Threat analysis – Page 16 – Computer Security Articles

BadRabbit: a closer look at the new version of Petya/NotPetya

October 24, 2017 admin badrabbit ransomware, malware, NotPetya, NotPetya ransomware, ransomware, Threat analysis

Credit to Author: Malwarebytes Labs| Date: Tue, 24 Oct 2017 23:08:18 +0000

BadRabbit, a new version of NotPetya, also has an infector allowing for lateral movements. However, unlike NotPetya, it does not use EternalBlue and uses a website to drop its payload. We take a closer look at this new ransomware variant.

Categories:

Tags: badrabbit ransomware NotPetya NotPetya ransomware ransomware

MalwareBytes Security

Magniber ransomware: exclusively for South Koreans

October 18, 2017 admin Ásia, magniber, magnitude EK, malware, ransomware, Threat analysis

Credit to Author: hasherezade| Date: Thu, 19 Oct 2017 00:29:23 +0000

A few days ago, Magnitude EK resurfaced, this time with a new payload that targets only the country of South Korea. It’s called Magniber ransomware.

Categories:

Tags: asia magniber magnitude EK ransomware

(Read more…)

The post Magniber ransomware: exclusively for South Koreans appeared first on Malwarebytes Labs.

MalwareBytes Security

Old MS Office feature weaponized in malspam attacks

October 17, 2017 admin DDE, DDEAUTO, macro, malspam, malware, microsoft, office, Threat analysis, Word

Credit to Author: Jérôme Segura| Date: Tue, 17 Oct 2017 15:00:16 +0000

An old Microsoft Office feature has been brought back to the forefront as way to distribute malware without relying on macros or exploits.

Categories:

Tags: DDE DDEAUTO macro malspam malware microsoft Office word

MalwareBytes Security

Malvertising on Equifax, TransUnion tied to third party script (updated)

October 13, 2017 admin Equifax, Flash Player, malvertising, malware, Threat analysis, TransUnion

Credit to Author: Jérôme Segura| Date: Thu, 12 Oct 2017 21:42:28 +0000

We take a look at the the recent malvertising incident that happened on Equifax’s site and show how it also affected TransUnion.

Categories:

Tags: Equifax Flash Player malvertising Transunion

MalwareBytes Security

Decoy Microsoft Word document delivers malware through a RAT

October 13, 2017 admin CVE-2017-0199, CVE-2017-8759, Exploits, Rat, Threat analysis, Word exploits

Credit to Author: Jérôme Segura| Date: Fri, 13 Oct 2017 15:00:41 +0000

A Remote Administration Tool (RAT) is delivered via an unusual route: a benign-looking Microsoft Word document with an ulterior motive.

Categories:

Tags: CVE-2017-0199 CVE-2017-8759 exploits rat Word exploits

MalwareBytes Security

Malvertising on Equifax, TransUnion tied to third party script

October 12, 2017 admin Equifax, Flash Player, malvertising, malware, Threat analysis, TransUnion

Credit to Author: Jérôme Segura| Date: Thu, 12 Oct 2017 21:42:28 +0000

Equifax’s website is once again infected, this time with malvertising that redirects to a fake Flash player. Further investigation reveals TransUnion was also targeted.

Categories:

Tags: Equifax Flash Player malvertising Transunion

MalwareBytes Security

Malvertising on Equifax, TransUnion tied to 3rd party library

October 12, 2017 admin Equifax, Flash Player, malvertising, malware, Threat analysis, TransUnion

Credit to Author: Jérôme Segura| Date: Thu, 12 Oct 2017 21:42:28 +0000

Equifax’s website is once again infected, this time with malvertising that redirects to a fake Flash player. Further investigation reveals TransUnion was also targeted.

Categories:

Tags: Equifax Flash Player malvertising Transunion

MalwareBytes Security

Equifax, TransUnion websites push fake Flash Player in malvertising campaign

October 12, 2017 admin Equifax, Flash Player, malvertising, malware, Threat analysis, TransUnion

Credit to Author: Jérôme Segura| Date: Thu, 12 Oct 2017 21:42:28 +0000

Equifax’s website is once again infected, this time with malvertising that redirects to a fake Flash player. Further investigation reveals TransUnion was also targeted.

Categories:

Tags: Equifax Flash Player malvertising Transunion