Advanced Threats June 2, 2017

QakBot Banking Trojan Causes Massive Active Directory Lockouts

10 min read - IBM X-Force attributed a recent wave of malware-induced Active Directory (AD) lockouts across several IR engagements to the operators of the QakBot Trojan.

Malware April 27, 2017

TrickBot Is Hand-Picking Private Banks for Targets — With Redirection Attacks in Tow!

4 min read - According to IBM X-Force Research, the operators of the infamous TrickBot Trojan have been hand-picking private banks to target with redirection attacks.

Banking & Finance April 27, 2017

A Magnet for Cybercrime: Financial Services Sector

2 min read - According to the 2017 IBM X-Force Threat Intelligence Index, cybercriminals targeted the financial services sector more than any other industry in 2016.

Malware April 11, 2017

Brazilian Malware Never Sleeps: Meet EmbusteBot

5 min read - IBM Research — Haifa Labs detected yet another malware campaign, dubbed EmbusteBot, designed to target dozens of financial institutions in Brazil.

Malware March 29, 2017

Commercial Malware Makes a Comeback in 2016

8 min read - According to the IBM X-Force Threat Intelligence Index for 2017, commercial malware made a notable comeback in 2016 and remains a top threat in 2017.

Malware March 28, 2017

The NukeBot Trojan, a Bruised Ego and a Surprising Source Code Leak

4 min read - After being spurned by his cybercriminal peers on underground forums, the creator of NukeBot apparently leaked the banking Trojan's source code.

Malware March 1, 2017

GootKit Developers Dress It Up With Web Traffic Proxy

6 min read - X-Force researchers revealed the cybergang behind Gootkit had upgraded the banking Trojan with new network interception and certificate bypass methods.

Advanced Threats February 28, 2017

Dridex’s Cold War: Enter AtomBombing

9 min read - IBM X-Force researchers discovered that an upgraded version of Dridex has been using a new injection method, signifying the Trojan's continued evolution.

February 14, 2017

Lazarus-Linked Malware Targets Polish Banks

2 min read - Threat actors with apparent ties to the Lazarus cybergang launched an attack against Polish banks that may be part of a broader, global campaign.

January 30, 2017

Newly Discovered Banking Malware Creates Fresh Threat to Users

2 min read - Researchers discovered a new banking malware that targets users' sensitive information and cryptocurrency wallets through phishing emails.