eSecurity Planet

OCTOBER 3, 2022

PuTTY, KiTTY, TightVNC, Sumatra PDF Reader, and the muPDF/Subliminal Recording software installer have been backdoored to perform a wide range of social engineering campaigns that started in April 2022. Using DLL hijacking, ZINC can schedule additional tasks and install malware on the compromised machines. Highly Evasive Attack.

Software 128

Software Social Engineering Engineering Phishing 128

Security Affairs

AUGUST 12, 2020

The experts first discovered the malware in June 2018, but it has been available since 2014, when they observed threat actors spreading it via a Microsoft Word document containing an auto-executable malicious VBA Macro. “When combined with timely social engineering lures, these non-sophisticated attacks continue to be successful.”

Passwords 144

Passwords Spyware VPN Malware 144

Security Affairs

AUGUST 13, 2019

A new malware-as-a- service dubbed Cerberus has emerged in the threat landscape, it is an Android RAT developed from scratch that doesn’t borrow the code from other malware. The malware implements banking Trojan capabilities such as the use of overlay attacks, the ability to intercept SMS messages and access to the contact list.

Banking 111

Banking Malware Advertising Social Engineering 111

Security Affairs

NOVEMBER 15, 2019

A new threat actor tracked as TA2101 is conducting malware campaigns using email to impersonate government agencies in the United States, Germany, and Italy. ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Government 103

Government Malware Social Engineering Banking 103

Malwarebytes

MARCH 22, 2023

Malware authors are artificially pumping up the size of the document in order to try and fool or break security tools. Macros, used to automate aspects of your documents , are a tried and tested way of infecting a PC with malware. Malware authors know this, and will do everything in their power to make you enable them.

Malware 98

Malware Scams Social Engineering Banking 98

Security Affairs

FEBRUARY 1, 2019

Security experts at Cybaze – Yoroi ZLab have analyzed a new sample of the AdvisorsBot malware, a downloader that was first spotted in August 2018. As usual, the malware looks like a legitimate e-mail attachment, named as “invoice.doc”. Figure 3 – Piece of VBS script that starts malware infection. DLL Analysis.

Malware 109

Malware DNS Social Engineering Advertising 109

Security Affairs

SEPTEMBER 5, 2020

“Another social engineering technique the threat actor uses to lure the employee into interacting with the email is giving the messages urgency, asking the recipient to review them or they will be deleted after three days.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Social Engineering 145

Social Engineering Phishing Engineering Advertising 145

Security Affairs

MARCH 25, 2019

Due to the growing demand for Android banking malware, threat actors continue using Anubis even is the creator has vanished. Besides being the Egyptian God associated with mummification and afterlife, Anubis is also an Android banking malware that has caused quite some trouble for over 300 financial institutions worldwide since 2017.

Malware 110

Malware Banking Advertising Social Engineering 110

Security Affairs

OCTOBER 14, 2018

The man acknowledged having targeted friends, co-workers, and family members, he used social engineering tricks and also used malware to compromise victims’ systems. He got other victims to install computer malware allowing him to access their computers.” ” states the Associated Press.

Identity Theft 111

Identity Theft Social Engineering Advertising Hacking 111

Security Affairs

DECEMBER 12, 2024

These are the first known mobile malware families linked to the Russian APT. Gamaredon has been launching cyber-espionage campaigns on Ukraine since at least 2014. The two malware families can collect data such as SMS messages, call logs, phone call audio, photos from device cameras, device location, and contact lists.

Mobile 98

Mobile Malware Surveillance Social Engineering 98

Security Affairs

AUGUST 19, 2023

Threat actors are using Android Package (APK) files with unsupported compression methods to prevent malware analysis. What is the best way to bypass #Malware analysis on #Android ? Checkout the local and central Zipfile header of APK 2f371969faf2dc239206e81d00c579ff and tell us what you see.

