Cybercrime & Digital Threats
- December 20, 2019We take a closer look at an incident involving the MyKings botnet to show how the MITRE ATT&CK framework helps with threat investigation.
- December 20, 2019The city of Frankfurt, Germany, became the latest victim of Emotet after an infection forced it to close its IT network.
Negasteal/Agent Tesla Now Gets Delivered via Removable Drives, Steals Credentials from Becky! Internet MailDecember 19, 2019We have recently spotted a Negasteal/Agent Tesla variant (detected by Trend Micro as Worm.Win32.NEGASTEAL.B) that uses a new delivery vector: removable drives.
- December 18, 2019We listed a rundown of PoCs and real-life attacks where machine learning was weaponized to get a clearer picture of what is possible and what is already a reality with regard to machine learning-powered cyberthreats.
- December 16, 2019Multiple government procurement services were targeted by a credential harvesting campaign that uses bogus pages to steal login credentials.
- December 13, 2019Researchers found hundreds of malicious Android apps to steal users' information, install adware, and access devices via excessive permissions.
- December 12, 2019Snatch ransomware is capable of forcing Windows machines to reboot into Safe Mode. Zeppelin ransomware, on the other hand, was responsible for infecting healthcare and IT organizations across Europe and the U.S.
- December 11, 2019We found new iterations of Trickbot with updates on its password-grabbing module, all targeting new apps and services.
- December 10, 2019Ryuk’s decryptor tool — provided by the threat actors behind the ransomware to victims who have paid ransom demands — could actually cause data loss instead of reinstating file access to users.