March 13, 2019

Threat Actor Targets Japanese Users With New Ursnif Variant

2 min read - Security researchers discovered an attack campaign targeting Japanese users with a new variant of Ursnif banking malware.

February 6, 2019

Geodo Botnets Using New Spam Campaign to Deliver Qakbot Malware

2 min read - Researchers discovered Geodo botnets using a new spam campaign to deliver samples of Qakbot malware.

December 20, 2018

LCG Kit Document Builder Now Using Microsoft Word Macros to Install Malware Payloads

2 min read - A weaponized document builder service known as LCG Kit added the ability to use Microsoft Word macros to load the necessary shellcode for installing malware.

November 15, 2018

Threat Actors Exploit Equation Editor to Distribute Hawkeye Keylogger

2 min read - A recent Hawkeye keylogger campaign leveraged an old Microsoft Office Equation Editor vulnerability to steal user credentials, passwords and clipboard content.

October 26, 2018

New Campaign Uses RTF Files to Drop Agent Tesla Trojan and Other Malware

< 1 min read - A new attack campaign is using Rich Text Format (RTF) files to distribute the Agent Tesla Trojan along with other malware.

October 19, 2018

New Gallmaker Attack Group Using Living-off-the-Land Tactics in Espionage Campaign

< 1 min read - A new attack group known as Gallmaker spied on military and government organizations by employing living-off-the-land tactics.

August 31, 2018

Latest Version of TrickBot Malware Uses Macro-Enabled Word Documents to Deliver New Stealth Code Injection

2 min read - The latest version of TrickBot malware leverages malicious macros to deliver stealthy code injection, fool users and compromise computers.

Fraud Protection May 1, 2018

Analyzing PDF and Office Documents Delivered Via Malspam

6 min read - Endpoint detection and antiphishing tools can help users filter basic spam email, but detecting malspam in PDF and Microsoft Office documents requires a more thorough investigation.

November 30, 2017

Older Office Cybersecurity Vulnerability Exploited by Cobalt Attackers

2 min read - Fraudsters have used the MS Office Equation Editor cybersecurity vulnerability to craft an attack on financial institutions and users.

November 16, 2017

Security Patches Help IT Managers Address Microsoft Vulnerability

2 min read - Microsoft released security patches to deal with a 17-year-old flaw that could be exploited to remotely initiate malicious code on all Windows versions.