Malware 98

Malware Social Engineering Engineering Hacking 98

Security Affairs

MARCH 30, 2020

The Zeus Sphinx malware is back, operators are now spreading it exploiting the interest in the Coronavirus outbreak. The Zeus Sphinx malware is back, it was observed in a new wave of attacks attempting to exploit the interest in the Coronavirus outbreak. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Banking 139

Banking Malware Social Engineering Advertising 139

The Last Watchdog

JUNE 21, 2020

Balaban This ransomware was doing the rounds over spam generated by the Gameover ZeuS botnet, which had been originally launched in 2011 as a toolkit for stealing victim’s banking credentials and was repurposed for malware propagation. These included PClock, CryptoLocker 2.0, Crypt0L0cker, and TorrentLocker.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Security Boulevard

FEBRUARY 23, 2021

Such lures are used as social engineering schemes by threat actors; in this case, the malware was targeted at security researchers. We have recently observed other instances of threat actors targeting security researchers with social engineering techniques. Threat attribution. Currently logged in user name.

Social Engineering 64

Social Engineering Engineering Passwords Malware 64

Security Affairs

AUGUST 14, 2020

The Lazarus APT is linked to North Korea, the activity of the Group surged in 2014 and 2015, its members used mostly custom-tailored malware in their attacks. Recently Kaspersky experts reported that Lazarus APT Group has used a new multi-platform malware framework, dubbed MATA , to target entities worldwide.

Cyber Attacks 127

Cyber Attacks Social Engineering Advertising Malware 127

Security Affairs

JANUARY 24, 2022

Experts warn Emotet malware campaign using “unconventional” IP address formats in an attempt to evade detection. Threat actors behind a recent Emotet malware campaign have been observed using using “unconventional” IP address formats to evade detection. ” reported Trend Micro. ” reported Trend Micro.

Malware 140

Malware Social Engineering Ransomware Banking 140

Security Affairs

JANUARY 2, 2019

In November, experts from ESET uncovered a massive spam campaign that was distributing the Emotet malware. ” The attack begins with an email message with a weaponized document that once opened will ask the victim to enable macros using social engineering tricks. SecurityAffairs – Emotet, malware).

Social Engineering 110

Social Engineering Advertising Malware Engineering 110

Security Affairs

FEBRUARY 19, 2019

Over the last few days, a phishing campaign from DHL and entitled “ DHL Shipment Notification ” has been targeted users worldwide distribution the Muncy malware. Now, the malware is targeting user’s worldwide and has been spread via phishing campaigns. The process flow diagram below shown how the malware works.

Malware 103

Malware Phishing DNS Engineering 103

Security Affairs

SEPTEMBER 20, 2019

Cofense researchers spotted a phishing campaign that is targeting taxpayers in the United States to infect them with the Amadey malware. Security experts at Cofense uncovered a phishing campaign that is targeting taxpayers in the United States attempting to infect them with a new piece of malware named Amadey.

Phishing 108

Phishing Social Engineering Malware Advertising 108

Security Affairs

JULY 29, 2018

state and local government agencies have reported receiving suspicious letters via snail mail containing malware-laden CD. state and local government agencies have reported receiving suspicious letters via snail mail containing malware-laden compact discs (CDs). Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Malware 75

Malware Social Engineering Government Advertising 75

Security Affairs

FEBRUARY 26, 2020

Researchers from Cybaze Yoroi ZLab have spotted a new campaign exploiting the interest in coronavirus (COVID-19) evolution to spread malware. The proof is the leverage of the current physical threat, the CoronaVirus (COVID-19), as a social engineering trick to infect the cyber world. Introduction. Technical Analysis.

Cyber Attacks 142

Cyber Attacks Malware Social Engineering Advertising 142

Security Affairs

AUGUST 21, 2020

Voice phishing is a form of criminal phone fraud, using social engineering over the telephone system to gain access to private personal and financial information for the purpose of financial reward. . Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Social Engineering 140

Social Engineering VPN Phishing Authentication 140

Security Affairs

MARCH 10, 2020

In human-operated ransomware attack scenario, attackers use stolen credentials, exploit misconfiguration and vulnerabilities to access target networks, attempt to escalate privileges and move laterally, and deliver malware and exfiltrate data. ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 144

Ransomware Cybercrime Social Engineering Banking 144

Security Affairs

APRIL 28, 2019

Threat actors leverage a multi-stage malware loader tracked as JasperLoader in the malspam campaigns over the past few months. The JasperLoader was observed while distributing malware to targets from Central Europe, most of them in Italy and Germany. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Malware 107

Malware Social Engineering Banking Advertising 107

Security Affairs

NOVEMBER 16, 2018

The TA505 operates on a large scale, it was behind other major campaigns leveraging the Necurs botnet to deliver other malware, including the Locky ransomware , the Jaff ransomware , and the Dridex banking Trojan. Hackers used the tRat malware to target users at commercial banking institutions. Pierluigi Paganini.

