Search

This spyware is one of the many DRIDEX variants that have been found in spam runs in November 2015. The said spam runs were observed after the takedown of a DRIDEX botnet.To get a one-glance comprehensive view of the behavior of this Trojan, refer to...

This information stealing malware arrives as spam spoofing an invoice or payment notification. If the user clicks the URL in the email, it executes a PowerShell command that downloads EMOTET. It then gathers information on the affected system and sen...

This malware is attached in spammed mail. It downloads other malware such as LOCKY ransomware and DRIDEX malware.This Trojan arrives as an attachment to email messages spammed by other malware/grayware or malicious users.It executes the downloaded f...

This information stealing malware arrives as spam spoofing an invoice or payment notification. If the user clicks the URL in the email, it executes a PowerShell command that downloads EMOTET. It then gathers information on the affected system and sen...

This information stealing malware arrives as spam spoofing an invoice or payment notification. If the user clicks the URL in the email, it executes a PowerShell command that downloads EMOTET. It then gathers information on the affected system and sen...

This information stealing malware arrives as spam spoofing an invoice or payment notification. If the user clicks the URL in the email, it executes a PowerShell command that downloads EMOTET. It then gathers information on the affected system and sen...

This ransomware arrives via spam with macro-embedded .DOC attachment, similar to the arrival of DRIDEX malware.It renames encrypted files to the format {unique ID per victim}{identifier}.locky. This Trojan may be unknowingly downloaded by a user whi...