Threat analysis – Page 11 – Computer Security Articles

MalwareBytes Security

Magnitude exploit kit switches to GandCrab ransomware

April 17, 2018 admin EK, exploit kit, Exploits, gandcrab, Magnitude, ransomware, Threat analysis

Credit to Author: Jérôme Segura| Date: Tue, 17 Apr 2018 16:58:26 +0000

After being faithful to its own Magniber ransomware for several months, Magnitude EK joins others to adopt GandCrab.

Categories:

Tags: EK exploit kit gandcrab Magnitude ransomware

MalwareBytes Security

Encryption 101: decryption tool code walkthrough

April 12, 2018 admin Decryption Tool, encryption 101, malware, Princess Locker, Threat analysis

Credit to Author: Vasilios Hioureas| Date: Thu, 12 Apr 2018 17:34:39 +0000

In our final installment of the Encryption 101 series, we walk you through the source code of the Princess Locker decryption tool.

Categories:

Tags: decryption tool encryption 101 Princess Locker

(Read more…)

The post Encryption 101: decryption tool code walkthrough appeared first on Malwarebytes Labs.

MalwareBytes Security

‘FakeUpdates’ campaign leverages multiple website platforms

April 10, 2018 admin chrome, Chtonic, fake updates, FakeUpdates, Firefox, Flash, Joomla, malvertising, malware, Rat, Social engineering, Squarespace, Threat analysis, wordpress

Credit to Author: Jérôme Segura| Date: Tue, 10 Apr 2018 15:00:00 +0000

Browser update? Do not trust, and do verify before downloading potential malware.

Categories:

Tags: chrome Chtonic fake updates FakeUpdates firefox flash Joomla malvertising malware rat Squarespace wordpress

MalwareBytes Security

LockCrypt ransomware: weakness in code can lead to recovery

April 4, 2018 admin LockCrypt, LockCrypt ransomware, malware, ransomware, Threat analysis

Credit to Author: Malwarebytes Labs| Date: Wed, 04 Apr 2018 15:00:54 +0000

A lesser-known variant called LockCrypt ransomware has been creeping around under the radar since June 2017. We take a look inside its code and expose its flaws.

Categories:

Tags: LockCrypt LockCrypt ransomware ransomware

MalwareBytes Security

Exploit kits: Winter 2018 review

March 29, 2018 admin CVE-2014-6332, CVE-2015-2419, CVE-2015-7645, CVE-2015-8651, CVE-2016-0189, CVE-2018-4878, EKs, exploit kits, Exploits, grandsoft, GreenFlash Sundown, Magnitude, RIG, Threat analysis

Credit to Author: Jérôme Segura| Date: Thu, 29 Mar 2018 15:00:00 +0000

In this Winter 2018 review, we check the pulse of exploit kits and their latest developments.

Categories:

Tags: CVE-2014-6332 CVE-2015-2419 CVE-2015-7645 CVE-2015-8651 CVE-2016-0189 CVE-2018-4878 EKs exploit kits grandsoft GreenFlash Sundown Magnitude RIG

(Read more…)

The post Exploit kits: Winter 2018 review appeared first on Malwarebytes Labs.

MalwareBytes Security

An in-depth malware analysis of QuantLoader

March 28, 2018 admin backdoor, malware, malware analysis, QuantLoader, QuantLoader Trojan, Threat analysis, Trojan

Credit to Author: Malwarebytes Labs| Date: Wed, 28 Mar 2018 16:00:00 +0000

QuantLoader is a Trojan downloader that has been used in campaigns serving a range of malware, including ransomware, Banking Trojans, and RATs. In this post, we’ll take a high-level look at the campaign flow, as well as a deep dive into how the malware executes.

Categories:

Tags: backdoor malware analysis QuantLoader QuantLoader Trojan trojan

(Read more…)

The post An in-depth malware analysis of QuantLoader appeared first on Malwarebytes Labs.

MalwareBytes Security

Encryption 101: Decryptor’s thought process

March 27, 2018 admin break encryption, decryptor, encrpytion functionality, encryption, malware, PrincessLocker, ransomware, Threat analysis

Credit to Author: Vasilios Hioureas| Date: Tue, 27 Mar 2018 15:00:00 +0000

In the previous parts 1, 2 and 3 of this series, we covered the basics of encryption, walked through a live example of a ransomware in detail, and talked about encryption weaknesses. In this part of the encryption 101 series, we will begin wrapping it up by going into detail on a ransomware with weak…

Categories:

Tags: break encryption decryptor encrpytion functionality encryption PrincessLocker ransomware

(Read more…)

The post Encryption 101: Decryptor’s thought process appeared first on Malwarebytes Labs.

MalwareBytes Security