How to Fight Back Against Macro Malware
Per X-Force IRIS, at least 22 percent of reported campaigns in April 2019 delivered macro malware. What methods can defenders leverage to help detect malicious macro activity?
Updated Version of KPOT Stealer Available for Purchase on Underground Hacking Forums
Researchers observed cybercriminals selling an updated version of the KPOT stealer on some underground hacking forums.
Retefe Banking Trojan Returns With Smoke Loader as Its Intermediate Loader
The Retefe banking Trojan has resumed its activity with a new series of attack campaigns that leverage Smoke Loader as an intermediate loader.
New TA505 Phishing Campaign Using LOLBins to Distribute Backdoor Malware
A threat actor known as TA505 recently launched a phishing campaign that uses living-of-the-land binaries (LOLBins) to distribute a new backdoor malware.
Web Servers Used to Host 10 Malware Families Distributed via Phishing Emails
Digital attackers used more than a dozen web servers to host 10 malware families and distributed those threats using phishing emails.
Threat Actor Targets Japanese Users With New Ursnif Variant
Security researchers discovered an attack campaign targeting Japanese users with a new variant of Ursnif banking malware.
Geodo Botnets Using New Spam Campaign to Deliver Qakbot Malware
Researchers discovered Geodo botnets using a new spam campaign to deliver samples of Qakbot malware.
LCG Kit Document Builder Now Using Microsoft Word Macros to Install Malware Payloads
A weaponized document builder service known as LCG Kit added the ability to use Microsoft Word macros to load the necessary shellcode for installing malware.
Threat Actors Exploit Equation Editor to Distribute Hawkeye Keylogger
A recent Hawkeye keylogger campaign leveraged an old Microsoft Office Equation Editor vulnerability to steal user credentials, passwords and clipboard content.
New Campaign Uses RTF Files to Drop Agent Tesla Trojan and Other Malware
A new attack campaign is using Rich Text Format (RTF) files to distribute the Agent Tesla Trojan along with other malware.