Malware July 19, 2017

TrickBot Habla Español: Trojan Widens Its Attack Scope in Spain, Brings Redirection Attacks to Local Banks

3 min read - The TrickBot Trojan has been steadily ramping up its activity this year, going into a rather intensive period of updates and attacks that started in Q2.

July 17, 2017

New Malware Gets Stronger by Using Real Apps in Banking Attacks

2 min read - New malware is infiltrating bona fide apps, making banking Trojans harder to detect. Fortunately, it can be shut down if it is detected in time.

Malware June 20, 2017

TrickBot Spreads to the Nordics, Launches Redirection Attacks in France

5 min read - The TrickBot Trojan, which recently tested redirection attacks in France, expanded its list of targets to include banks in Sweden and other Nordic areas.

Malware June 15, 2017

Zeus Sphinx Pushes Empty Configuration Files — What Has the Sphinx Got Cooking?

3 min read - Amid a period of targetless activity, IBM X-Force researchers are wondering where the operators behind the Zeus Sphinx Trojan are planning to strike next.

June 13, 2017

New Linux Trojan Discovery Unveils Cryptomining in Raspberry Pi and Identity Cloaking Efforts

2 min read - Two new linux Trojan strains have been discovered: One attempts to mine cryptocurrency, while the other cloaks the threat actor's identity.

Advanced Threats June 2, 2017

QakBot Banking Trojan Causes Massive Active Directory Lockouts

10 min read - IBM X-Force attributed a recent wave of malware-induced Active Directory (AD) lockouts across several IR engagements to the operators of the QakBot Trojan.

Malware May 23, 2017

GootKit Malvertising Brings Redirection Attacks to Italian Banks

4 min read - The cybergang behind GootKit followed up its recent U.K. activity by launching redirection attacks at Italian banking services.

Malware May 11, 2017

GootKit Launches Redirection Attacks in the UK

4 min read - X-Force researchers discovered that the cybergang behind the GootKit banking Trojan recently began launching redirection attacks in the U.K.

Malware May 4, 2017

Neverquest Gang Takes Leave — Is It the End of the Quest?

5 min read - IBM X-Force researchers recently observed a massive drop in Neverquest malware campaigns. Is it the end of an era for this Trojan?

Malware March 28, 2017

The NukeBot Trojan, a Bruised Ego and a Surprising Source Code Leak

4 min read - After being spurned by his cybercriminal peers on underground forums, the creator of NukeBot apparently leaked the banking Trojan's source code.