TA505 Threat Group Distributes Previously Undocumented tRat Remote Access Trojan
Researchers observed the TA505 threat group spreading a previously undocumented remote access Trojan (RAT) called tRaT.
Ransomware-as-a-Service Program Offers Affiliates Up to 75 Percent of Revenue to Spread Infection
A ransomware-as-a-service program called FilesLocker offers affiliates commissions of up to 75 percent on all revenue stolen from victims.
Destructive Attacks Spike in Q3, Putting Election Security at Risk
Nearly one-third of incidents reported in Q3 were classified as "destructive attacks," according to a recent report, putting election security at risk leading up to the 2018 midterms.
Fraudsters Abuse Trusted Web Services to Conduct Phishing Attacks
Researchers reported that threat actors are using web services such as Google Drive, SharePoint and Dropbox to host files containing malicious links as part of phishing campaigns.
Threat Actors Use Delphi Packer to Shield Binaries From Malware Classification
Security researchers observed threat actors using a Delphi packer to shield their binaries from malware classification by antivirus and other detection tools.
Cobalt Gang Using CobInt Downloader to Install Malware on Systems of Interest
Security researchers observed the threat group Cobalt Gang using a downloader known as CobInt to infect and subsequently install additional malware on systems of interest.
How a Cyberattack Framework Can Help Reduce Risk at All Levels, Part 4
Even after a successful attack, security teams can still minimize the financial and reputational damage associated with a breach by following the IBM X-Force cyberattack framework.
How a Cyberattack Framework Can Help Reduce Risk at All Levels, Part 3
An attacker who gains access won't necessarily walk away with an organization's proprietary data. Here's how a cyberattack framework can help you subvert an attacker already in a network.
Threat Report Provides Evidence of Threat Actors Targeting ERP Applications
According to a new report, threat actors are targeting enterprise resource planning (ERP) applications like SAP — and, in some cases, are exploiting a vulnerability that was disclosed in 2016.
New Encrypted Downloader Leverages Old-School Macro Malware to Gain Backdoor Access
According to a recent threat advisory, cybercriminals have combined a new encrypted downloader with old-school macro malware to gain backdoor access to victims' machines.