Intelligence & Analytics September 1, 2022

Raspberry Robin and Dridex: Two Birds of a Feather

8 min read - IBM Security Managed Detection and Response (MDR) observations coupled with IBM Security X-Force malware research sheds additional light on the mysterious objectives of the operators behind the Raspberry Robin worm. Based on a comparative analysis between a downloaded Raspberry Robin…

Intelligence & Analytics March 11, 2021

Dridex Campaign Propelled by Cutwail Botnet and Poisonous PowerShell Scripts

4 min read - IBM X-Force threat intelligence has been observing a rise in Dridex-related network attacks that are being driven by the Cutwail botnet. Dridex is delivered as a second-stage infector after an initial document or spreadsheet arrives via email with booby-trapped macros.…

Malware February 18, 2020

Banking Trojans and Ransomware — A Treacherous Matrimony Bound to Get Worse

6 min read - To combat the threat of banking Trojans and ransomware, organizations should stay up to date with the rapidly evolving threat landscape by utilizing the latest threat intelligence.

October 7, 2019

Weekly Security News Roundup: eGobbler Exploits Browser Bugs to Infect More Than 1 Billion Ads

3 min read - Researchers unveiled how a malvertising actor known as eGobbler exploited browser bugs to infect more than 1 billion ad impressions. Read on to learn what else happened last week in security news.

July 15, 2019

Weekly Security News Roundup: Zero-Day Vulnerability Exploited in Buhtrap Attack Campaign

3 min read - Last week, security researchers identified a zero-day vulnerability that was instrumental in a targeted attack against companies in Eastern Europe.

July 1, 2019

Attack Campaign Leverages B2B Site to Distribute New Spelevo Exploit Kit

2 min read - A recent attack campaign leveraged a business-to-business (B2B) website to distribute a new exploit kit named Spelevo.

April 18, 2019

Attackers Compromise Admin Account to Infect Manufacturing Company With BitPaymer Ransomware

2 min read - Threat actors compromised an account with administrator privileges to infect a manufacturing company with BitPaymer ransomware.

April 9, 2019

Web Servers Used to Host 10 Malware Families Distributed via Phishing Emails

2 min read - Digital attackers used more than a dozen web servers to host 10 malware families and distributed those threats using phishing emails.

Malware March 20, 2019

The Business of Organized Cybercrime: Rising Intergang Collaboration in 2018

9 min read - In 2018, IBM X-Force researchers observed organized cybercrime groups collaborating, rather than competing over turf or even attacking each other, for the first time.

Banking & Finance April 18, 2018

Q1 2018 Results: Gozi (Ursnif) Takes Larger Piece of the Pie and Distributes IcedID

3 min read - Gozi took a larger slice of the financial malware pie and become the most active banking Trojan in 2017, according to the IBM X-Force Threat Intelligence Index 2018.