Windows 10 – Page 21 – Computer Security Articles

Exploit kits remain a cybercrime staple against outdated software – 2016 threat landscape review series

Despite the disruption of Axpergle (Angler), which dominated the landscape in early 2016, exploit kits as a whole continued to be a threat to PCs running unpatched software. Some of the most prominent threats, from malvertising to ransomware, used exploit kits to infect millions of computers worldwide in 2016. The prevalence of exploit kits as an…

Microsoft Security

Twin zero-day attacks: PROMETHIUM and NEODYMIUM target individuals in Europe

January 23, 2017 admin Advanced persistent threats, Antimalware research for IT pros and enthusiasts, APT, Exploits, NEODYMIUM, PROMETHIUM, Targeted attack, Windows 10, Windows Defender, Windows Defender ATP, Zero day exploit

Targeted attacks are typically carried out against individuals to obtain intellectual property and other valuable data from target organizations. These individuals are either directly in possession of the targeted information or are able to connect to networks where the information resides. Microsoft researchers have encountered twin threat activity groups that appear to target individuals for…

Microsoft Security

No slowdown in Cerber ransomware activity as 2016 draws to a close

January 23, 2017 admin Antimalware research for IT pros and enthusiasts, Cerber, Donoff, Exploits, holiday shopping, macro, Macro-based malware, Meadgive, ransomware, spam, Windows 10, Windows Defender, Windows Defender ATP

As everybody else winds down for the holidays, the cybercriminals behind Cerber are busy ramping up their operations. Following our discovery of a spam campaign that takes advantage of holiday shopping, we found two new campaigns that continue distributing the latest variants of Cerber ransomware. These campaigns are the latest in a series of persistent cybercriminal…

Microsoft Security

Windows 10: protection, detection, and response against recent Depriz malware attacks

January 23, 2017 admin 0-day exploit, Advanced persistent threats, Antimalware research for IT pros and enthusiasts, Depriz malware, Device Guard, TERBIUM APT, Trojan, Trojan:Win32/Cadlotcorg.A!dha, Win32/Depriz, Windows 10, Windows 10 protection, Windows Defender, Windows Defender ATP, Zero day exploit

A few weeks ago, multiple organizations in the Middle East fell victim to targeted and destructive attacks that wiped data from computers, and in many cases rendering them unstable and unbootable. Destructive attacks like these have been observed repeatedly over the years and the Windows Defender and Windows Defender Advanced Threat Protection Threat Intelligence teams…

Microsoft Security

MSRT December 2016 addresses Clodaconas, which serves unsolicited ads through DNS hijacking

January 23, 2017 admin Antimalware research for IT pros and enthusiasts, browser modifier, BrowserModifier:Win32/Clodaconas, Clodaconas, DNS hijacking, Injecting ads, Microsoft Malicious Software Removal Tool, MSRT, MSRT removes Clodaconas, Unwanted software, Windows 10, Windows Defender

In this month’s Microsoft Malicious Software Removal Tool (MSRT) release, we continue taking down unwanted software, the pesky threats that force onto our computers things that we neither want nor need. BrowserModifier:Win32/Clodaconas, for instance, displays ads when you’re browsing the internet. It modifies search results pages so that you see unsolicited ads related to your…

Microsoft Security

No payment necessary: Fighting back against ransomware

January 23, 2017 admin Advanced persistent threats, antimalware, Antimalware research for IT pros and enthusiasts, Coordinated Malware Eradication, enterprise software security, malware research, microsoft, Microsoft Edge, MMPC, Product features and announcements, ransomware, research, Windows 10, Windows Defender, Windows Defender ATP, Windows Defender for Windows 10

Any IT professional who’s ever had an experience with malware knows how fast an intrusive attack can happen, and how difficult it can be to educate employees to be vigilant against such threats. And with ransomware attacks only growing, having information, tools and technologies to help protect your network can mean the difference between serious…

Microsoft Security

Fake fax ushers in revival of a ransomware family

January 23, 2017 admin antimalware, Antimalware research for IT pros and enthusiasts, Crimace, enterprise software security, fake fax, malware research, microsoft, Microsoft Edge, MMPC, Ransom:Win32/WinPlock.B, ransomware, research, spam, Trojan, TrojanDownloader:JS/Crimace.A, Windows 10, Windows Defender, Windows Defender for Windows 10, WinPlock

“Criminal case against you” is a message that may understandably cause panic. That’s what a recent spam campaign hopes happens, increasing the likelihood of recipients opening the malicious attachment. We recently discovered a new threat that uses email messages pretending to be fax messages, but in truth deliver a ransomware downloader. The attachment used in this…

Microsoft Security

Our commitment to our customers’ security

January 23, 2017 admin Advanced persistent threats, Antimalware research for IT pros and enthusiasts, Coordinated Malware Eradication, CVE-2016-7855, Elevation of privileges, Exploits, Microsoft Edge, Microsoft Edge on Windows 10, Microsoft Threat Intelligence, Microsoft's post-breach detection approach, post-breach, STRONTIUM APT, Terry Myerson's blog, Windows 10, Windows Defender ATP, Windows Defender ATP detects STRONTIUM

This guest blog post is by Terry Myerson / Executive Vice President, Windows and Devices Group Windows is the only platform with a customer commitment to investigate reported security issues and proactively update impacted devices as soon as possible. And we take this responsibility very seriously. Recently, the activity group that Microsoft Threat Intelligence calls STRONTIUM…