Security Affairs

SEPTEMBER 7, 2020

Recent spam campaigns used messages with malicious Word documents, or links to them, pretending to be an invoice, shipping information, COVID-19 information , resumes, financial documents, or scanned documents. Generally speaking, removal/cleaning by antivirus is not a sufficient guarantee.

Malware 115

Malware Advertising Antivirus Banking 115

Security Affairs

SEPTEMBER 20, 2019

Security experts at Cofense uncovered a phishing campaign that is targeting taxpayers in the United States attempting to infect them with a new piece of malware named Amadey. Experts revealed that the botnet was used by the TA505 cybercrime gang to distribute the FlawedAmmy RAT and some email stealers.

Phishing 84

Phishing Social Engineering Malware Advertising 84

Security Affairs

JANUARY 7, 2021

“Both exchanges require identity documents in order to exchange cryptocurrencies for fiat or to make transfers to banks, however it isn’t clear if the documents they accept are scrutinized in any meaningful way. ” If you want to receive the weekly Security Affairs Newsletter for free subscribe here.

Ransomware 133

Ransomware Cryptocurrency Antivirus Banking 133

Security Affairs

AUGUST 31, 2022

Upon opening the document, a malicious template file is downloaded and saved on the system. At the time of publication, this particular file is undetected by all antivirus vendors according to VirusTotal” The Base64 encoded payload, once decrypted, is a Windows 64-bit executable (1.7MB) called “msdllupdate.exe.”.

Malware 87

Malware DNS Antivirus Encryption 87

Security Affairs

MARCH 19, 2020

“The purpose of this document is to describe the operating mode used during these attacks and the associated compromise indicators, then to provide recommendations to limit the impact of this type of incident.” SecurityAffairs – Pysa ransomware, cybercrime). ” reads the issued by French CERT. Pierluigi Paganini.

Government 108

Government Ransomware Encryption Penetration Testing 108

Security Affairs

DECEMBER 7, 2019

“According to the indictment, Bugat is a malware specifically crafted to defeat antivirus and other protective measures employed by victims. For over a decade, Maksim Yakubets and Igor Turashev led one of the most sophisticated transnational cybercrime syndicates in the world,” said U.S. Attorney Brady. Treasury Department.

Banking 69

Banking Malware Cybercrime Accountability 69

Security Affairs

JULY 19, 2019

” Both macro builders allow crooks to easily create malicious Office documents that are usually involved in hacking campaigns as a first-stage loader for other malware. According to Flashpoint , Rubella is not particularly sophisticated, the builder is used to create Microsoft Word or Excel weaponized documents to use in spam email.

Malware 69

Malware Social Engineering Advertising Antivirus 69

Security Affairs

NOVEMBER 19, 2019

To bypass antivirus systems, hackers send out malicious emails in non-working hours with delayed activation. The first half of 2019 saw a 10-fold increase in the number of password-protected objects, such as documents and archive files, being used to deliver malware. More than 80% of all malicious files were disguised as .zip

Ransomware 70

Ransomware Antivirus Malware Banking 70

Security Affairs

MARCH 14, 2022

In addition, most artifacts extracted also matched a threat documented in 2020 and available here. At this moment, the infection chain is able to bypass the antivirus detection, with the latter EXE ( WpfApp14.exe Maxtrilha – one of the most active trojans in Portugal – uses the same templates to target users.

Banking 91

Banking Encryption Malware Phishing 91

Security Affairs

MAY 29, 2019

Information about initial dropper. The document is weaponized with malicious macro code triggered when the user opens the document to see the content under the obfuscated view. XLS document. Information about MPress packer used in “winserv.exe” payload. Part of the macro’s content is shown in the following figure.

Retail 68

Retail Banking Advertising Encryption 68

Security Affairs

JULY 28, 2020

The document uncovers major players and driving forces of a criminal digital piracy syndicate which has been flourishing in the post-Soviet space, its safe harbor, for years and now has extended its tentacles as far as to Latin America and Asia. Group-IB exposes financial crime network of online pirates in developing countries.“

Marketing 69

Marketing Banking Advertising Cybercrime 69

Security Affairs

APRIL 10, 2019

This threat is known as a banking trojan malware that collects financial information by injecting malicious code into a computer. That file was delivered via malscam campaigns around the world and its source-code is obfuscated in order to evade antivirus detection and complicate its analysis.

Banking 61

Banking Malware Antivirus Cyber threats 61

Security Affairs

SEPTEMBER 7, 2020

A recently discovered cybercrime gang, tracked as Epic Manchego , is using a new technique to create weaponized Excel files that are able to bypass security checks. The phishing messages carry weaponized Excel documents that are able to bypass security checks and that had low detection rates. EPPlus is such a tool.”

Cybercrime 99

Cybercrime Phishing Advertising Antivirus 99

CyberSecurity Insiders

NOVEMBER 25, 2021

5 Cyber Security Best Practices to Protect Your Business Data. Today, any company can fall victim to cybercrime, which has become a major problem around the world. That’s why large, medium-sized, and small businesses need to become more proactive in their approach to cyber security. . . Source [link]. Back Up Your Data.

Computers and Electronics 120

Computers and Electronics Cyber Attacks Data breaches Passwords 120

Security Affairs

MARCH 29, 2023

. “However, even if you do download a rogue file masked as something else, using a decent antivirus solution or uploading the file to VirusTotal could help identify any malicious intent” If you want to have full confidence that your system was not infected with clipper malware copy a wallet address and paste it into a text document.

Malware 90

Malware Passwords Cryptocurrency Antivirus 90

ForAllSecure

JUNE 21, 2022

Hanslovan: So we noticed it was a trend like all things cat and mouse base and hackers were really getting ticked off that their malicious payloads were getting caught by the antivirus. Why don't I use the trusted ones that I'll get by antivirus. So good tactic it can be deployed both ways cybercrime and more traditional espionage.

Ransomware 52

Ransomware Marketing Software Antivirus 52

CyberSecurity Insiders

NOVEMBER 1, 2021

“The security risks of remote working have been well documented. And, the system must be intuitive and convenient, so executives remain within its workflows and processes without straying to other systems and creating security gaps. Jon Clemenson, director of information security, TokenEx.

Cybersecurity 52

Cybersecurity Backups Ransomware Passwords 52

Malwarebytes

MAY 21, 2023

For example, Malwarebytes asked ChatGPT to write the opening paragraph of a novel about an antiquated antivirus program that relies on signature-based detection to stop new and emerging threats. Here's what the program came back with: “The antivirus program blinked to life, its archaic interface flickering on the outdated CRT monitor.

Cybersecurity 85

Cybersecurity Artificial Intelligence Social Engineering Engineering 85