New XLoader Botnet Version Using Probability Theory to Hide its C&C Servers

An enhanced version of the XLoader malware has been spotted adopting a probability-based approach to camouflage its command-and-control C&C infrastructure, according to the latest research. "Now it is significantly harder to separate the wheat from the chaff and discover the real C&C servers amon...

The devil’s in the Rich header

In our previous blog, we detailed our findings on the attack against the Pyeongchang 2018 Winter Olympics. For this investigation, our analysts were provided with administrative access to one of the affected servers, located in a hotel based in Pyeongchang county, South Korea. In addition, we...

Abandoned Mobile C&C Servers Present Opportunity to Attackers

DENVER—When developers build mobile apps, they’re not only coding functionality, but they’re also dragging in third-party software development kits SDKs for ads, analytics and lots of things in between. A big function of SDKs is to communicate with a central server to receive instructions and...

More on Cybersecurity

For more information on targeted attacks, cyberwarfare and cyberespionage: Experts Say CEOs Need to Get Handle on Cyberespionage Problem Red October Attackers Shutting Down C&C Infrastructure Howard Schmidt Answered the Bell A Podcast with Howard Schmidt An Interview with Eugene Kaspersky...

Red October Attackers Shutting Down C&C Infrastructure

It appears that the attackers behind the Red October cyberespionage campaign are taking their ball and going home. Since the attack came to light on Monday, the attackers have begun shutting down their infrastructure and the hosting providers and registrars involved with some of the...