Malware 111

Malware Social Engineering Banking Advertising 111

Security Affairs

MAY 7, 2020

The modus operandi of this piece of malware is not new in Portugal. At least since the year of 2014 that new variants have been observed, with minor changes, and with the objective of collecting bank details of the victims. When malware initiates, it requests Google Drive documents for details on the C2’s IP address.

Banking 143

Banking Malware Phishing Advertising 143

Security Affairs

FEBRUARY 17, 2020

Hackers infected dozens of soldiers in recent months, but IDF declared that it has detected the attack, locked out the malware and took down attackers’ infrastructure. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Social Engineering 100

Social Engineering Media Advertising Spyware 100

Security Affairs

JANUARY 30, 2019

Nation-state hacking reduced the use of complex malware and appears to go towards low profile social engineering attacks. The main trends emerged in the 2018’s cyberthreat landscape are: Mail and phishing messages have become the primary malware infection vector. ” reads the ENISA Threat Landscape Report 2018.

Cyber threats 108

Cyber threats IoT Social Engineering Advertising 108

Security Affairs

MAY 21, 2020

The Chafer APT group has distributed data stealer malware since at least mid-2014, it was focused on surveillance operations and the tracking of individuals. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Government 126

Government Social Engineering Hacking Advertising 126

Security Affairs

SEPTEMBER 19, 2019

Emotet is back, its operators leverage a recently introduced spear-phishing technique to deliver their malware, they are hijacking legitimate email conversations. The operators are hijacking legitimate email threads as part of a social engineering attack. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Social Engineering 101

Social Engineering Malware Advertising Engineering 101

Security Affairs

SEPTEMBER 12, 2018

Researchers at Trend Micro have detected a new ransomware family, dubbed PyLocky, that was used in attacks between July and August, the malware was posing as the Locky ransomware using its ransom note. The PyLocky malware was distributed via spam emails most of which targeted European countries, particularly France.

Ransomware 110

Ransomware Encryption Malware Social Engineering 110

Security Affairs

AUGUST 27, 2020

They can then conduct elaborate phishing and social engineering attacks to gain access to the victims’ accounts on other digital services such as entertainment and shopping platforms or even online banking. Clicking on suspicious messages or any links therein is a risk that may result in your computer being infected with malware.

Social Engineering 145

Social Engineering Passwords Marketing Phishing 145

Security Affairs

NOVEMBER 29, 2020

A cyberattack crippled the IT infrastructure of the City of Saint John Hundreds of female sports stars and celebrities have their naked photos and videos leaked online Romanians arrested for running underground malware services Threat actor shared a list of 49,577 IPs vulnerable Fortinet VPNs Computer Security and Data Privacy, the perfect alliance (..)

Data breaches 105

Data breaches Social Engineering Ransomware Malware 105

Security Affairs

APRIL 25, 2019

. “An open redirect vulnerability could allow a remote unauthenticated attacker to input a malicious link to redirect users to a malicious site that could run or download arbitrary malware on the user’s machine.” This malicious website could potentially run or download arbitrary malware on the user’s machine.

Firmware 102

Firmware Social Engineering Advertising Malware 102

Security Affairs

JULY 19, 2019

He is suspected of large-scale production and selling of malware.” “The young man offered programs with names like Rubella, Cetan and Dryad, enabling the buyer to include secret code or malware in amongst others Word or Excel files.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Malware 98

Malware Social Engineering Advertising Antivirus 98

Security Affairs

AUGUST 27, 2019

Using compromised accounts, the threat actors send spearphishing emails with malicious Excel attachments to deliver the DanBot malware, which subsequently deploys post-intrusion tools.” The threat actors carried out spearphishing attacks using weaponized Excel attachments to deliver the DanBot malware. Pierluigi Paganini.

DNS 107

DNS Passwords Penetration Testing Social Engineering 107

Security Affairs

JUNE 25, 2020

There are two primary techniques to target Exchange servers; the most common scenario sees attackers launching social engineering or drive-by download attacks targeting endpoints to steal credentials and move laterally until they gain access to an Exchange server. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Social Engineering 144

Social Engineering Advertising Engineering Authentication 144