Spam

Recently, there has been a spike in incidents involving information-stealing malware, commonly known as info-stealers, which uses cloud sharing services to attack victims. Threat actors have been leve...
Lire la suite   

The abuse of cloud sharing services such as Google Drive and Google Docs was last seen in March 2023, in which threat actors targeted Latin American countries, distributing payment-related emails cont...
Lire la suite   

Attackers have commonly use HTML attachments for phishing due to its capability of designing a webpage. They would need a webpage in order to mimic login pages of well-known companies, which in turn w...
Lire la suite   

Ever since Microsoft disabled running macros from Officefiles downloaded from the internet or email attachments, threat actors havebeen compelled to find new ways to spread malware. Such as malware, I...
Lire la suite   

Recently, we observed spam emails thattargeted users in Latin America. The emails, which were written in Spanish, informedvictims about an outstanding balance or a pending payment.
Lire la suite   

We continuously witness the evolution of QAKBOT, a sophisticated data stealer malware, come up with old and new techniques to bypass email security filters. We dive deep on this in the article 'Qakbot...
Lire la suite   

After months of hiatus, the notorious malware EMOTET has resumed its spam operations with a mixture of old and new techniques. Discovered in 2014, EMOTET began as a banking trojan that steals victims'...
Lire la suite   

Early in 2023, there started a rise of malware campaigns that used and abused Microsoft's Note-taking Application, OneNote. One of the malware families that took advantage of this time is QAKBOT, a ba...
Lire la suite   

A new malspam campaign has been discovered delivering Aurora Stealer through inquiries targeting Hotel Companies. Aurora Stealer is an information-stealer with remote access capabilities.
Lire la suite   

We observed a spam campaign that has been using Microsoft-related templates such as Office 365 and SharePoint notifications to spread new malware since September 2021. Along with usual lures like COVI...
Lire la suite