Credential Dumping Campaign Hits Multinational Corporations
X-Force researchers observed attackers targeting multinational corporations in various sectors using malicious scripts to automate attacks on misconfigured servers.
Cybercriminals Spoof Major Accounting and Payroll Firms in Tax Season Malware Campaigns
IBM X-Force researchers observed cybercriminals engaging in three tax-themed malware campaigns.
Buffer Overflow Vulnerability in TP-Link Routers Can Allow Remote Attackers to Take Control
IBM X-Force found a zero-day buffer overflow vulnerability in one of the most common routers on the market that could let malicious third parties take control of the device from a remote location.
Brand New Bag? TrickBot Malware Adds POS Data Collection Module
Security researchers observed TrickBot malware that utilizes a new capability: point-of-sale (POS) data collection.
Busting Cybersecurity Silos
To break down cybersecurity silos, professionals must work together to share security information and build collaborative solutions to address the evolving cybersecurity threat landscape.
IBM Security Named a Leader in IDC Incident Response MarketScape Report
This year, IDC recognized IBM X-Force Incident Response and Intelligence Services (IRIS) for effectively streamlining incident response (IR) for customers around the globe.
The Many Faces of Necurs: How the Botnet Spewed Millions of Spam Emails for Cyber Extortion
IBM X-Force researchers observed the Necurs botnet spewing millions of spam emails from more than 30,000 malicious IPs to extort bitcoin from victims who may or may not have viewed adult content.
Threat Actors Prey on Drupalgeddon Vulnerability to Mass-Compromise Websites and Underlying Servers
X-Force observed attackers using known Drupal vulnerabilities, including Drupalgeddon, to target websites and the underlying infrastructure that hosts them, leveraging Shellbot to open backdoors.
Malicious Emails Use New AdvisorsBot to Compromise Telecommunications and Hospitality Companies
A new downloader dubbed AdvisorsBot has been observed sending highly targeted malicious emails to telecommunications and hospitality companies.
What’s In a (Threat Intelligence) Name?
A lot of things in the threat intelligence world have multiple names, and these aliases often complicate the process of researching and dealing with security threats.