News October 26, 2022

LemonDuck Cryptojacking Botnet Targets API Security Gap

2 min read - A recent report reveals the well-known crypto mining botnet LemonDuck can target Docker to secretly mine cryptocurrency on the Linux platform. LemonDuck targets Microsoft Exchange servers to mine crypto, escalate privileges and move sideways in compromised networks. It takes advantage…

Application Security September 10, 2021

How Companies Can Prepare for Botnet Attacks on APIs

4 min read - Organizations aren’t slowing down in their use of application programming interfaces (APIs). According to a survey covered by DEVOPSdigest, 61.3% of organizations used more APIs in 2020 than they did a year earlier. An even greater proportion (71.3%) said they…

News August 23, 2021

DirtyMoe Botnet Returns With Undetectable Threat Profile

2 min read - The malware botnet known as DirtyMoe has been around since at least 2016, but its newest version makes some major changes that put it back in the spotlight. Take a look at how the new version works, what is different…

Advanced Threats April 22, 2021

Internet of Threats: IoT Botnets Drive Surge in Network Attacks

6 min read - As Internet of things (IoT) devices in homes, industrial environments, transportation networks and elsewhere continue to proliferate, so does the attack surface for malicious IoT network attackers. IoT attack activity in 2020 dramatically surpassed the combined volume of IoT activity…

Intelligence & Analytics March 11, 2021

Dridex Campaign Propelled by Cutwail Botnet and Poisonous PowerShell Scripts

4 min read - IBM X-Force threat intelligence has been observing a rise in Dridex-related network attacks that are being driven by the Cutwail botnet. Dridex is delivered as a second-stage infector after an initial document or spreadsheet arrives via email with booby-trapped macros.…

Malware May 11, 2020

Zeus Sphinx Back in Business: Some Core Modifications Arise

8 min read - With Zeus Sphinx back in the financial cybercrime arena, IBM X-Force is providing a technical analysis of the Sphinx Trojan's current version, which was first released in the wild in late 2019.

May 6, 2020

New ‘Kaiji’ Linux Malware Targeting IoT Devices

2 min read - A new Linux malware strain known as "Kaiji" is targeting internet of things (IoT) devices via SSH brute-force attacks.

May 4, 2020

Weekly Security News Roundup: Shade Ransomware Authors Release 750K Decryption Keys

3 min read - The authors of Shade ransomware announced that they were releasing 750,000 decryption keys to help victims recover their files for free. Learn what else happened last week in security news.

April 29, 2020

‘Black Rose Lucy’ Malware Botnet Returns With Ransomware Capabilities

2 min read - According to security researchers, the Black Rose Lucy malware botnet has incorporated ransomware capabilities into its attack toolkit.

April 28, 2020

Attack Resources Shared by New LeetHozer Botnet and Moobot Malware

2 min read - Security researchers discovered that the new LeetHozer botnet shares some attack resources with the Moobot malware family.