Endpoint April 17, 2019

How to Defend Your Organization Against Fileless Malware Attacks

4 min read - Fighting fileless malware attacks will take some serious effort and careful coordination among a variety of tools and techniques.

March 19, 2019

Researchers Uncover Highly Exploitable WinRAR Bug That Puts 500 Million Users at Risk

2 min read - More than 100 unique exploits of a WinRAR bug have been identified since security researchers discovered a 19-year-old vulnerability in the file compression system.

February 13, 2019

Malicious Windows EXE Files Infect macOS Users With Infostealers and Adware

2 min read - Security researchers discovered several Microsoft Windows EXE files using malicious payloads to infect macOS users with infostealers and adware.

December 14, 2018

KoffeyMaker Toolkit Used in Black Box ATM Attacks Against Eastern European Banks

2 min read - In 2017 and 2018, threat actors used a toolkit called KoffeyMaker in multiple black box ATM attacks targeting Eastern European financial institutions.

November 5, 2018

Threat Actors Combine Windows Utilities in Malware Campaign Targeting Users in Brazil

2 min read - Researchers observed threat actors impersonating the Brazilian postal service in a malware campaign that combines legitimate Windows files such as WMI and CertUtil to steal banking data.

October 26, 2018

New Campaign Uses RTF Files to Drop Agent Tesla Trojan and Other Malware

< 1 min read - A new attack campaign is using Rich Text Format (RTF) files to distribute the Agent Tesla Trojan along with other malware.

October 25, 2018

DustSquad Uses Windows Trojan to Target Central Asian Officials With Octopus Malware

2 min read - Researchers reported that the Octopus malware is using a Windows Trojan to target political entities based in Central Asia.

October 19, 2018

GandCrab Partners With NTCrypt for Code Obfuscation

2 min read - A new version of GandCrab, another malware security warning. This iteration uses NTCrypt to facilitate code obfuscation and hook more potential victims.

Threat Intelligence October 12, 2018

An Increase in PowerShell Attacks: Observations From IBM X-Force IRIS

9 min read - Since the open source release of the PowerShell framework in 2016, IBM X-Force Incident Response and Intelligence Services (IRIS) has identified an upward trend in malicious PowerShell use.

September 17, 2018

Two New Monero Malware Attacks Target Windows and Android Users

2 min read - Researchers discovered two new monero malware attacks: one that targets Windows with stealthy mining operations, and another that masquerades as a Google Play Store update for Android.