Malware Campaign Uses MitM Attack to Distribute Plead Backdoor
Threat actors have launched a new malware campaign that uses an MitM attack to infect unsuspecting users with the Plead backdoor.
ScarCruft Threat Group Using Malware to Steal Information From Bluetooth Devices
An advanced persistent threat (APT) group known as ScarCruft is now using malware to steal information off of Bluetooth devices.
New DLL CryptoMix Ransomware Reportedly Using Remote Desktop Services for Installation
Security researchers discovered that a new DLL CryptoMix ransomware variant is reportedly using Windows Remote Desktop Services (RDS) to install itself on unsuspecting users' machines.
How to Defend Your Organization Against Fileless Malware Attacks
Fighting fileless malware attacks will take some serious effort and careful coordination among a variety of tools and techniques.
Researchers Uncover Highly Exploitable WinRAR Bug That Puts 500 Million Users at Risk
More than 100 unique exploits of a WinRAR bug have been identified since security researchers discovered a 19-year-old vulnerability in the file compression system.
Malicious Windows EXE Files Infect macOS Users With Infostealers and Adware
Security researchers discovered several Microsoft Windows EXE files using malicious payloads to infect macOS users with infostealers and adware.
KoffeyMaker Toolkit Used in Black Box ATM Attacks Against Eastern European Banks
In 2017 and 2018, threat actors used a toolkit called KoffeyMaker in multiple black box ATM attacks targeting Eastern European financial institutions.
Threat Actors Combine Windows Utilities in Malware Campaign Targeting Users in Brazil
Researchers observed threat actors impersonating the Brazilian postal service in a malware campaign that combines legitimate Windows files such as WMI and CertUtil to steal banking data.
New Campaign Uses RTF Files to Drop Agent Tesla Trojan and Other Malware
A new attack campaign is using Rich Text Format (RTF) files to distribute the Agent Tesla Trojan along with other malware.
DustSquad Uses Windows Trojan to Target Central Asian Officials With Octopus Malware
Researchers reported that the Octopus malware is using a Windows Trojan to target political entities based in Central Asia.