Trick Bot – Dyreza’s successor
2016-10-26
Recently, our analyst Jérôme Segura captured an interesting payload in the wild. It turned out to be a new bot, that, at the moment of the analysis, hadn’t been described yet.Read More →
Middle Eastern hackers are using this phishing technique to infect political targets with Trojan malware
2016-10-26
‘Moonlight’ group is likely to be involved in cyberespionage, warns Vectra Networks. A hacking group is conducting cyberespionage against targets in the Middle East by duping politicians, activists and staffRead More →
Hacking Mac With EmPyre
2016-10-25
I am the stereotypical Apple fan boy that other bloggers write about. We have MacBook Pro’s, Air’s, Apple TV’s, iPhone’s and iPad’s and even subscribe to Apple Music. You literally couldn’tRead More →
Android phones rooted by “most serious” Linux escalation bug ever
2016-10-25
New rooting technique is believed to work against every version. There’s a new method for rooting Android devices that’s believed to work reliably on every version of the mobile operating systemRead More →
Locky Ransomware’s new .SHIT Extension shows that you can’t Polish a Turd
2016-10-25
To further show how ransomware is such a pile of crap, a new version of Locky has been released that appends the .shit extension on encrypted files. Like previous variants, this ransomware is installed usingRead More →
Cracking of Sphinx Trojan DGA Opens the Door for Botnet Takedown
2016-10-24
This post takes a quick look at Sphinx’s domain generation algorithm (DGA). Sphinx,another Zeus-based banking trojan variant, has been around circa August 2015. The DGA domains are used as aRead More →
24 hours in the life of my home router by Francisco J. Rodriguez
2016-10-24
Recently a massive DDoS attack has disconnected a large portion of users from the Internet, hackers exploited IoT devices. Is your router secure? “Are we ready to live in a worldRead More →
FakeFile Trojan Opens Backdoors on Linux Computers, Except openSUSE
2016-10-22
Trojan targets desktops, not servers or IoT devices. Malware authors are taking aim at Linux computers, more precisely desktops and not servers, with a new trojan named FakeFile, currently distributed inRead More →
In-Development Ransomware Encrypts while Pretending to be a Click Me Game
2016-10-20
Yesterday, GData malware analyst Karsten Hahn discovered an in-development ransomware disguised as a click me game. When executed the ransomware will launch a screen that contains a Click Me button that a userRead More →
“O’zapft is!”: Cyber criminals tap into German-speaking targets in time for Oktoberfest
2016-10-20
“Common sense” is an oft-prescribed remedy for email-based malware threats: Don’t click on unknown links, don’t enable macros in documents from unknown senders, don’t even read emails from unknown senders.Read More →
