Search

This Trojan may be hosted on a website and run when a user accesses the said website.

This is the Trend Micro generic detection for threat with callback behavior. Callback is a type of network behavior usually sent by threats for collecting feedback data or controlling threats remotely. It is commonly used in Trojan, botnet, or backdo...

This is the Trend Micro generic detection for threat with callback behavior. Callback is a type of network behavior usually sent by threats for collecting feedback data or controlling threats remotely. It is commonly used in Trojan, botnet, or backdo...

Ransomware is a common malicious attachment found in spam mail campaigns. In this particular instance, we found samples of two new spam campaigns sporting Locky ransom...

Callback is a type of network behavior usually sent by threats for collecting feedback data or controlling threats remotely. It is commonly used in Trojan, botnet, or backdoor routines. Advanced threats used in targeted attacks use callback features ...

While the pandemic continues to affect millions of lives, spammers have continued to use COVID-19 as subject to lure recipients. In a campaign we have observed from March to June 2020, spammers a...

FAREIT was discovered in 2012 and has been undergoing changes to bypass anti-virus detection. It is now one of the most successful information stealers deployed in spam campaigns. The source code of the malware has been leaked publicly, enabling cybe...

This malware can be found in some malicious apps that used to be available on Google Play. The app targeted Arabic-speaking users in the Middle East. It is capable of cyberespionage techniques such as recording data, stealing information, sending in...

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It executes commands from a remote malicious user, effectively compromising the affected system.

This Trojan may be hosted on a website and run when a user accesses the said website.

This Trojan Spy arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It retrieves specific information from the affected system.

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It may be hosted on a website and run when a user accesses the said website. It executes commands from a...

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It may be hosted on a website and run when a user accesses the said website. It executes commands from a...

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It may be hosted on a website and run when a user accesses the said website. It executes commands from a...

This Ransomware encrypts files with specific file extensions. It encrypts files found in specific folders. It drops files as ransom note.

This Trojan Spy arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It reads its configuration file that contains commands and data to be sent to a remote server. It conn...

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

A new malspam campaign has been discovered delivering Aurora Stealer through inquiries targeting Hotel Companies. Aurora Stealer is an information-stealer with remote access capabilities. The email deceives it...

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It does not have any propagation routine. It executes commands from a remote malicious user, effectively...

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It executes commands from a remote malicious user, effectively compromising the affected system.