Malware August 8, 2017

Where Are They Today? Cybercrime Trojans That No One Misses: Shifu Malware

5 min read - Before it started fading out in June 2016, Shifu malware appeared to be targeting banks in Japan and the U.K. and evolving at a steady pace.

Malware July 27, 2017

After Big Takedown Efforts, 20 More BankBot Mobile Malware Apps Make It Into Google Play

7 min read - IBM X-Force researchers discovered 20 apps in the Google Play Store that deliver mobile malware to unsuspecting Android users.

July 25, 2017

New Emotet Trojan Feature Spreads Malware on Internal Networks

2 min read - Researchers discovered a new variant of the Emotet Trojan that spreads across internal networks and serves as a downloader for other banking Trojans.

Malware July 19, 2017

TrickBot Habla Español: Trojan Widens Its Attack Scope in Spain, Brings Redirection Attacks to Local Banks

3 min read - The TrickBot Trojan has been steadily ramping up its activity this year, going into a rather intensive period of updates and attacks that started in Q2.

July 17, 2017

New Malware Gets Stronger by Using Real Apps in Banking Attacks

2 min read - New malware is infiltrating bona fide apps, making banking Trojans harder to detect. Fortunately, it can be shut down if it is detected in time.

Malware June 20, 2017

TrickBot Spreads to the Nordics, Launches Redirection Attacks in France

5 min read - The TrickBot Trojan, which recently tested redirection attacks in France, expanded its list of targets to include banks in Sweden and other Nordic areas.

Malware June 15, 2017

Zeus Sphinx Pushes Empty Configuration Files — What Has the Sphinx Got Cooking?

3 min read - Amid a period of targetless activity, IBM X-Force researchers are wondering where the operators behind the Zeus Sphinx Trojan are planning to strike next.

Advanced Threats June 2, 2017

QakBot Banking Trojan Causes Massive Active Directory Lockouts

10 min read - IBM X-Force attributed a recent wave of malware-induced Active Directory (AD) lockouts across several IR engagements to the operators of the QakBot Trojan.

Malware May 23, 2017

GootKit Malvertising Brings Redirection Attacks to Italian Banks

4 min read - The cybergang behind GootKit followed up its recent U.K. activity by launching redirection attacks at Italian banking services.

Malware May 11, 2017

GootKit Launches Redirection Attacks in the UK

4 min read - X-Force researchers discovered that the cybergang behind the GootKit banking Trojan recently began launching redirection attacks in the U.K.