Security Affairs

NOVEMBER 3, 2022

On the other end, FIN7 is a Russian financially motivated group that has been active since at least 2015. It focused on deploying POS malware and launching targeted spear-phishing attacks against organizations worldwide. The threat actors were disabling Windows Defender executing the following scripts: WindowsILUg69ql1.bat

Cybercrime 90

Cybercrime Ransomware Antivirus Malware 90

Security Affairs

OCTOBER 23, 2019

Flaws in Avast, AVG, and Avira Antivirus could be exploited by an attacker to load a malicious DLL file to bypass defenses and escalate privileges. “this vulnerability could have been used in order to achieve self-defense bypass, defense evasion, persistence and privilege escalation.” Pierluigi Paganini.

Antivirus 50

Antivirus Advertising Security Defenses Hacking 50

Krebs on Security

JULY 8, 2019

But GandCrab far eclipsed the success of competing ransomware affiliate programs largely because its authors worked assiduously to update the malware so that it could evade antivirus and other security defenses. It remains unclear how many individuals were active in the core GandCrab malware development team.

Ransomware 260

Ransomware Accountability Cybercrime Passwords 260

Security Affairs

JULY 19, 2019

He is suspected of large-scale production and selling of malware.” “The young man offered programs with names like Rubella, Cetan and Dryad, enabling the buyer to include secret code or malware in amongst others Word or Excel files.” The macro might also purposely attempt to bypass endpoint security defenses. .

Malware 67

Malware Social Engineering Advertising Antivirus 67

SecureList

APRIL 27, 2021

In our initial report on Sunburst , we examined the method used by the malware to communicate with its C2 (command-and-control) server and the protocol used to upgrade victims for further exploitation. This campaign made use of a previously unknown malware family we dubbed FourteenHi.

Malware 142

Malware Spyware Government Social Engineering 142