Malware February 5, 2020

Emotet Activity Rises as It Uses Coronavirus Scare to Infect Targets in Japan

3 min read - IBM X-Force has identified a spam campaign targeting users in Japan that employs the Coronavirus scare as a lure to encourage people to open malicious emails.

August 12, 2019

Phishing Campaign Uses DocuSign Branding, S3-Hosted Landing Page to Target Office Credentials

< 1 min read - Researchers observed a new phishing campaign that used DocuSign branding and a landing page hosted on Amazon public cloud storage (S3) to steal users' Microsoft Office credentials.

August 12, 2019

Ursnif Malware Campaign Used Multiple Anti-Analysis Tactics

2 min read - Security researchers came across a new Ursnif malware campaign that used multiple anti-analysis techniques to avoid detection.

July 17, 2019

SWEED Threat Actor Uses Typosquatting, UAC Bypasses to Distribute Agent Tesla

< 1 min read - Researchers observed a threat actor known as SWEED using typosquatting and UAC bypassing techniques to distribute Agent Tesla and other malware.

Cloud Security July 16, 2019

The Fine Art of Protecting Microsoft Office 365 Apps With Multifactor Authentication

3 min read - When it comes to protecting businesses from the growing variety of Office 365 security threats, balancing the benefits of multifactor authentication with user demands for convenience is a fine art.

Endpoint May 20, 2019

How to Fight Back Against Macro Malware

6 min read - Per X-Force IRIS, at least 22 percent of reported campaigns in April 2019 delivered macro malware. What methods can defenders leverage to help detect malicious macro activity?

May 14, 2019

Updated Version of KPOT Stealer Available for Purchase on Underground Hacking Forums

2 min read - Researchers observed cybercriminals selling an updated version of the KPOT stealer on some underground hacking forums.

May 7, 2019

Retefe Banking Trojan Returns With Smoke Loader as Its Intermediate Loader

2 min read - The Retefe banking Trojan has resumed its activity with a new series of attack campaigns that leverage Smoke Loader as an intermediate loader.

April 29, 2019

New TA505 Phishing Campaign Using LOLBins to Distribute Backdoor Malware

2 min read - A threat actor known as TA505 recently launched a phishing campaign that uses living-of-the-land binaries (LOLBins) to distribute a new backdoor malware.

April 9, 2019

Web Servers Used to Host 10 Malware Families Distributed via Phishing Emails

2 min read - Digital attackers used more than a dozen web servers to host 10 malware families and distributed those threats using phishing emails.