Malware August 8, 2017

Where Are They Today? Cybercrime Trojans That No One Misses: Shifu Malware

5 min read - Before it started fading out in June 2016, Shifu malware appeared to be targeting banks in Japan and the U.K. and evolving at a steady pace.

Malware July 27, 2017

After Big Takedown Efforts, 20 More BankBot Mobile Malware Apps Make It Into Google Play

7 min read - IBM X-Force researchers discovered 20 apps in the Google Play Store that deliver mobile malware to unsuspecting Android users.

Advanced Threats June 2, 2017

QakBot Banking Trojan Causes Massive Active Directory Lockouts

10 min read - IBM X-Force attributed a recent wave of malware-induced Active Directory (AD) lockouts across several IR engagements to the operators of the QakBot Trojan.

Malware April 27, 2017

TrickBot Is Hand-Picking Private Banks for Targets — With Redirection Attacks in Tow!

4 min read - According to IBM X-Force Research, the operators of the infamous TrickBot Trojan have been hand-picking private banks to target with redirection attacks.

February 14, 2017

Lazarus-Linked Malware Targets Polish Banks

2 min read - Threat actors with apparent ties to the Lazarus cybergang launched an attack against Polish banks that may be part of a broader, global campaign.

January 31, 2017

Dridex Redux? Small-Scale Attacks Suggest Potential Compromise Comeback

2 min read - Researchers detected a wave of phishing attacks in the U.K. delivering malware that shares code with the infamous Dridex banking Trojan.

March 27, 2015

Vawtrak Variant Uses Favicons to Hide Dangerous Malware Files

2 min read - Security researchers say a new form of the Vawtrak malware could be worse than ever before, accessing bank accounts and stealing passwords.