News

LoJax Campaign is Still Ongoing

Delaware, USA – January 18, 2019 – New research has shown that the LoJax infrastructure is still not disabled, and attacks using this malware have continued for at least two years. In early May 2018, it became known that the Fancy Bear APT group created an incredibly persistent malware based on the code of LoJack […]

Emotet Returns After Holiday Break

Delaware, USA – January 17, 2019 – After a short holiday rest, the Emotet returns to new attacks with refreshed features. The malware is distributed via email campaigns bringing new tricks. In current campaigns, the Emotet is delivered in two different ways. One version outspreads via a stream of emails in different languages informing about […]

The City of Del Rio, Texas Falls a Victim of Ransomware

Delaware, USA – January 16, 2019 – It’s not only cyber sec people who deal with malware attacks at governmental organizations and the consequences but also pin-striped masses whose routine turns upside down. Another ransomware disabled normal operations in the City of Del Rio, Texas. All the employees weren’t able either to log into the […]

“Love You” Spam Campaign Distributes Malware Cocktail

Delaware, USA – January 15, 2019 – Despite the fact that there is still a whole month before Valentine’s Day, adversaries are sending spam emails with unexpected content. Security researcher Brad Duncan published his findings related to the campaign spreading Ransomware, cryptocurrency miner and spambot bundle. First attacks of the “Love You” campaign carried by […]

ServHelper and FlawedGrace RAT Attack Finances

Delaware, USA – January 14, 2019 – Malware researchers from Proofpoint enounce about a new information-stealing campaign targeting the financial and retail sectors. New malware families giving the hackers RDP access to the compromised network and are distributed via phishing emails with MS Word, Publisher, and PDF files. In the monitored campaigns, adversaries used not […]

APT Group Uses DNS Hijacking to Steal Credentials

Delaware, USA – January 11, 2019 – FireEye researchers analyzed a surge in incidents related to DNS hijacking and discovered that an unidentified APT group is using a new intrusion technique. This group attacks the government and telecommunications sector in North America, Europe and the Middle East. The researchers believe that the attackers are linked […]

MageCart Attack on OXO International

Delaware, USA – January 10, 2019 – OXO International reported a data breach that affected the personal information of their customers. Presumably, the adversaries got access to the data entered on the site from June to November 2017 and from July to October 2018. A third-party security firm is conducting an investigation, and OXO International […]

Vidar Infostealer Delivers Latest Version of GandCrab Ransomware

Delaware, USA – January 9, 2019 – One of the threat actors behind the malvertising campaign distributes Vidar infostealer to collect credentials and install GandCrab ransomware as a secondary payload. Experts from Malwarebytes discovered this threat during the investigation of a massive malvertising campaign which redirects its victims to Fallout and GrandSoft exploit kit landing […]

Updated NRSMiner Strikes Asian Countries

Delaware, USA – January 8, 2019 – An updated version of the NRSMiner coinminer threatens organizations in Asia. Researchers from F-Secure spotted a new wave of malware attacks started in mid-November last year when adversaries released the newest version of the cryptocurrency miner. NRSMiner is a worm-like malware that uses the EthernalBlue exploit for spreading […]

Roma225 Campaign by Gorgon Group

Delaware, USA – January 4, 2019 – A recently published research by Cybaze-Yoroi ZLab experts informs about details of Roma225 campaign that targeted the Italian automotive sector. Cyberespionage malware intruded into infrastructure through phishing email making victims believe its a legitimate PowerPoint Presentation from the senior partner. Their bad luck was that the .ppa file […]