of our Encryption 101 series, we will be reviewing the encryption process line by line and showing the different methods ransomware can use to encrypt files.
Categories:
Malware
Threat analysis
Tags… Continue reading Encryption 101: ShiOne ransomware case study
The Avzhan DDoS bot is back in the wild again, this time being dropped by a Chinese drive-by attack. In this post, we’ll take a deep dive into its functionality and compare the sample we captured with the one described in the past.
Categories:
M… Continue reading Avzhan DDoS bot dropped by Chinese drive-by attack