Intelligence & Analytics December 30, 2021

Intelligent Adversary Engagement: Deceiving the Attacker

3 min read - Traditional security isn’t always enough to keep attackers at bay. When it comes to sneaking into networks, detection will often only come after malicious traffic reaches systems such as next-generation firewalls and intrusion detection and prevention systems. Meanwhile, threat actors…

Threat Intelligence July 18, 2019

I Can’t Believe Mirais: Tracking the Infamous IoT Malware

10 min read - Mirai malware is often perceived as a low-risk threat to enterprise security, but consumer devices in the home can expose corporate networks to botnet attacks.

April 16, 2019

Emotet Variants Hijack Existing Email Conversations to Distribute Malicious Links

2 min read - Researchers observed variants of the Emotet Trojan injecting themselves into existing email conversations as a means of distributing malicious links.

Risk Management April 5, 2019

Cryptojacking Attacks: Who’s Mining on Your Coin?

6 min read - X-Force data revealed that while browser-based cryptojacking was increasingly popular through most of 2018, cryptomining malware made a resurgence at the end of 2018 and into Q1 2019.

Malware April 4, 2019

IcedID Banking Trojan Spruces Up Injection Tactics to Add Stealth

10 min read - IBM X-Force analyzed modifications made to IcedID that help the banking Trojan act more stealthily on infected devices.

Endpoint March 15, 2019

Will We See the Rise of Vaporworms and Other New Fileless Attacks in 2019?

3 min read - The evolution of the new and difficult-to-detect category of fileless malware may soon take an insidious turn with the development of what some researchers are calling vaporworms.

Advanced Threats November 2, 2017

Injection Attacks: The Least Glamorous Attack Is One of the Most Threatening

2 min read - They may not grab the most headlines, but injection attacks are the most common threats targeting organizational networks, according to IBM MSS data.

Threat Intelligence August 30, 2017

The Educator’s Back-to-School Cybersecurity Checklist: Make Mitigating Command Injection a Priority

3 min read - To protect students, parents and teachers from data theft, academic institutions must adopt comprehensive strategies to mitigate command injection attacks.

August 14, 2017

Researchers Show Danger of DNA Data Paired With Malware-Infected Strand

2 min read - Researchers found an often overlooked vulnerability in DNA data. While uncommon, malicious code injection into synthetic DNA could be a credible threat.

Application Security December 10, 2013

A New Vulnerability in the Android Framework: Fragment Injection

6 min read - We have recently disclosed a new vulnerability to the Android Security Team. The vulnerability affected many apps, including Settings (the one that is found on every Android device), Gmail, Google Now, DropBox and Evernote. To be more accurate, any App…