SecureList

MAY 27, 2022

The attackers study their victims carefully and use the information they find to frame social engineering attacks. While it’s not clear how the threat actor tricked the victims into executing the Trojanized app, we suspect they sent a spear-phishing email or contacted them via social media. Other malware.

Phishing 110

Phishing Spyware Firmware Malware 110

SecureList

NOVEMBER 17, 2021

Last year, we foresaw the APT and cybercrime worlds becoming more porous on an operational level. The targets included government and military agencies, defense contractors, political parties and consultancies, logistics companies, energy firms, universities, law firms and media companies.

Mobile 135

Mobile Surveillance Ransomware Government 135

SecureList

OCTOBER 26, 2021

Historically, Lazarus used MATA to attack various industries for cybercrime-like intentions: stealing customer databases and spreading ransomware. The samples we analyzed mimicked various applications such as private messaging, VPN, and media services. Southeast Asia and Korean Peninsula. Final thoughts.

Malware 143

Malware Government Surveillance Spyware 143

SecureList

NOVEMBER 14, 2023

This politician became the target of a previously undiscovered “zero-day” attack aimed at infecting his phone with spyware. BlackEnergy APT attacks in Ukraine are a prominent example from the last decade, known for destructive actions against media companies, compromising industrial control systems and engaging in cyber-espionage.

Hacking 110

Hacking Energy and Utilities Media Malware 110

SecureList

APRIL 27, 2021

During routine monitoring of detections for FinFisher spyware tools, we discovered traces that point to recent FinFly Web deployments. On March 31, Google TAG released an update on this activity showing another wave of fake social media profiles and a company the actor set up mid-March. Final thoughts.

Malware 142

Malware Spyware Government Social Engineering 142

SecureList

NOVEMBER 1, 2022

In June, we identified a previously unknown Android spyware app that targets Persian-speaking individuals. The spyware itself collects various data from the victims’ devices, such as call logs or lists of contacts. SandStrike is distributed as a means to access resources about the Bahá?í í religion that are banned in Iran.

Malware 142

Malware Ransomware Spyware Encryption 142

SecureList

NOVEMBER 10, 2021

Looking for alternative sources to download a streaming app or an episode of a show, users often discover various types of malware, including Trojans, spyware and backdoors, as well as naughty applications, such as adware. When discussing streaming-related threats, it is crucial to talk about malware and unwanted software.

Phishing 100

Phishing Accountability Malware Adware 100