Search

Updated October 13, 2015 Online banking, while convenient and widely used, is not without its threats - and in terms of notoriety and effectiveness, DRIDEX is right up there with the worst of them.DRIDEX is one of the...

As tax season draws closer, cybercriminals are wasting no time in leveraging it. We recently spotted a DRIDEX-related spam run that pretends to come from United Kingdom’s own agency for collecting t...

DRIDEX continues to make waves with yet another invoice spam run. We recently spotted spammed emails supposedly containing an invoice. When users open the .DOC file attachment, it triggers the malic...

Subject: Fake Letter-Response email with DRIDEX attachmentDRIDEX is a notorious online banking malware that performs a plethora of information theft routines such as form-grabbing, HTML injections, and cli...

An email that poses as a notification of a possible account compromise carries an attachment that is detected as DRIDEX malware. To convince users to open the attachment, it instructs reci...

We spotted spam emails laden with DRIDEX malware that pretends to come from a British gas company. Unsuspecting users who opened the email will see an attached Word document ...

DRIDEX is a banking Trojan that was first seen in 2011 and is still in the wild up to this day. It was created from the source code of the BUGAT, also known as CRIDEX, banking Trojan. This malware arrives in a system as an email attachment or in some...

Spammers have found DRIDEX-related spammed messages leveraging the Christmas season. It appears to be an invoice from a Christmas-related decorating retailer. Upon further inve...

An email poses to be a customer statement for a payment due. The sender asks the receiver to send a payment to settle a December Invoice. Once the user opens the attached document, a malicious ma...

A new wave of DRIDEX spam run is seen in the wild. Much like its predecessor, these recent spammed messages pretend as invoice to lure the users in opening the attachment. Once the attachment is opened, it executes the...

We recently came across a spam which poses as an invoice for a certain 'Penalty Charge Notice'. Should unsuspecting users open the .DOC file attached in the said spam email, the embedded ma...

In 2015, we observed the increase of macro-based malware along with the spike in spam volume. BARTALEX macro malware, which arrived in spam emails containing attachments such as Micros...

We spotted spam mail with the subject of New Order, claiming that there's an attached invoice for a new order. The spam mail contains a .DOC file. When a user opens the said document, a macro embedded in the document tri...

Another fake online bill has been spotted and the sample we found is posing to be from a British telecommunications company. The spammed message deceives its recipients by making...

We recently came across samples of a spam campaign, this time using the disguise of a credentialing invoice advertising medical services - specifically, those pertaining to anesthesia. The body of the...

This malware is related to the DRIDEX spam runs that used financial matters as its social engineering ploy. These spam emails have Word and Excel file documents which contain the macro that downloads DRIDEX. To get a one-glance comprehensive view of...

This spyware is one of the many DRIDEX variants that have been found in spam runs in November 2015. The said spam runs were observed after the takedown of a DRIDEX botnet.To get a one-glance comprehensive view of the behavior of this Spyware, refer t...

This malware is involved in the DRIDEX malspam campaign that was spotted in early November 2014. It purports itself as a word document with malicious macro code that then downloads DRIDEX onto the affected system. Users affected by this malware may f...

Japan accounted for 12% of the total number of online banking malware detections in 3Q 2015, making it one of the top countries largely affected by banking malware. In the past, we reported threats like V...

An email poses to be a delivery note from a dry cleaning shop. This spammed message, written in German, contains an attached document. The attached document contains a malicious macro that can infect t...