December 12, 2016

Floki Bot: Funny Name, Financial Nightmare?

2 min read - Floki Bot is more versatile than most banking Trojans because it uses spear phishing methods and the RIG exploit kit to steal credit card track data.

Banking & Finance December 1, 2016

Don’t Blink! TrickBot Now Targets 10 German Savings Banks

3 min read - IBM X-Force researchers reported that the TrickBot banking Trojan added new attack capabilities designed to target savings banks in Germany.

November 29, 2016

Backdoor Trojan Spread Via ‘Steganography’

2 min read - The backdoor Trojan known as Stegoloader infects its victims through a website offering fraudulent activation keys for pirated software.

October 25, 2016

Sphinx Trojan Command Server List Cracked

< 1 min read - The Sphinx Trojan is based on the source code of the infamous Zeus banking Trojan. First seen around August 2015, Sphinx has been upgraded with a new method of randomizing the domain names it uses for the command-and-control (C&C) servers…

Endpoint October 24, 2016

GM Bot: Alive and Upgraded, Now on Android M

3 min read - Researchers discovered a new version of banking Trojan GM Bot that enables cybercriminals to bypass security features included with Android Lollipop.

October 18, 2016

Victims of Vanity? New Android Trojan Asks for Selfies to Bypass Security

3 min read - Just when it seems like malware-makers have reached the end of their ingenuity, a new Android Trojan asks users to take selfies while holding up their IDs.

October 18, 2016

TrickBot Malware Resurrects the Ghost of Dyre

2 min read - The authors of TrickBot malware appear to have rewritten the Dyre Trojan's code, leading researchers to suggest that the same developers might be involved.

October 17, 2016

The IoT Landscape as an Attack Surface

2 min read - Malware creators often borrow ideas from each other. We have historically seen clusters of malware each trying to do something in a functionally similar way. For example, the coding may change, but it’s still an SQL injection attack at the…

October 6, 2016

Ravaging RDP Servers? Backdoor Trojan Ramps Up Enterprise Risk

2 min read - Trojan-laden malware remains a huge problem for enterprises and individual users alike. As noted by Palo Alto Networks, some cybercriminals are targeting users with creative Mac OS X malware that uses a PDF detailing Russian space program projects over the…

X-Force September 29, 2016

Protected API Calls and String Constants: Looting Dridex’s Candy Box

9 min read - Like a child hiding candy from thieving, sweet-toothed siblings, Dridex uses clever tricks to keep secrets regarding its malicious code from researchers.