Cybercrime & Digital Threats

For over a year, Microsoft has been monitoring a malware strain they named “Dexphot” that has been infecting Windows devices since October 2018. The malware used computer resources to mine cryptocurrency and profit from the attack.

Counterfeit apps were found carrying a new version of the Android banking trojan called Ginp to steal user login credentials and credit card details.

Amid the excitement for Black Friday, cybercriminals are rolling out schemes to trick consumers into sharing their card credentials and profiting from the shopping season.

Trickbot's password-grabbing module has been upgraded again, this time appearing to target OpenSSH and OpenVPN data.

A new botnet is being spread among Linux-based servers running the system configuration tool Webmin.

The official Monero site was found compromised after discovering a coin stealer malware in the CLI wallet that is available for download in the site. Evidence showed that the downloadable wallets were tampered with to contain the malware.

The AnteFrigus ransomware is delivered via a malvertising campaign to lure victims to the RIG exploit kit server, while the PureLocker ransomware, has been observed to launch targeted attacks against enterprise production servers.

YouTube videos were being used in a scam to deliver an information-stealing Trojan called Predator the Thief.

Another company has disclosed that that they were hit by a ransomware attack, this time involving the encryption of the customer data of SmarterASP.net, a popular hosting service provider for ASP.NET.