SophosLabs Uncut – Page 10 – Computer Security Articles

Emotet 101, stage 1: The spam lure

March 5, 2019 admin 101, Bot, emotet, maldocs, malspam, malware, payload, PDF, Sophos101, SophosLabs, SophosLabs Uncut, spam, Word, XML

Credit to Author: Andrew Brandt| Date: Tue, 05 Mar 2019 13:55:43 +0000

By SophosLabs Research Emotet operates on a mass scale. Everything it does, it does in bulk. A typical infection begins when the victim receives a specially crafted spam email. Emotet’s creators send these out by the thousands and, in some cases, the bots themselves send more. The lures employ mass-created malicious document files. The payload […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/7i2oOO4OT8A” height=”1″ width=”1″ alt=””/>

Security Sophos

Automated Android attacks deliver “UFO” cryptominer Trojan

February 26, 2019 admin Android, cryptocurrency, cryptomining, malware, miner, Mobile, SophosLabs Uncut, UFO

Credit to Author: Andrew Brandt| Date: Tue, 26 Feb 2019 16:00:23 +0000

A persistent attack against Android devices is on the rise and gaining traction with the criminals who do this sort of thing<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/zu19kgWwZIw” height=”1″ width=”1″ alt=””/>

Security Sophos

Special report: Sophisticated ad fraud permeates the mobile app ecosystem

February 26, 2019 admin ad fraud, advertising, Cheetah Mobile, clickfraud, GOMO, Kika Tech, Mobile, SophosLabs Uncut

Credit to Author: Rowland Yu| Date: Tue, 26 Feb 2019 08:01:54 +0000

Fraudulent use of advertising networks has become an endemic problem that has societal impact<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/Ie7xxbLk32g” height=”1″ width=”1″ alt=””/>

Security Sophos

Abusive mobile adware aggressively touts…more adware

February 21, 2019 admin SophosLabs Uncut

Credit to Author: Jagadeesh Chandraiah| Date: Thu, 21 Feb 2019 17:00:42 +0000

Mobile adware may not be as immediately harmful (and may not attract as much attention) as mobile malware, but that doesn’t make this nuisance category of software any less disruptive. SophosLabs took another look at a network of adware apps (first referenced in a report from Trend Micro) that managed to evade Google Play Market […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/8azL8-VxFqo” height=”1″ width=”1″ alt=””/>

Security Sophos

Old Phantom Crypter upends malicious document tools

February 14, 2019 admin builder, crypter, maldoc, Phantom, SophosLabs Uncut

Credit to Author: Gabor Szappanos| Date: Thu, 14 Feb 2019 15:10:42 +0000

As the new year began, the makers of tools that generate the malicious documents used in social engineering spam attacks threw out the rule book and started fresh with an entirely new batch of Office exploits<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/l3gQLk92YYk” height=”1″ width=”1″ alt=””/>

Security Sophos

Looking back on BlackHoodie, a women’s-only reverse engineering conference

February 7, 2019 admin SophosLabs Uncut

Credit to Author: lucanagysophos| Date: Thu, 07 Feb 2019 20:46:02 +0000

Malware reverse-engineer Luca Nagy reflects on her experiences attending a unique technical conference<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/MEeAGDh_ar8″ height=”1″ width=”1″ alt=””/>

Security Sophos

Matrix: Targeted, small-scale, canary in the coal mine ransomware

January 30, 2019 admin Matrix, ransomware, SophosLabs Uncut

Credit to Author: Andrew Brandt| Date: Wed, 30 Jan 2019 18:00:08 +0000

Two years on, Matrix is still like a rough first draft of a targeted ransomware, but that doesn’t mean you can ignore it<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/Dv_fp4aEno4″ height=”1″ width=”1″ alt=””/>

Security Sophos

DHCP, Edge, Office, Hyper-V Receive Critical New Year Updates

January 28, 2019 admin DHCP, Edge, Hyper-V, microsoft, Patch Tuesday, SophosLabs Uncut

Credit to Author: Andrew Brandt| Date: Mon, 28 Jan 2019 17:30:52 +0000

Just connecting to a (malicious) wireless network could lead to Bad Things Happening, but none of the patched bugs have been seen in the wild (yet!)<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/a-RO7S2VeRA” height=”1″ width=”1″ alt=””/>