Threat analysis – Page 21 – Computer Security Articles

Malvertising on iOS pushes eyebrow-raising VPN app

April 6, 2017 admin apple, iOS, iPhone, malvertising, malware, MyMobileSecure, scareware, Social engineering, Threat analysis, VPN

Credit to Author: Jérôme Segura| Date: Thu, 06 Apr 2017 17:10:49 +0000

A malvertising campaign on iOS is pushing a scareware page tricking Apple users into installing a free VPN app that comes with serious privacy implications.

Categories:

Tags: Apple iOS iPhone malvertising malware MyMobileSecure scareware vpn

(Read more…)

The post Malvertising on iOS pushes eyebrow-raising VPN app appeared first on Malwarebytes Labs.

MalwareBytes Security

Diamond Fox – part 2: let’s dive in the code

April 6, 2017 admin Diamond Fox, EK, exploit kit, malware, Nebula, Nebula Exploit Kit, Threat analysis

Credit to Author: Malwarebytes Labs| Date: Thu, 06 Apr 2017 15:00:30 +0000

In a previous post we made an initial analysis of a Diamond Fox bot delivered by the Nebula Exploit Kit (more about the campaign can be found here). We described the way to unpack the protection layer in order to get the core, written in Visual Basic, that can be decompiled. In this second part of…

Categories:

Tags: Diamond Fox EK exploit kit Nebula Nebula Exploit Kit

(Read more…)

The post Diamond Fox – part 2: let’s dive in the code appeared first on Malwarebytes Labs.

MalwareBytes Security

Explained: Sage ransomware

March 29, 2017 admin encryption, hasherezade, malware, phish, ransomware, Sage ransomware, Spora Ransomware, Threat analysis

Credit to Author: Malwarebytes Labs| Date: Wed, 29 Mar 2017 15:00:24 +0000

Sage is yet another ransomware that has become a common threat nowadays. Similarly to Spora, it has capabilities to encrypt files offline. The malware is actively developed and currently, we are facing outbreak of version 2.2. of this product.

Categories:

Tags: encryption hasherezade malware phish ransomware Sage ransomware Spora Ransomware

(Read more…)

The post Explained: Sage ransomware appeared first on Malwarebytes Labs.

MalwareBytes Security

Chinese PUPs and backdoor drivers: making systems less secure since 2013

March 20, 2017 admin IOCTL, malware, PUP, PUP/PUM, pups, Threat analysis

Credit to Author: Zammis Clark| Date: Mon, 20 Mar 2017 15:00:03 +0000

In this blog, we expose a family of backdoor drivers that have been included in various PUPs of Chinese origin for several years.

Categories:

Tags: IOCTL PUP PUPs

MalwareBytes Security

Diamond Fox – part 1: introduction and unpacking

March 17, 2017 admin Diamond Fox, Gornych, malware, Threat analysis, Visual Basic, Visual Basic Decompiler

Credit to Author: Malwarebytes Labs| Date: Fri, 17 Mar 2017 15:00:41 +0000

In this short series of posts, we will take a deep dive in a sample of Diamond Fox delivered by the Nebula Exploit Kit (described here). We will also make a brief comparison with the old, leaked version, in order to show the evolution of this product.

Categories:

Tags: Diamond Fox Gornych malware Visual Basic Visual Basic Decompiler

(Read more…)

The post Diamond Fox – part 1: introduction and unpacking appeared first on Malwarebytes Labs.

MalwareBytes Security

Explained: Spora ransomware

March 10, 2017 admin malware, ransomware, spora, Spora Ransomware, Threat analysis

Credit to Author: Malwarebytes Labs| Date: Fri, 10 Mar 2017 18:00:09 +0000

Spora ransomware has joined the family of ransomware created by professionals. Take a closer look at Spora.

Categories:

Tags: malware ransomware Spora Spora Ransomware

(Read more…)

The post Explained: Spora ransomware appeared first on Malwarebytes Labs.

MalwareBytes Security

CryptoBlock ransomware and its C2

March 10, 2017 admin CryptoBlock, malware, raas, ransomware, Ransomware as a Service, Threat analysis, virustotal

Credit to Author: Nathan Scott| Date: Fri, 10 Mar 2017 16:00:12 +0000

CryptoBlock is an interesting ransomware to keep an eye on. We expect this to be a ransomware that is in development to eventually develop into a RaaS (Ransomware as a Service).

Categories:

Tags: CryptoBlock raas ransomware Ransomware as a Service virustotal

(Read more…)

The post CryptoBlock ransomware and its C2 appeared first on Malwarebytes Labs.

MalwareBytes Security