Malware February 5, 2020

Emotet Activity Rises as It Uses Coronavirus Scare to Infect Targets in Japan

3 min read - IBM X-Force has identified a spam campaign targeting users in Japan that employs the Coronavirus scare as a lure to encourage people to open malicious emails.

January 27, 2020

Weekly Security News Roundup: GDPR Fines Imposed Total €114M Thus Far

3 min read - A survey found that regulators have thus far imposed 114 million euros in fines for a variety of GDPR infringements including data breaches. Learn what else happened last week in security news.

January 21, 2020

TrickBot Uses UAC Bypass to Quietly Infect Windows 10 Machines

2 min read - Security researchers observed that TrickBot has begun using a User Account Control (UAC) bypass to quietly infect machines running Windows 10 without displaying any prompts.

December 16, 2019

BuleHero Botnet Uses Multiple Lateral Movement Modules to Drop XMRig Miner, Gh0st RAT

2 min read - The BuleHero botnet was seen using multiple modules to move laterally on a network and increase the spread of its two payloads, the XMRig miner and the Gh0st remote-access Trojan (RAT).

December 11, 2019

Fake Payroll Emails Used by Phishing Campaign to Deliver TrickBot

2 min read - A phishing campaign is using payroll-themed emails to trick users into inadvertently infecting their machines with TrickBot.

Banking & Finance December 3, 2019

TrickBot Widens Infection Campaigns in Japan Ahead of Holiday Season

4 min read - The threat group operating the TrickBot Trojan has been modifying some of the malware's modules as they continue to deploy their attacks in the wild — most recently in Japan.

November 26, 2019

Clop Ransomware Tries to Remove Malwarebytes, Native Security Tools From Infected PCs

2 min read - The newly discovered Clop ransomware attempts to remove Malwarebytes and other native security tools from the Windows machines it infects.

September 2, 2019

Weekly Security News Roundup: TrickBot Adds Capabilities to Target US Mobile Users

3 min read - Security researchers came across a new variant of TrickBot that arrived with new features allowing it to target U.S. mobile users. Learn what else happened last week in security news.

August 12, 2019

Weekly Security News Roundup: WhatsApp Flaws Let Attackers Intercept, Manipulate Messages

3 min read - The world recently learned of new WhatsApp vulnerabilities that allowed a digital attacker to intercept and manipulate messages. Learn what else happened in security news last week.

Malware August 8, 2019

The Curious Case of a Fileless TrickBot Infection

7 min read - IBM X-Force noted changes in the deployment of the TrickBot Trojan and discovered that the most recent version of the malware is fileless.