Necurs Downloader Takes Screen Grabs to Improve Ransomware Attacks
The cybercriminals behind the Necurs botnet are now taking screenshots of victims' machines to improve the performance of ransomware attacks.
No Macros? No Problem for New Malware Attack
Security researchers discovered a new malware attack that exploits Dynamic Data Exchange, an outdated Office feature, to infect corporate devices.
Diving Into Zberp’s Unconventional Process Injection Technique
IBM X-Force Research discovered a new variant of Zberp that evades API threat detection tools using a code injection technique it borrowed from Carberp.
Cybercrime Group FIN7 Takes Phishing Attacks to the Next Level
A cybergang known as FIN7 has been using OLE command files to spread its malware and identify potential victims for additional phishing attacks.
TrickBot Takes to Latin America, Continues to Expand Its Global Reach
The cybergang operating the TrickBot banking Trojan were unusually active over the summer, launching new campaigns in Latin America and updating its code.
What the Shell? New Security Breach Uses CHM Files to Cover Banking Trojans
A new banking Trojan is using old PowerShell tricks to hide its activity from detection tools by continually launching malicious CHM files.
POS Malware Breach Sees Payment Cards Hit Underground Shops
A popular fast-food chain and supermarket were recently breached by POS malware. Some of the credit card details had been up for sale for more than a week.
Cybercriminals Use Legitimate VMware Binary to Create New Malware Threat
Cisco Talos discovered a new banking Trojan that exploits an authentic VMware binary to hide its malicious activities from security researchers.
Malware Mines Monero on Vulnerable Servers
Security researchers reported that threat actors have been targeting vulnerable servers to mine for cryptocurrency since about May 2017.
Thermal Security Camera Flaws Could Let Cybercriminals Launch Remote Attacks
Cybercriminals could launch remote attacks through thermal security camera vulnerabilities. The flaw, first found in FLIR, could also expose other systems.