Malware

BKDR_KULUOZ.VLU

This malicious file is downloaded from cloaked URLs in spammed emails related to fake Viber applicationsThis Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.It executes commands from a remote malicious user, effectively compromising the affected system.
Read more   

ADW_INSTALLREX

This malware disguises itself as FIFA 14-CrackV5. A World Cup-related search can lead users to a supposed key generator for the game FIFA 14.
Read more   

BKDR_KULUOZ.VLT

This malicious file is downloaded from a spammed email related to news about the South China's Guangzhou Railway Station.This backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
Read more   

BKDR_BLADABIN.AB

This malware is involved in a socially-engineered attack tailored to take advantage of the upcoming FIFA 2014 World Cup in Brazil. As it exhibits backdoor routines, users affected by this malware may find the security of their systems compromised.
Read more   

TSPY_USTEAL.USRJ

This USTEAL variant drops a ransomware detected as TROJ_RANSOM.SMAR, which is created by a new toolkit builder.
Read more   

TROJ_RANSOM.SMAR

This malware is the final payload of a USTEAL variant that was reported on late April 2014. It encrypts certain files detected on the affected system and demands the user pay the ransom to have them restored.
Read more   

SWF_EXPLOIT.RWF

This malicious Adobe Flash file is related to the Adobe zero-day vulnerability, <i><a href="http://about-threats.trendmicro.
Read more   

TROJ_SHESDE.E

This malware uses the exploit targeting (MS13-022) Vulnerability in Silverlight Could Allow Remote Code Execution (2814124) vulnerability. The said exploit was found to be the payload of a series of redirections that started from a website on how to avoid income tax in Canada.
Read more   

TROJ_UPATRE.YQU

It is a malicious attachment related to a tax-themed spam campaign. The malware connects to malicious URLs to download an encrypted version of a ZBOT variant, which disables the antivirus products installed in the system.
Read more   

JS_SHESDE.E

This malware exploits the (MS13-022) Vulnerability in Silverlight Could Allow Remote Code Execution (2814124) vulnerability to run malicious code on a system through a specially-crafted app. To get a one-glance comprehensive view of the behavior of this Trojan, refer to the Threat Diagram shown below.
Read more