Forecasting a Breach Is Like Finding a Needle in a Haystack — Not That Tough
Forecasting a data breach doesn't have to be difficult. With the help of threat intelligence and collaboration, organizations can spot vulnerabilities.
An Overnight Sensation — CoreBot Returns as a Full-Fledged Financial Malware
CoreBot's developers have evolved the malware into a full-fledged banking Trojan that executes a variety of attacks to steal victims' bank credentials.
Certificates-as-a-Service? Code Signing Certs Become Popular Cybercrime Commodity
IBM Security X-Force researchers recently uncovered a new trend dominating the cybercrime underground: the sale of stolen or fraudulent certificates.
Markdown: Designer Vulnerabilities Get a Fresh CVSS v3 Look
The Common Vulnerability Scoring System (CVSS) has been completely redone to more accurately reflect the scope and impact of vulnerabilities.
An Example of Common String and Payload Obfuscation Techniques in Malware
IBM X-Force researcher Igor Aronov examines some common techniques used by malware authors to complicate dynamic (automated) and static (manual) analysis.
The Myth of the Obvious Malware
Malware doesn't present itself like it's often depicted in the movies, so it's up to enterprises to be on the lookout for these stealthy programs.
Shifu: ‘Masterful’ New Banking Trojan Is Attacking 14 Japanese Banks
A brand -ew advanced banking Trojan discovered in the wild has been named Shifu by IBM Security X-Force, after the Japanese word for thief.
Watch Out for CoreBot, New Stealer in the Wild
IBM Security X-Force researchers recently discovered CoreBot, a seemingly generic malware that actually operates on a highly sophisticated level.
The Myth of the Omnipotent Hacker
The way movies and television shows portray a hacker is far off from reality. In today's collaborative world, attackers are often working in crime rings.
Anonymity and Cryptocurrencies Enabling High-Stakes Extortion
The third 2015 IBM X-Force Threat Intelligence Quarterly has been released, detailing the evolution of ransomware, anonymous routers and more.