Threat analysis – Page 10 – Computer Security Articles

Internet Explorer zero-day: browser is once again under attack

May 10, 2018 admin 0day, CVE-2018-8174, Exploits, Threat analysis, Zero-Day

Credit to Author: Jérôme Segura| Date: Thu, 10 May 2018 19:58:00 +0000

Internet Explorer is yet again leveraged for a zero-day exploit delivered via Office document—the first zero-day observed for IE in over two years.

Categories:

Tags: 0day CVE-2018-8174 zero day

MalwareBytes Security

Netflix phish claims your membership is on hold

May 9, 2018 admin apple, email, Emails, NETFLIX, netflix phish, phish, phishing, SCAM, Social engineering, Threat analysis

Credit to Author: Christopher Boyd| Date: Wed, 09 May 2018 17:00:54 +0000

We take a look at a new Netflix phish in circulation, using the time-honored trick of claiming the recipient is about to lose access unless they hand over some personal information.

Categories:

Tags: Apple email emails netflix netflix phish phish phishing scam

(Read more…)

The post Netflix phish claims your membership is on hold appeared first on Malwarebytes Labs.

MalwareBytes Security

Kuik: a simple yet annoying piece of adware

May 8, 2018 admin Adware, kuik, kuik adware, malware, removal, Threat analysis

Credit to Author: Malwarebytes Labs| Date: Tue, 08 May 2018 16:00:27 +0000

Kuik adware, which forces affected machines to join a domain controller, is using this unusual technique to push Google Chrome extensions and coin miner applications. In this blog, we’ll provide technical analysis of the adware and custom removal instructions.

Categories:

Tags: adware kuik kuik adware removal

(Read more…)

The post Kuik: a simple yet annoying piece of adware appeared first on Malwarebytes Labs.

MalwareBytes Security

Internet Shortcut used in Necurs malspam campaign

May 3, 2018 admin Botnet, criminals, malspam, necurs, samba, SMB, spam, Threat analysis

Credit to Author: Malwarebytes Labs| Date: Thu, 03 May 2018 17:44:18 +0000

The Necurs gang tries out a new trick to load malware and bypass security defenses.

Categories:

Tags: botnet malspam necurs samba SMB spam

(Read more…)

The post Internet Shortcut used in Necurs malspam campaign appeared first on Malwarebytes Labs.

MalwareBytes Security

Spartacus ransomware: introduction to a strain of unsophisticated malware

April 30, 2018 admin malware, malware analysis, ransomware, Spartacus, Spartacus ransomware, Threat analysis

Credit to Author: Vasilios Hioureas| Date: Mon, 30 Apr 2018 17:40:09 +0000

Spartacus ransomware is a fairly new variant seen in 2018. We’ll walk you through the malware sample to analyze the code in detail, and help you learn how to get an obfuscated .NET sample into a readable state.

Categories:

Tags: malware analysis ransomware Spartacus Spartacus ransomware

MalwareBytes Security

New Crossrider variant installs configuration profiles on Macs

April 24, 2018 admin Advanced Mac Cleaner, Adware, configuration profile, configuration profiles, crossrider, Mac, Threat analysis

Credit to Author: Thomas Reed| Date: Tue, 24 Apr 2018 16:30:00 +0000

A new variant of the Crossrider adware has been spotted that is infecting Macs in a unique way, using a configuration profile to keep its effects resident in the system.

Categories:

Tags: Advanced Mac Cleaner adware configuration profile configuration profiles crossrider mac

MalwareBytes Security

PBot: a Python-based adware

April 18, 2018 admin Adware, malware, PBot, pbot adware, python, python-based adware, Threat analysis

Credit to Author: hasherezade| Date: Wed, 18 Apr 2018 15:00:00 +0000

Recently, we came across a Python-based sample dropped by an exploit kit. Although it arrives under the disguise of a MinerBlocker, it has nothing in common with miners. In fact, it seems to be PBot: a Python-based adware.

Categories:

Tags: adware PBot pbot adware python python-based adware

(Read more…)

The post PBot: a Python-based adware appeared first on Malwarebytes Labs.