December 13, 2018

CARROTBAT Malware Family Supports at Least 12 Unique Decoy Documents

2 min read - A malware family known as CARROTBAT is currently using at least 12 unique decoy documents to spread itself among unsuspecting users.

December 7, 2018

SNAKEMACKEREL Group Uses Brexit-Themed Spear Phishing Attack to Target Government Agencies

2 min read - Analysts discovered a new spear phishing attack campaign from the SNAKEMACKEREL group that uses fake Brexit-related documents to infiltrate major government agencies and steal information.

December 7, 2018

New Macro Downloaders Use PUB Files to Compromise Food and Retail Companies

2 min read - New macro downloaders are sandwiching spam and .PUB files to compromise businesses in the food and retail sector.

December 5, 2018

Threat Actors Use Malspam Campaign to Target Italian Users With sLoad Downloader

2 min read - Security researchers identified a malspam campaign targeting Italian users with a variant of the sLoad downloader.

December 3, 2018

FakeSpy And XLoader Mobile Malware May Come From Yanbian Gang

2 min read - Security researchers revealed that two mobile malware threats, Xloader and FakeSpy, may have been developed and launched by the same cybercriminal group.

November 29, 2018

Sofacy Group Targets Government Organizations With New Cannon Trojan

2 min read - The Sofacy group recently targeted several government organizations around the world with the new Cannon Trojan.

Advanced Threats November 28, 2018

Phish or Fox? A Penetration Testing Case Study From IBM X-Force Red

7 min read - The IBM X-Force Red team recently ran into trouble on a black-box penetration testing assignment. Here's how the testers overcame the obstacles to ultimately establish a solid adversarial operation.

Fraud Protection November 21, 2018

Quanto mais fácil, melhor! Um olhar detalhado aos TTPs do cibercrime financeiro no Brasil

9 min read - Este é o primeiro artigo de uma série de duas partes. Para obter a história completa, leia a parte dois também. O cibercrime financeiro no Brasil é conhecido como um dos cenários mais geoespecíficos, onde os cibercriminosos locais atacam usuários…

Retail November 21, 2018

Cyber Monday 2018: 5 Best Practices to Protect Consumer Data

4 min read - Cyber Monday 2018 is just around the corner, and customers and malicious actors alike are gearing up. Is your retail security ready to tackle e-commerce fraud and improve consumer data protection?

Fraud Protection November 21, 2018

Easy Does It! A Timely Look Into Fraud TTPs in the Brazilian Financial Cybercrime Landscape

8 min read - In this first article of a two-part series, IBM X-Force exposes some of its research on the typical malware and tactics, techniques and procedures (TTPs) used in Brazilian financial cybercrime.