BackSwap Malware Now Targets Six Banks in Spain
IBM X-Force researchers discovered that BackSwap, a banking Trojan that had previously only targeted Polish banks, now has its sights set on six banks in Spain.
TrickBot’s Cryptocurrency Hunger: Tricking the Bitcoin Out of Wallets
TrickBot is getting in on the cryptocurrency gold rush, expanding its operations to target digital wallets and exchanges using serverside injections and other malicious tactics.
New Banking Trojan IcedID Discovered by IBM X-Force Research
IBM X-Force identified a new Trojan, dubbed IcedID, that uses advanced browser manipulation tactics to target financial institutions in the U.S. and U.K.
Diving Into Zberp’s Unconventional Process Injection Technique
IBM X-Force Research discovered a new variant of Zberp that evades API threat detection tools using a code injection technique it borrowed from Carberp.
The Educator’s Back-to-School Cybersecurity Checklist: Make Mitigating Command Injection a Priority
To protect students, parents and teachers from data theft, academic institutions must adopt comprehensive strategies to mitigate command injection attacks.
A Primer on Cross-Site Scripting (XSS)
XSS is a prevalent web-based exploit in which threat actors inject malicious code into webpages to compromise data or facilitate phishing scams.
Zeus Sphinx Pushes Empty Configuration Files — What Has the Sphinx Got Cooking?
Amid a period of targetless activity, IBM X-Force researchers are wondering where the operators behind the Zeus Sphinx Trojan are planning to strike next.
Dark Web Suppliers and Organized Cybercrime Gigs
Suppliers offering cybercrime-as-a-service on the Dark Web are helping organized groups achieve more effective bank fraud schemes.
UK Banks Hit With New Zeus Sphinx Variant and Renewed Kronos Banking Trojan Attacks
IBM Security X-Force researchers have discovered instances of the Kronos banking Trojan and Zeus Sphinx malware being used by cybercriminals in the wild.
NOMORE Attack Method Shows RC4 May No Longer Be a Reliable Way to Encrypt Data
Researchers say it may be time to look beyond the RC4 algorithm to secure Web connections after they discovered an attack method called NOMORE.