Geodo Botnets Using New Spam Campaign to Deliver Qakbot Malware
Researchers discovered Geodo botnets using a new spam campaign to deliver samples of Qakbot malware.
LCG Kit Document Builder Now Using Microsoft Word Macros to Install Malware Payloads
A weaponized document builder service known as LCG Kit added the ability to use Microsoft Word macros to load the necessary shellcode for installing malware.
Threat Actors Exploit Equation Editor to Distribute Hawkeye Keylogger
A recent Hawkeye keylogger campaign leveraged an old Microsoft Office Equation Editor vulnerability to steal user credentials, passwords and clipboard content.
New Campaign Uses RTF Files to Drop Agent Tesla Trojan and Other Malware
A new attack campaign is using Rich Text Format (RTF) files to distribute the Agent Tesla Trojan along with other malware.
New Gallmaker Attack Group Using Living-off-the-Land Tactics in Espionage Campaign
A new attack group known as Gallmaker spied on military and government organizations by employing living-off-the-land tactics.
Latest Version of TrickBot Malware Uses Macro-Enabled Word Documents to Deliver New Stealth Code Injection
The latest version of TrickBot malware leverages malicious macros to deliver stealthy code injection, fool users and compromise computers.
Analyzing PDF and Office Documents Delivered Via Malspam
Endpoint detection and antiphishing tools can help users filter basic spam email, but detecting malspam in PDF and Microsoft Office documents requires a more thorough investigation.
Older Office Cybersecurity Vulnerability Exploited by Cobalt Attackers
Fraudsters have used the MS Office Equation Editor cybersecurity vulnerability to craft an attack on financial institutions and users.
Security Patches Help IT Managers Address Microsoft Vulnerability
Microsoft released security patches to deal with a 17-year-old flaw that could be exploited to remotely initiate malicious code on all Windows versions.
Locky Ransomware Attacks Exploit Microsoft DDE to Increase Effectiveness
The cybercriminals behind Locky ransomware have adopted a new DDE hijacking technique to infect as many victims as possible while evading detection.