Ursnif – Computer Security Articles

Gozi V3: tracked by their own stealth

December 24, 2019 admin Gozi, ISFB, malware, SophosLabs Uncut, Ursnif, Visual Basic

Credit to Author: sophoslabsbehavioural| Date: Tue, 24 Dec 2019 09:00:32 +0000

Gozi, also known as Ursnif or ISFB, is a banking trojan which has been around for a long time and currently multiple variations of the trojan are circulating after its source code got leaked. Every variant that is distributed has interesting aspects, with Gozi version 3 the most eye-catching in the field of detection evasion. […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/LaetYrage7Q” height=”1″ width=”1″ alt=””/>

MalwareBytes Security

Spelevo exploit kit debuts new social engineering trick

December 18, 2019 admin EK, exploit kit, Gozi, malvertising, qakbot, Qbot, Social engineering, Spelevo, Threat analysis, Ursnif

Credit to Author: Jérôme Segura| Date: Wed, 18 Dec 2019 16:00:00 +0000

In order to maximize infection rate, threat actors are now launching the Spelevo exploit kit with a decoy adult site, social engineering users into downloading a malicious video player.

Categories:

Threat analysis

Tags: EK exploit kit Gozi malvertising Qakbot Qbot Social Engineering Spelevo Ursnif

Security Sophos

Emotet’s Central Position in the Malware Ecosystem

December 2, 2019 admin AZORult, bitpaymer, dridex, emotet, panda, Qbot, ryuk, SophosLabs Uncut, trickbot, Ursnif, Zeus

Credit to Author: Andrew Brandt| Date: Mon, 02 Dec 2019 14:01:28 +0000

As the world rolls into another Cyber Monday, and online shoppers continue their hunt for the best deals, SophosLabs wants to remind you that there’s a metaphorical malware elephant in the room that would like nothing more than to steal financial information, and the use of your computer, for nefarious ends. The Emotet Ecosystem infographic, […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/ItFCW7TqIXw” height=”1″ width=”1″ alt=””/>

Microsoft Security

MSRT April release features Bedep detection

January 23, 2017 admin Angler Exploit Kit, Axpergle, backdoor, Bedep, Bedep geodistribution, Dofoil, Macro-based malware, maps, Microsoft Active Protection Service, Microsoft Edge, Microsoft Edge SmartScreen protection, MSRT, smartscreen, Trojan, Ursnif, Win32/Dofoil, Win32/Fareit, Windows Defender, Windows Defender blogs for home users and small businesses, Zemot

As part of our ongoing effort to provide better malware protection, the Microsoft Malicious Software Removal Tool (MSRT) release this April will include detections for: Win32/Bedep – Trojan family Win32/Upatre – Trojan family Ransom:MSIL/Samas – Ransomware family In this blog, we’ll focus on the Bedep family of trojans. The bothersome Bedep Win32/Bedep was first…