Observations of ITG07 Cyber Operations
After nine months of tracking the cyber operations of threat group ITG07, IBM X-Force identified new Chafer-associated malware targeting companies within the travel and transportation industry.
Qbot Campaigns Use New Persistence Mechanism to Avoid Detection
Recent attack campaigns involving the Qbot banking Trojan have been using a new persistence mechanism that helps the threat avoid detection, according to security researchers.
IcedID Banking Trojan Spruces Up Injection Tactics to Add Stealth
IBM X-Force analyzed modifications made to IcedID that help the banking Trojan act more stealthily on infected devices.
Despite Last Year’s Surge, Ransomware Attacks on the Decline in 2018
Although major, widespread campaigns such as WannaCry drove a 415 percent increase in ransomware attacks last year, recent research revealed that the threat vector is fading in 2018. F-Secure’s “The Changing State of Ransomware”...
Steganography: A Safe Haven for Malware
Steganography continues to be an incredibly versatile and effective method for obscuring or hiding information in plain sight.
Cybercrime Group FIN7 Takes Phishing Attacks to the Next Level
A cybergang known as FIN7 has been using OLE command files to spread its malware and identify potential victims for additional phishing attacks.
BrickerBot Author Claims Responsibility for Indian Cyberattack
A cyberattack by the author of BrickerBot left 60,000 users without internet in India. The attack was linked to an external connections vulnerability.
The Adwind Remote Access Tool Experiences a Resurgence
A new report detailed how Adwind, a remote access tool, is surging in popularity and putting countless users at risk for cyberattack.
A ‘Wiper’ in Ransomware Clothing: Global Attacks Intended for Destruction Versus Financial Gain
Further analysis of impacted Petya ransomware victims led our team to conclude that this attack was specifically aimed at organizations within Ukraine.
Fireball Malware: Ticking Time Bomb or All Hot Air?
Depending on who you ask, the Fireball malware infected somewhere between 40 and 250 million Windows devices. The potential danger, however, is undisputed.