• This malware is associated with the attacks against the word processing application Hangul Word Processor (HWP), which is able to run PostScript code. The attacks do not involve actual exploits, the attackers instead abuse a feature of PostScript.
    Read more   

  • This malware is associated with the attacks against the word processing application Hangul Word Processor (HWP), which is able to run PostScript code. The attacks do not involve actual exploits, the attackers instead abuse a feature of PostScript.
    Read more   

  • This information stealing malware arrives as spam spoofing an invoice or payment notification. If the user clicks the URL in the email, it executes a PowerShell command that downloads EMOTET.
    Read more   

  • This information stealing malware arrives as spam spoofing an invoice or payment notification. If the user clicks the URL in the email, it executes a PowerShell command that downloads EMOTET.
    Read more   

  • This information stealing malware arrives as spam spoofing an invoice or payment notification. If the user clicks the URL in the email, it executes a PowerShell command that downloads EMOTET.
    Read more   

  • This information stealing malware arrives as spam spoofing an invoice or payment notification. If the user clicks the URL in the email, it executes a PowerShell command that downloads EMOTET.
    Read more   

  • This malware is involved in the filelessly-installed backdoor malware attack discovered early August 2017. Users affected by this malware may find their systems exhibiting malicious routines.
    Read more   

  • This malware is involved in the filelessly-installed backdoor malware attack discovered early August 2017. It is able to install a backdoor malware onto the systems it infects.
    Read more   

  • This malware is the filelessly-installed backdoor malware discovered on early August 2017. Users whose systems are affected by this particular malware may find the security of their systems compromised.
    Read more   

  • This malware is linked to the discovery of fileless crytocurrency miner TROJ64_COINMINER.QO late August 2017.
    Read more