Threat Hunting January 21, 2020

New NetWire RAT Campaigns Use IMG Attachments to Deliver Malware Targeting Enterprise Users

3 min read - IBM X-Force researchers have discovered a new campaign targeting organizations with fake business emails that deliver NetWire remote-access Trojan (RAT) variants.

Advanced Threats January 17, 2020

Enter Dustman: New Wiper Takes After ZeroCleare, Likely Targets Organizations in Region

7 min read - To understand the similarities between ZeroCleare and Dustman, IBM X-Force researchers took a closer look at their code and the files being used in attacks.

Advanced Threats January 8, 2020

From Mega to Giga: Cross-Version Comparison of Top MegaCortex Modifications

9 min read - MegaCortex seems to be looking for ways to improve, and with each version upgrading the previous release's functions, our team took a closer look at some of the highlights.

Cloud Security January 7, 2020

Containers in the Cloud: False Assumptions and Security Challenges

4 min read - Strengthening container security in the cloud starts with addressing the misconception that containers automatically provide security for the applications inside them.

Endpoint December 31, 2019

How to Identify, Prioritize and Remediate Your Biggest Security Vulnerabilities

3 min read - By prioritizing security vulnerabilities based on weaponization and asset value, you can address them in manageable workloads and remediate the most critical ones first.

Data Protection December 24, 2019

The Uncommon Becomes Ordinary: 4 Trends That Defined Data Breaches in 2019

3 min read - Four trends defined data breaches in 2019: million-record breaches, pinpoint ransomware attacks, data left exposed on cloud servers and the struggle of cryptocurrencies to go mainstream.

Advanced Threats December 17, 2019

IBM X-Force Security Predictions for 2020

4 min read - Experts from IBM X-Force reflect on the past year and also share security predictions for 2020, including evolutions in ransomware, AI adoption and targets for cybercriminals.

December 16, 2019

BuleHero Botnet Uses Multiple Lateral Movement Modules to Drop XMRig Miner, Gh0st RAT

2 min read - The BuleHero botnet was seen using multiple modules to move laterally on a network and increase the spread of its two payloads, the XMRig miner and the Gh0st remote-access Trojan (RAT).

Software Vulnerabilities December 16, 2019

TP-Link Archer Router Vulnerability Voids Admin Password, Can Allow Remote Takeover

7 min read - If exploited, this router vulnerability can allow a remote attacker to take control of the router's configuration without authentication, putting personal and business data at risk.

December 11, 2019

HawkEye Keylogger Acts as First-Stage Loader for Cryptocurrency Miner

2 min read - Researchers observed the HawkEye keylogger acting as the first-stage downloader for a cryptocurrency miner in a new phishing campaign.