A week in security (Jan 30th – Feb 5th)

Last week, we took a look at the theories behind preventing users from clicking everything (don’t worry, you’re allowed to click that), a deep dive into Locky Bart Ransomware, and a long term drive-by download campaign. We also explored why you should care about data breaches and also released our 2016 State of Malware Report.

Elsewhere from the last week:

DRM files could be used to unmask TOR users.
WordPress “secretly” fixed an issue alongside others, in the hope that automatic updates would put paid to any residual risk to WordPress users.
Hacker Warkit Metasploit can now work on hardware such as cars.
Hack attacks are “destabilizing democracy” and nobody has the faintest idea what to do about it.
Banking keyloggers mostly originating from the US and Singapore make waves.
Pokemon GO is still a big deal, and so is lookalike Malware. Heed the warning signs.
Two arrested over claims that Ransomware was found on hacked CCTV cameras.
More Ransomware, as Ohio county Government finds itself shut down after an outbreak.
A one-two punch of CEO fraud and W-2 phishing.

Stay safe, everyone!

The Malwarebytes Lab