Threat analysis – Page 23 – Computer Security Articles

Locky Bart ransomware and backend server analysis

January 31, 2017 admin analysis, Anti-Ransomware, backend server, bart, binary, Locky, Locky Bart ransomware, malware, ransomware, Threat analysis

The developers of Locky Bart already had very successful ransomware campaigns running called “Locky” and “Locky v2”. After some users reported being infected with Locky Bart, we investigated it to find the differences as to gain greater knowledge and understanding of this new version.

Categories:

Tags: analysis Anti-Ransomware backend server bart binary Locky Locky Bart ransomware ransomware

(Read more…)

MalwareBytes Security

Zbot with legitimate applications on board

January 26, 2017 admin banker, banking malware, cybercrime, malware, terdot, Threat analysis, zbot, Zeus malware, Zloader

Recently, among the payloads delivered by exploit kits, we often find Terdot.A/Zloader – a downloader installing on the victim machine a ZeuS-based malware.

Categories:

Tags: banker banking malware malware terdot zbot Zeus malware Zloader

(Read more…)

MalwareBytes Security

VirLocker’s comeback; including recovery instructions

January 25, 2017 admin file infecting, file recovery, malware, polymorphic, ransomware, self propagating, Threat analysis, VirLock, Virlocker

Virlocker is back, the nightmare is still real. But we have found a way to at least recover your important files even if the affected machine can be considered a loss.

Categories:

Tags: file infecting file recovery malware polymorphic ransomware self propagating VirLock Virlocker

(Read more…)

MalwareBytes Security

Tech support scams, stolen data, and botnets

January 18, 2017 admin Botnet, BPO Experts Global, BPOreserouces, criminals, Dell, scams as a service, tech support, tech support scam, Threat analysis, TSS, winlogon

We’ve found a scam in a box company that also offers intelligence leads. That is, they’ll sell you the scam and point you at the most vulnerable targets first.

Categories:

Tags: botnet BPO Experts Global BPOreserouces Dell scams as a service tech support tech support scam TSS winlogon

(Read more…)

MalwareBytes Security

Goldeneye Ransomware – the Petya/Mischa combo rebranded

January 18, 2017 admin Cerber ransomware, Goldeneye ransomware, hasherezade, malware, Mischa ransomware, Petya ransomware, phishing, ransomware, Satana ransomware, Threat analysis

From March 2016 we’ve observed the evolution of an interesting low-level ransomware, Petya. Now, we are facing an outbreak of the fourth version – this time under a new name – Goldeneye, and, appropriately, a new, golden theme.

Categories:

Tags: Cerber ransomware Goldeneye ransomware hasherezade malware Mischa ransomware Petya ransomware phishing ransomware Satana ransomware

(Read more…)

MalwareBytes Security

New Mac backdoor using antiquated code

January 18, 2017 admin apple, Internet of Things, IoT, linux, Mac, malware, Threat analysis

The first Mac malware of 2017 was discovered by an IT admin, who spotted some strange outgoing network traffic from a particular Mac. This led to the discovery of a new piece of malware unlike anything I’ve seen before and the first new piece of malware for the Mac in 2017.

Categories:

Tags: Apple Internet of Things IoT linux mac malware

(Read more…)