Threat analysis – Page 2 – Computer Security Articles

In order to maximize infection rate, threat actors are now launching the Spelevo exploit kit with a decoy adult site, social engineering users into downloading a malicious video player.

Categories:

Threat analysis

Tags: EK exploit kit Gozi malvertising Qakbot Qbot Social Engineering Spelevo Ursnif

MalwareBytes Security

Hundreds of counterfeit online shoe stores injected with credit card skimmer

December 10, 2019 admin counterfeit, credit card, fraud, Magecart, shoes, skimmers, Threat analysis

Credit to Author: Jérôme Segura| Date: Tue, 10 Dec 2019 17:30:50 +0000

A Magecart credit card skimmer was found injected into hundreds of counterfeit, brand-name shoe stores—a one-two punch of victimization for users first duped with fake goods then stripped of their personal data.

Categories:

Threat analysis

Tags: counterfeit credit card fraud Magecart shoes skimmers

MalwareBytes Security

New version of IcedID Trojan uses steganographic payloads

December 3, 2019 admin backdoor, banking Trojan, banking trojans, credential stealing, downloader, hooking browsers, icedid trojan, malware, malware analysis, man-in-the-browser attacks, passwords, stealer, stealer functionality, stealing passwords, stealthy malware, Threat analysis, trickbot, trojans

Credit to Author: Threat Intelligence Team| Date: Tue, 03 Dec 2019 18:06:13 +0000

We take a deep dive into the IcedID Trojan, describing the new payloads of this advanced malware.

Categories:

Threat analysis

Tags: backdoor banking Trojan banking Trojans credential stealing downloader hooking browsers IcedID Trojan malware malware analysis man-in-the-browser attacks passwords stealer stealer functionality stealing passwords stealthy malware trickbot Trojans

MalwareBytes Security

The forgotten domain: Exploring a link between Magecart Group 5 and the Carbanak APT

October 22, 2019 admin Advanced persistent threats, APTs, attribution, Carbanak, cybercriminal groups, dridex, group5, Magecart, malicious domains, malicious websites, skimmer, Threat analysis

Credit to Author: Threat Intelligence Team| Date: Tue, 22 Oct 2019 15:00:00 +0000

Bread crumbs left behind open up a possible connection between Magecart Group 5 and Carbanak.

Categories:

Threat analysis

Tags: advanced persistent threats APTs attribution carbanak cybercriminal groups dridex Group5 Magecart malicious domains malicious websites skimmer

MalwareBytes Security

Magecart Group 4: A link with Cobalt Group?

October 3, 2019 admin Carbanak, colbalt group, credit cards, data theft, ecommerce, FIN7, group 4, Hyas, JavaScript, Magecart, skimmers, threat actor, threat actor group, threat actors, Threat analysis

Credit to Author: Threat Intelligence Team| Date: Thu, 03 Oct 2019 15:00:00 +0000

Malwarebytes threat intel partnered with security firm HYAS to connect the dots between Magecart Group 4 and the advanced threat group Cobalt.

Categories:

Threat analysis

Tags: carbanak colbalt group credit cards data theft ecommerce FIN7 group 4 HYAS JavaScript Magecart skimmers threat actor threat actor group threat actors

(Read more…)

The post Magecart Group 4: A link with Cobalt Group? appeared first on Malwarebytes Labs.

MalwareBytes Security

Magecart criminals caught stealing with their poker face on

August 20, 2019 admin drupal, JavaScript, Magecart, Magento, poker, skimmer, Threat analysis

Credit to Author: Jérôme Segura| Date: Tue, 20 Aug 2019 15:00:38 +0000

This blog post details the curious case of a web skimmer encountered in a poker application.

Categories:

Threat analysis

Tags: drupal JavaScript Magecart magento poker skimmer

MalwareBytes Security

The Hidden Bee infection chain, part 1: the stegano pack

August 15, 2019 admin cryptominers, custom code, exploit kits, Exploits, hidden bee, infection chain, infection vector, malware modules, miner, miners, obfuscation, payloads, Threat analysis, Underminer, Underminer EK

Credit to Author: hasherezade| Date: Thu, 15 Aug 2019 15:26:55 +0000

The Hidden Bee cryptominer has a complex and multi-layered internal structure that is unusual among cybercrime toolkits. That’s why we’re dedicating a series of posts to exploring its elements and updates made during one year of its evolution.

Categories:

Threat analysis

Tags: cryptominers custom code exploit kits exploits hidden bee infection chain infection vector malware modules miner miners obfuscation payloads Underminer Underminer EK