Malware analysis: decoding Emotet, part 2

Credit to Author: Vishal Thakur| Date: Thu, 07 Jun 2018 15:00:00 +0000

In part two of our series on decoding Emotet, we analyze the PowerShell code flow and structure. We also reconstruct the command-line arguments—for fun!

Categories:

Tags:

(Read more…)

The post Malware analysis: decoding Emotet, part 2 appeared first on Malwarebytes Labs.

Read more

Instagram story spam claims free Apple Watch

Credit to Author: Christopher Boyd| Date: Thu, 31 May 2018 15:00:00 +0000

We take a look at Instagram story spam leading to a “free Apple Watch” giveaway on a recently compromised celebrity account.

Categories:

Tags:

(Read more…)

The post Instagram story spam claims free Apple Watch appeared first on Malwarebytes Labs.

Read more

Malware analysis: decoding Emotet, part 1

Credit to Author: Vishal Thakur| Date: Fri, 25 May 2018 15:00:00 +0000

In the first part of this two-part analysis of Emotet, we look at the VBA code, where you’ll learn how to recognize and discard “dead” code thrown in to complicate the analysis process.

Categories:

Tags:

(Read more…)

The post Malware analysis: decoding Emotet, part 1 appeared first on Malwarebytes Labs.

Read more

A look into Drupalgeddon’s client-side attacks

Credit to Author: Jérôme Segura| Date: Fri, 18 May 2018 15:00:00 +0000

Back-to-back Drupal zero-day vulnerabilities are being monetized with malicious web cryptominers.

Categories:

Tags:

(Read more…)

The post A look into Drupalgeddon’s client-side attacks appeared first on Malwarebytes Labs.

Read more

Adobe Reader zero-day discovered alongside Windows vulnerability

Credit to Author: Jérôme Segura| Date: Tue, 15 May 2018 18:44:14 +0000

A new Adobe Reader zero-day exploit has been discovered, including a full sandbox escape.

Categories:

Tags:

(Read more…)

The post Adobe Reader zero-day discovered alongside Windows vulnerability appeared first on Malwarebytes Labs.

Read more

Tech support scam uses fake Shoppers Stop site to lure thousands

Credit to Author: Jérôme Segura| Date: Tue, 08 May 2018 13:25:00 +0000

The same group behind the Shoppers Stop tech scam campaign is at it again, injecting malicious ad code into thousands of sites and redirecting to a templated warning page.

Categories:

Tags:

(Read more…)

The post Tech support scam uses fake Shoppers Stop site to lure thousands appeared first on Malwarebytes Labs.

Read more

Tech support scam uses fake Shoppers Stop to draw from thousands of forced ad injections

Credit to Author: Jérôme Segura| Date: Tue, 08 May 2018 13:25:00 +0000

The same group behind the Shoppers Stop tech scam campaign is at it again, injecting malicious ad code into thousands of sites and redirecting to a templated warning page.

Categories:

Tags:

(Read more…)

The post Tech support scam uses fake Shoppers Stop to draw from thousands of forced ad injections appeared first on Malwarebytes Labs.

Read more