September 9, 2019

New GootKit Malware Sample Evades Detection With Path Exclusion

2 min read - A new sample of the GootKit malware family evaded detection from Windows Defender by setting a path exclusion.

September 2, 2019

Weekly Security News Roundup: TrickBot Adds Capabilities to Target US Mobile Users

3 min read - Security researchers came across a new variant of TrickBot that arrived with new features allowing it to target U.S. mobile users. Learn what else happened last week in security news.

August 28, 2019

Android App Potentially Served Trojan to 100 Million+ Google Play Users

2 min read - A PDF creator app potentially served a Trojan to more than 100 million Android users via downloads on the Google Play store.

August 20, 2019

Attackers Spread Bolik Banking Trojan Disguised as a Reputable VPN App

2 min read - Threat actors are spreading around samples of the Bolik banking Trojan family disguised as a reputable virtual private network (VPN) app.

August 19, 2019

Weekly Security News Roundup: Cerberus Trojan Arrives on Underground Forums

3 min read - Last week in security news, researchers spotted threat actors renting out an Android Trojan called Cerberus on underground forums.

August 12, 2019

Ursnif Malware Campaign Used Multiple Anti-Analysis Tactics

2 min read - Security researchers came across a new Ursnif malware campaign that used multiple anti-analysis techniques to avoid detection.

August 6, 2019

SystemBC Malware Using SOCKS5 Proxies to Mask Traffic for Attack Infrastructure

2 min read - A new proxy malware called SystemBC is using SOCKS5 proxies to mask traffic for command-and-control (C&C) infrastructure involved in banking Trojan attacks.

July 9, 2019

TA505 Delivers New Gelup Malware Tool, FlowerPippi Backdoor Via Spam Campaign

2 min read - Researchers observed the TA505 threat group using spam campaigns to deliver two new payloads: the Gelup malware tool and the FlowerPippi backdoor.

Malware July 9, 2019

Taking Over the Overlay: Reconstructing a Brazilian Remote Access Trojan (RAT)

4 min read - IBM X-Force researchers detected, reverse engineered, reconstructed and simulated a Delphi-based Brazilian remote access Trojan.

July 3, 2019

Godlua Backdoor Capable of Performing DDoS Attacks

2 min read - Both versions of the Godlua backdoor, discovered in late April, are capable of performing distributed denial-of-service (DDoS) attacks, according to a new report.