svchost.exe – Computer Security Articles

MalwareBytes Security

What’s new in TrickBot? Deobfuscating elements

November 12, 2018 admin BotKey, gandcrab, gandcrab ransomware, IFL plugin, Malwarebytes news, pkcs11.txt, Powershell, profiles.ini, SecurityPreloadState.txt, svchost, svchost.exe, trickbot, trickbot_config_decoder.py, Trojan.TrickBot, XOR layer

Credit to Author: hasherezade| Date: Mon, 12 Nov 2018 15:00:22 +0000

Trojan.TrickBot has been present in the threat landscape from quite a while. We wrote about its first version in October 2016. From the beginning, it was a well organized modular malware, written by developers with mature skills. It is often called a banker, however its modular structure allows to freely add new functionalities without modifying…

Categories:

Malwarebytes news

Tags: BotKey gandcrab gandcrab ransomware IFL plugin pkcs11.txt powershell profiles.ini SecurityPreloadState.txt svchost svchost.exe trickbot trickbot_config_decoder.py Trojan.TrickBot XOR layer

(Read more…)

The post What’s new in TrickBot? Deobfuscating elements appeared first on Malwarebytes Labs.

MalwareBytes Security

Drive-by download campaign targets Chinese websites, experiments with exploits

February 22, 2018 admin Chinese, coinhive, drive-by, EK, exploit kit, Exploits, Flash Player, Internet Explorer, svchost.exe, Threat analysis

Credit to Author: Jérôme Segura| Date: Thu, 22 Feb 2018 16:00:00 +0000

This custom made drive-by download attack targets some Chinese websites and their visitors while experimenting with exploits.

Categories:

Threat analysis

Tags: Chinese coinhive drive-by EK exploit kit exploits Flash Player Internet Explorer svchost.exe

(Read more…)

The post Drive-by download campaign targets Chinese websites, experiments with exploits appeared first on Malwarebytes Labs.