PREVIOUS
PREVIOUS
  • Trojan.PS1.POWLOAD.JKP

    This POWLOAD variant is seen distributed via spam. The spam campaign is in Italian and lures users to click by using COVID-19 in its subject.
    Read more   

  • Backdoor.SH.SHELLBOT.AA

    This backdoor comes bundled with a Monero miner, both spread by a botnet. The techniques employed are reminiscent of the Outlaw hacking group that Trend Micro reported in November 2018.
    Read more   

  • Backdoor.Win64.ANCHOR.A

    This is the Trend Micro detection for the backdoor installed by the PowerTrick post-exploitation toolkit believed to be developed by creators of Trickbot.This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
    Read more   

  • Backdoor.MSIL.REMCOS.AOJ

    This malware was seen delivered via malicious spam spoofing the brand DHL as the sender. It came as an .
    Read more   

  • Coinminer.Linux.KERBERDS.A

    This new version of KERBERDS, a known crypto-mining malware that uses an ld.so.
    Read more   

  • Trojan.SH.KERBERDS.A

    This new version of KERBERDS, a cryptomining malware that uses an ld.so.
    Read more   

  • Trojan.JS.NODSTER.A

    This malware is part of the fileless botnet Novter that is delivered via the KovCoreG malvertising campaign.This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
    Read more   

  • Trojan.JS.KOVCOREG.A

    This malware is part of the fileless botnet Novter distributed by the KovCoreG malvertising campaign.This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
    Read more   

  • Rootkit.Linux.SKIDMAP.A

    This rootkit is used by Skidmap - a Linux malware - to hide its cryptocurrency-mining abilities.This Rootkit arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
    Read more   

  • Coinminer.Win64.MALXMR.TIAOODBZ

    This miner figured in the fileless GhostMiner that uses WMI Objects. GhostMiner is known to kill competing other miner payloads.
    Read more   

PREVIOUS
PREVIOUS