Search

This information stealing malware arrives as spam spoofing an invoice or payment notification. If the user clicks the URL in the email, it executes a PowerShell command that downloads EMOTET. It then gathers information on the affected system and sen...

This ransomware arrives via spam with macro-embedded .DOC attachment, similar to the arrival of DRIDEX malware. It renames encrypted files to the format {unique ID per victim}{identifier}.locky . This Trojan may be unknowingly downloaded by a user w...