macro – Computer Security Articles

MalwareBytes Security

Beware: Fake IRS tax email delivers Emotet malware

March 23, 2023 admin document, email, emotet, irs, macro, macros, malware, news, SCAM, w-9, Word

Categories: News

Tags: emotet

Tags: malware

Tags: IRS

Tags: scam

Tags: email

Tags: W-9

Tags: word

Tags: document

Tags: macro

Tags: macros

We look at a current tax scam in circulation which looks to make an Emotet deposit on your PC.

(Read more…)

The post Beware: Fake IRS tax email delivers Emotet malware appeared first on Malwarebytes Labs.

MalwareBytes Security

APT36 jumps on the coronavirus bandwagon, delivers Crimson RAT

March 17, 2020 admin APT, apt36, coronavirus, coronavirus malware, covid-19, credential stealer, crimson rat, exploit, Exploits, info-stealer, macro, malicious macro, malware, nation-state attack, Rat, remote administration tool, Social engineering, spear phishing, spear phishing attack, Threat analysis, transparent tribe

Credit to Author: Threat Intelligence Team| Date: Mon, 16 Mar 2020 15:00:00 +0000

We look at a spear phishing attack from APT36, an Advanced Persistent Threat group posing as the government of India and offering guidance on coronavirus. Instead, users are infected with a Crimson RAT that steals data.

Categories:

Threat analysis

Tags: APT APT36 coronavirus coronavirus malware covid-19 credential stealer crimson rat exploit exploits info-stealer macro malicious macro malware nation-state attack rat remote administration tool Social Engineering spear phishing spear phishing attack transparent tribe

(Read more…)

The post APT36 jumps on the coronavirus bandwagon, delivers Crimson RAT appeared first on Malwarebytes Labs.

MalwareBytes Security

Hancitor: fileless attack with a DLL copy trick

March 13, 2018 admin fileless, Hancitor, macro, malware, payloads, Threat analysis

Credit to Author: Malwarebytes Labs| Date: Tue, 13 Mar 2018 16:00:00 +0000

Evading detection when distributing payloads is a key part of an effective malware campaign. Hancitor shows that it has yet another trick up its sleeve for that.

Categories:

Tags: fileless Hancitor macro malware payloads

(Read more…)

The post Hancitor: fileless attack with a DLL copy trick appeared first on Malwarebytes Labs.

MalwareBytes Security

Old MS Office feature weaponized in malspam attacks

October 17, 2017 admin DDE, DDEAUTO, macro, malspam, malware, microsoft, office, Threat analysis, Word

Credit to Author: Jérôme Segura| Date: Tue, 17 Oct 2017 15:00:16 +0000

An old Microsoft Office feature has been brought back to the forefront as way to distribute malware without relying on macros or exploits.

Categories:

Tags: DDE DDEAUTO macro malspam malware microsoft Office word

(Read more…)

The post Old MS Office feature weaponized in malspam attacks appeared first on Malwarebytes Labs.

MalwareBytes Security

Elaborate scripting-fu used in espionage attack against Saudi Arabia Government entity

September 27, 2017 admin espionage, goverment, macro, malware, Microsoft Word, Powershell, saudi arabia, scripting, Threat analysis, Trojan

Credit to Author: Malwarebytes Labs| Date: Wed, 27 Sep 2017 01:06:51 +0000

In this post, we take apart a clever set of scripts used in a targeted attack against the government of Saudi Arabia.

Categories:

Tags: espionage goverment macro microsoft word powershell saudi arabia scripting trojan

(Read more…)

The post Elaborate scripting-fu used in espionage attack against Saudi Arabia Government entity appeared first on Malwarebytes Labs.

MalwareBytes Security

Elaborate scripting-fu used in espionage attack against Saudi Arabia Government

September 27, 2017 admin espionage, goverment, macro, malware, Microsoft Word, Powershell, saudi arabia, scripting, Threat analysis, Trojan

Credit to Author: Malwarebytes Labs| Date: Wed, 27 Sep 2017 01:06:51 +0000

In this post, we take apart a clever set of scripts used in a targeted attack against the government of Saudi Arabia.

Categories:

Tags: espionage goverment macro microsoft word powershell saudi arabia scripting trojan

(Read more…)

The post Elaborate scripting-fu used in espionage attack against Saudi Arabia Government appeared first on Malwarebytes Labs.

MalwareBytes Security

Locky ransomware adds anti sandbox feature (updated)

August 31, 2017 admin Locky, macro, malware, ransomware, Threat analysis, Word

Credit to Author: Malwarebytes Labs| Date: Thu, 31 Aug 2017 16:09:39 +0000

Locky attempts to evade detection by relying once more on simply, yet effective user interaction.

Categories:

Tags: Locky macro ransomware word

(Read more…)

The post Locky ransomware adds anti sandbox feature (updated) appeared first on Malwarebytes Labs.

MalwareBytes Security

Locky ransomware adds anti sandbox feature

August 31, 2017 admin Locky, macro, malware, ransomware, Threat analysis, Word

Credit to Author: Malwarebytes Labs| Date: Thu, 31 Aug 2017 16:09:39 +0000

Locky attempts to evade detection by relying once more on simply, yet effective user interaction.

Categories:

Tags: Locky macro ransomware word

(Read more…)

The post Locky ransomware adds anti sandbox feature appeared first on Malwarebytes Labs.

← Previous