Honeypot strategy is no longer effectively preventing spam account signup

panel:title=Fix From 3.9.5 onwards we have turned off the honeypot in favour of using captcha anyone affected by this issue just needs to switch the CAPTCHA on...

Hermes ransomware distributed to South Koreans via recent Flash zero-day

This blog post was authored by @hasherezade, Jérôme Segura and Vasilios Hioureas. At the end of January, the South Korean Emergency Response Team KrCERT published news of a Flash Player zero-day used in targeted attacks. The flaw, which exists in Flash Player 28.0.0.137 and below, was distributed...

Hancitor: fileless attack with a DLL copy trick

This article was authored by David Sánchez, Mickaël Roger, and Jérôme Segura During the past few years, malicious spam campaigns have proven to be one of the most efficient infection vectors, in part due to a combination of social engineering and a regular number of Office vulnerabilities. The...

Gozi ISFB Remains Active in 2018, Leverages "Dark Cloud" Botnet For Distribution

This blog post was authored by Edmund Brumaghin and Holger Unterbrink, with contributions from Adam Weller. Executive Summary Gozi ISFB is a well-known and widely distributed banking trojan, and has been in the threat landscape for the past several years. Banking trojans are a type of malware tha...

Threat Outbreak Alert RuleID32146: Email Messages Distributing Malicious Software on February 28, 2018

Medium Alert ID: 56959 First Published: 2018 February 28 18:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32146 may contain the following files: Name |...

Massive Spam Campaign Targets Unpatched Systems

Cybercriminals are leveraging a recently patched critical Adobe Flash Player vulnerability in a massive spam campaign targeting unpatched computers. According to cybersecurity firm Morphisec, cybercriminals are blasting spam messages that urge recipients to click a link to download a Word documen...

Threat Outbreak Alert RuleID32138: Email Messages Distributing Malicious Software on February 27, 2018

Medium Alert ID: 56944 First Published: 2018 February 27 17:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32138 may contain the following files: Name |...

Threat Outbreak Alert RuleID32145: Email Messages Distributing Malicious Software on February 27, 2018

Medium Alert ID: 56946 First Published: 2018 February 27 17:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32145 may contain the following files: Name |...

Threat Outbreak Alert RuleID32149: Email Messages Distributing Malicious Software on February 27, 2018

Medium Alert ID: 56948 First Published: 2018 February 27 16:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32149 may contain the following files: Name |...

Threat Outbreak Alert RuleID32152: Email Messages Distributing Malicious Software on February 27, 2018

Medium Alert ID: 56947 First Published: 2018 February 27 16:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32152 may contain the following files: Name |...

Cisco Email Security Appliance and Cisco Content Security Management Appliance Information Disclosure Vulnerability

Cisco Email Security Appliance ESA and Cisco Content Security Management Appliance SMA are both products of Cisco USA.Cisco ESA is a set of email security appliances, which provides spam protection, email encryption, data loss protection and other functions. Cisco ESA is an email security applian...

Threat Outbreak Alert RuleID32100: Email Messages Distributing Malicious Software on February 26, 2018

Medium Alert ID: 56936 First Published: 2018 February 26 18:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32100 may contain the following files: Name |...

Threat Outbreak Alert RuleID31955: Email Messages Distributing Malicious Software on February 26, 2018

Medium Alert ID: 56935 First Published: 2018 February 26 18:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31955 may contain the following files: Name |...

Threat Outbreak Alert RuleID31935: Email Messages Distributing Malicious Software on February 26, 2018

Medium Alert ID: 56934 First Published: 2018 February 26 18:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31935 may contain the following files: Name |...

Threat Outbreak Alert RuleID32131: Email Messages Distributing Malicious Software on February 26, 2018

Medium Alert ID: 56940 First Published: 2018 February 26 17:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32131 may contain the following files: Name |...

Threat Outbreak Alert RuleID32119: Email Messages Distributing Malicious Software on February 26, 2018

Medium Alert ID: 56939 First Published: 2018 February 26 16:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32119 may contain the following files: Name |...

The state of malicious cryptomining

While cryptocurrencies have been around for a long time and used for legitimate purposes, online criminals have certainly tarnished their reputation. Unfortunately, the same benefits offered by these decentralized and somewhat anonymous digital currencies were quickly abused to extort money, as w...

Threat Outbreak Alert RuleID32125: Email Messages Distributing Malicious Software on February 23, 2018

Medium Alert ID: 56927 First Published: 2018 February 23 18:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32125 may contain the following files: Name |...

Threat Outbreak Alert RuleID32110: Email Messages Distributing Malicious Software on February 23, 2018

Medium Alert ID: 56923 First Published: 2018 February 23 18:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32110 may contain the following files: Name |...

Threat Outbreak Alert RuleID32085: Email Messages Distributing Malicious Software on February 23, 2018

Medium Alert ID: 56922 First Published: 2018 February 23 18:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32085 may contain the following files: Name |...