PREVIOUS
  • TSPY_BANKER.YYSI

    This threat is related to banking Trojans targeting South Korean banks that used Pinterest as their command and control (C&C) channel.To get a one-glance comprehensive view of the behavior of this Spyware, refer to the Threat Diagram shown below.
    Read more   

  • PE_URSNIF.A1

    This is the detection for the infected .MSI files related to the URSNIF variant that steals information.
    Read more   

  • PE_URSNIF.A2

    This is the detection for the infected .EXE and .
    Read more   

  • TSPY_POSLUSY.A

    This is the new POS malware family known as LusyPOS, which has similar characteristics to Dexter and Chewbacca POS malware. To get a one-glance comprehensive view of the behavior of this Spyware, refer to the Threat Diagram shown below.
    Read more   

  • BKDR_WIPALL.A

    This backdoor contains a list of user names and passwords which it uses in its attempt to grant access to the System Root folder of an infected machine. It also installs another backdoor on the system.
    Read more   

  • TROJ_REGIN.SM

    This is the Trend Micro detection for malicious files that belong to the malware family known as REGIN. REGIN is a multi-component malware that uses different files for its malicious functionalities and payload.
    Read more   

  • TROJ_REGIN.A

    REGIN is a sophisticated malware that has been used to target high profile victims. REGIN uses a variety of advanced evasion techniques.
    Read more   

  • TROJ_CRYPAURA.A

    This ransomware variant uses the text ebola as part of the extension name that it appends on the file that it encrypts.To get a one-glance comprehensive view of the behavior of this Trojan, refer to the Threat Diagram shown below.
    Read more   

  • TROJ_POWELIKS.B

    This malware employs a new autostart mechanism and removes users' privileges in viewing the registry’s content. As such, users won’t be able to suspect that their systems are already infected.
    Read more   

  • BKDR_EMDIVI.LEW

    This malware is related to a cyberespionage campaign that uses an Ichitaro zero-day vulnerability, or the Multiple Ichitaro Products Unspecified Remote Code Execution Vulnerability (CVE-2014-7247)To get a one-glance comprehensive view of the behavior of this Backdoor, refer to the Threat Diagram shown below.This backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
    Read more   

PREVIOUS