Threat analysis – Page 8 – Computer Security Articles

Exploit kits: summer 2018 review

August 7, 2018 admin drive-by downloads, drive-bys, EK, EKs, exploit kits, Exploits, grandsoft, GreenFlash Sundown, KaiXin, Magnitude, RIG, Threat analysis, Underminer

Credit to Author: Jérôme Segura| Date: Tue, 07 Aug 2018 15:00:00 +0000

Just like the beach, the EK landscape got a little crowded this summer. Find out what we discovered in our exploit kits summer review.

Categories:

Tags: drive-by downloads drive-bys EK EKs exploit kits grandsoft GreenFlash Sundown KaiXin Magnitude RIG Underminer

(Read more…)

The post Exploit kits: summer 2018 review appeared first on Malwarebytes Labs.

MalwareBytes Security

‘Hidden Bee’ miner delivered via improved drive-by download toolkit

July 26, 2018 admin bootkit, cryptominer, drive-by attack, exploit, Exploits, hidden bee, hidden bee miner, MBR, Threat analysis

Credit to Author: Malwarebytes Labs| Date: Thu, 26 Jul 2018 21:00:22 +0000

Threat actors switch to the Hidden Bee miner as a payload for this unusual and complex drive-by download campaign.

Categories:

Tags: bootkit cryptominer drive-by attack exploit hidden bee hidden bee miner MBR

()

The post ‘Hidden Bee’ miner delivered via improved drive-by download toolkit appeared first on Malwarebytes Labs.

MalwareBytes Security

New strain of Mac malware Proton found after two years

July 24, 2018 admin apple, Calisto, Mac, Proton malware, Threat analysis

Credit to Author: Thomas Reed| Date: Tue, 24 Jul 2018 15:00:00 +0000

A new variant of the Mac malware Proton, which was rampant on macOS last year, has been found dating back to at least two years ago. Learn how this could still affect your Mac today.

Categories:

Tags: Apple Calisto mac Proton malware

MalwareBytes Security

Magniber ransomware improves, expands within Asia

July 16, 2018 admin Ásia, EK, Exploits, magniber, Magnigate, Magnitude, Malaysia, South korea, Taiwan, Threat analysis

Credit to Author: Malwarebytes Labs| Date: Mon, 16 Jul 2018 17:00:16 +0000

After a controlled delivery focused on South Korea, an upgraded Magniber ransomware is now affecting other Asian countries.

Categories:

Tags: asia EK magniber Magnigate Magnitude Malaysia South Korea Taiwan

(Read more…)

The post Magniber ransomware improves, expands within Asia appeared first on Malwarebytes Labs.

MalwareBytes Security

SamSam ransomware: controlled distribution for an elusive malware

July 9, 2018 admin malware, ransomware, SamSam, samsam ransomware, Threat analysis

Credit to Author: Malwarebytes Labs| Date: Tue, 19 Jun 2018 16:14:30 +0000

SamSam ransomware is a unique malware for its explicit human interaction on selected targets and care to erase most of its tracks.

Categories:

Tags: ransomware samsam samsam ransomware

MalwareBytes Security

Obfuscated Coinhive shortlink reveals larger mining operation

July 3, 2018 admin cnhv, coinhive, cryptomining, Mining, monero, shortlinks, Threat analysis

Credit to Author: Jérôme Segura| Date: Tue, 03 Jul 2018 15:00:00 +0000

A web miner injected into compromised sites is just the tip of the iceberg for an infrastructure hosting malicious Windows and Linux coin miners.

Categories:

Tags: cnhv coinhive mining monero shortlinks

MalwareBytes Security

New macro-less technique to distribute malware

July 2, 2018 admin deeplink, macro-less, malware, office, settingcontent-ms, Threat analysis

Credit to Author: Jérôme Segura| Date: Mon, 02 Jul 2018 21:12:47 +0000

The latest macro-less technique to distribute malware via Office documents does not involve exploits. Just a little bit of social engineering.

Categories:

Threat analysis

Tags: deeplink macro-less malware Office settingcontent-ms

(Read more…)

The post New macro-less technique to distribute malware appeared first on Malwarebytes Labs.

MalwareBytes Security

SamSam ransomware: controlled distribution for an elusive malware

June 18, 2018 admin malware, ransomware, SamSam, samsam ransomware, Threat analysis

Credit to Author: Malwarebytes Labs| Date: Mon, 18 Jun 2018 19:30:53 +0000

SamSam ransomware is a unique malware for its explicit human interaction on selected targets and care to erase most of its tracks.

Categories:

Tags: ransomware samsam samsam ransomware