Geodo Botnets Using New Spam Campaign to Deliver Qakbot Malware
Researchers discovered Geodo botnets using a new spam campaign to deliver samples of Qakbot malware.
Malspam Campaign Impersonates UK Businesses to Target Victims With Banking Trojan
Security researchers discovered a malspam campaign targeting British computer users with the Ursnif/Gozi/ISFB Trojan.
CARROTBAT Malware Family Supports at Least 12 Unique Decoy Documents
A malware family known as CARROTBAT is currently using at least 12 unique decoy documents to spread itself among unsuspecting users.
New Macro Downloaders Use PUB Files to Compromise Food and Retail Companies
New macro downloaders are sandwiching spam and .PUB files to compromise businesses in the food and retail sector.
Threat Actors Use Malspam Campaign to Target Italian Users With sLoad Downloader
Security researchers identified a malspam campaign targeting Italian users with a variant of the sLoad downloader.
Thanksgiving Spam Campaign Use Obfuscation to Deliver Emotet Banking Trojan
Bad actors recently launched a Thanksgiving-themed spam campaign that used obfuscation to deliver the Emotet banking Trojan.
Two Attack Campaigns Infect Brazilian Financial Institution Customers With Banking Trojans
Security researchers recently identified two malware distribution campaigns that infect customers of Brazilian financial institutions with banking Trojans.
Threat Actors Exploit Equation Editor to Distribute Hawkeye Keylogger
A recent Hawkeye keylogger campaign leveraged an old Microsoft Office Equation Editor vulnerability to steal user credentials, passwords and clipboard content.
NARWHAL SPIDER Uses Steganography to Deliver URLZone Malware in Cutwail Spam Campaign
A new Cutwail spam campaign is leveraging steganography — hiding data within images — to compromise devices and download URLZone.
Why You Should Practice and Drill to Prepare for a Cyber Emergency
The U.S. Fire Administration's five key components of a fire safety education program serve as a useful framework for CISOs looking to boost their company's ability to respond to a cyber emergency.