SecureList

APRIL 27, 2021

During routine monitoring of detections for FinFisher spyware tools, we discovered traces that point to recent FinFly Web deployments. Although Lyceum still prefers taking advantage of DNS tunneling, it appears to have replaced the previously documented.NET payload with a new C++ backdoor and a PowerShell script that serve the same purpose.

Malware 139

Malware Spyware Government Social Engineering 139

Herjavec Group

AUGUST 26, 2021

1988 — The Morris Worm — Robert Morris creates what would be known as the first worm on the Internet. 2002 – Internet Attack — By targeting the thirteen Domain Name System (DNS) root servers, a DDoS attack assaults the entire Internet for an hour. An industry expert estimates the attacks resulted in $1.2

Cybercrime 135

Cybercrime Computers and Electronics Banking Hacking 135

SecureList

SEPTEMBER 26, 2022

NullMixer is a dropper that includes more than just specific malware families; it drops a wide variety of malicious binaries to infect the machine with, such as backdoors, bankers, downloaders, spyware and many others. Satacom sends a DNS TXT-query to ‘ reosio.com ‘ and receives a response with a base64 encoded string.

Malware 109

Malware Cryptocurrency Passwords Software 109