Threat Intelligence July 14, 2023

BlotchyQuasar: X-Force Hive0129 targeting financial institutions in LATAM with a custom banking trojan

16 min read - In late April through May 2023, IBM Security X-Force found several phishing emails leading to packed executable files delivering malware we have named BlotchyQuasar, likely developed by a group X-Force tracks as Hive0129. BlotchyQuasar is hardcoded to collect credentials from…

Banking & Finance May 3, 2022

SEC Proposes New Cybersecurity Rules for Financial Services

4 min read - Proposed new policies from the Securities and Exchange Commission (SEC) could spell changes for how financial services firms handle cybersecurity. On Feb. 9, the SEC voted to propose cybersecurity risk management policies for registered investment advisers, registered investment companies and…

Banking & Finance March 31, 2022

2022 Banking & Finance Security Intelligence Roundup

3 min read - The banking and finance industries deliver more services online now than ever before due to the pandemic. As a result, banking cybersecurity became more important than ever this year. Some of the threats to big data security in recent years…

Malware November 17, 2021

BrazKing Android Malware Upgraded and Targeting Brazilian Banks

12 min read - Nethanella Messer and James Kilner contributed to the technical editing of this blog. IBM Trusteer researchers continually analyze financial fraud attacks in the online realms. In recent research into mobile banking malware, we delved into the BrazKing malware’s inner workings…

Banking & Finance April 25, 2021

Self-Assessment: How Can You Improve Financial Services Cybersecurity?

6 min read - It’s common knowledge that threat actors target banks. Not only might these attackers want to directly steal money, by doing this they’re also hitting the customers and the trust in the bank. If a financial institution suffers a loss, even insurance…

Threat Intelligence March 31, 2021

Threat actors’ most targeted industries in 2020: Finance, manufacturing and energy

7 min read - IBM Security’s annual X-Force Threat Intelligence Index uses data derived from across our teams and managed customers to gather insights about the topmost targeted industries every year, helping organizations manage risk and resource investment in their security programs. When it…

Advanced Threats July 28, 2020

Darknet Cybersecurity: How Finance Institutions Can Defend Themselves

4 min read - Financial firms continue to move to digital-first deployments, as retail branches close, and people shift to remote work. This shift makes understanding and preventing even common darknet, or dark web, threats a priority. Financial cybersecurity investment institutions need to understand…

July 28, 2020

Emotet Returns With Old Tricks, Malware Partners

3 min read - A malspam campaign involving Emotet saw a resurgence after five months of laying low, Malwarebytes detected on Friday, July 17. This operation used the well-known method of sending attack emails as a reply within an existing email thread. From there,…

Advanced Threats April 7, 2020

ITG08 (aka FIN6) Partners With TrickBot Gang, Uses Anchor Framework

6 min read - Financially motivated, adaptable, sophisticated and persistent, the ITG08 threat group is likely to remain one of the most potent cybercriminal groups in this new decade.

Malware August 8, 2019

The Curious Case of a Fileless TrickBot Infection

7 min read - IBM X-Force noted changes in the deployment of the TrickBot Trojan and discovered that the most recent version of the malware is fileless.