Collaborate Disseminate
The Heaven’s Gate technique has been around since 2009. But now coin miners are using it to maximize their performance in the target architecture.
Categories:
Malware
Threat analysis
Tags: coin minersHeaven’s Gatemalware analysis
(Read more…. Continue reading A coin miner with a “Heaven’s Gate”
We take a look at a prolific campaign that is focused on the distribution of coin miners via drive-by download attacks. We started to notice larger-than-usual payloads from the RIG exploit kit around November 2017, a trend that has continued more … Continue reading RIG exploit kit campaign gets deep into crypto craze
The ransomware previously known as Blind has been spotted recently with a .napoleon extension and a bug fix that means files can no longer be decrypted by victims. In this post, we’ll analyze the sample for its structure, behavior, and distributio… Continue reading Napoleon: a new version of Blind ransomware
A new piece of Mac malware called HiddenLotus is using a clever new trick to fool users into opening it.
Categories:
Mac
Threat analysis
Tags: Applefile quarantinehiddenlotusmacMac applicationsmac malwaremacOS
(Read more…)
The post I… Continue reading Interesting disguise employed by new Mac malware HiddenLotus
The most prolific gate to the RIG exploit kit is coming in a different flavor. The Seamless campaign is now using a domain name with foreign characters translated by Punycode.
Categories:
Exploits
Threat analysis
Tags: phishingPunycoderamnitRam… Continue reading Seamless campaign serves RIG EK via Punycode
Flaws in Apple’s response to the “iamroot” vulnerability show that some systems can remain vulnerable even after applying the patch.
Categories:
Mac
Threat analysis
Tags: AppleHigh Sierraiamrootmac vulnerabilitymacOS
(Read more…)
The… Continue reading Yet another flaw in Apple’s “iamroot” bug fix
Flaws in Apple’s response to the “iamroot” vulnerability show that some systems can remain vulnerable even after applying the patch.
Categories:
Mac
Threat analysis
Tags: AppleHigh Sierraiamrootmac vulnerabilitymacOS
(Read more…)
The… Continue reading Yet another flaw in Apple’s “iamroot” bug fix
A look at some techniques used by the Terror exploit kit to evade traffic-based detection.
Categories:
Exploits
Threat analysis
Tags: exploit kitsmalvertisingPropeller Ads Mediasmoke loaderTerror EKTerror exploit kit
(Read more…)
The… Continue reading Terror exploit kit goes HTTPS all the way
The Terdot Trojan is a banker, but it loves to steal your social networks credentials as well.
Categories:
Malware
Malwarebytes news
Threat analysis
Tags: bankerfacebooksocial mediaterdottrojantwitter
(Read more…)
The post Terdot Tro… Continue reading Terdot Trojan likes social media
A new variant of the OSX.Proton malware is being promoted via a fake Symantec blog site.
Categories:
Mac
Threat analysis
Tags: CoinThiefmalwareOSX.ProtonprotonProton malwaresymantecSymantec blogSymantec Malware Detector
(Read more…)
… Continue reading OSX.Proton spreading through fake Symantec blog