Lucene search
+L

6 matches found

ThreatPost
ThreatPost
added 2018/12/07 6:35 p.m.13 views

TA505 Crooks are Now Targeting US Retailers with Personalized Campaigns

Cybercriminals behind the notorious Dridex and Locky ransomware have a new target in their sights – large retail, restaurant and grocery chains located in the US. Researchers are warning the well-known financial criminal group TA505 is behind a new wave of email campaigns distributing personalize...

1AI score
SaveExploits0References4
ThreatPost
ThreatPost
added 2018/09/07 1:08 p.m.14 views

Threat Actors Eyeing IQY Files To Peddle Malspam

More threat actors are pushing weaponized Excel web query IQY files to deliver malicious code – as seen in recent campaigns by several major malspam distributors. Researchers at IBM X-Force this week disclosed that both the Necurs Botnet, as well as DarkHydrus and the threat actor behind the Mara...

SaveExploits0References6
ThreatPost
ThreatPost
added 2018/08/17 6:47 p.m.11 views

Unique Malspam Campaign Uses MS Publisher to Drop a RAT on Banks

UPDATE A malspam campaign targeting a slew of banks is turning researchers’ heads with its unusual use of a Microsoft Office Publisher file to infect victims’ systems with a well-known backdoor. Researchers with Trustwave said that they have seen a spate of emails with a Microsoft Office Publishe...

7.4AI score
SaveExploits0References5
ThreatPost
ThreatPost
added 2018/07/20 8:57 p.m.52 views

Massive Malspam Campaign Finds a New Vector for FlawedAmmyy RAT

A widespread spam campaign from the well-known financial criminal group TA505 is spreading the FlawedAmmyy RAT using a brand-new vector: Weaponized PDFs containing malicious SettingContent-ms files. The SettingContent-ms file format was introduced in Windows 10; it allows a user to create...

0.1AI score
SaveExploits0References4
ThreatPost
ThreatPost
added 2018/06/08 8:31 p.m.21 views

Creative Spam Thinks Outside the Macro with .IQY Attachments

The Necurs botnet is driving a fresh spam campaign that uses Excel Web Query .IQY file attachments to skim under the antivirus radar. If successful, the attack ultimately delivers the remote access trojan RAT known as FlawedAmmyy. This is the third wave in an offensive that started in late May. T...

0.4AI score
SaveExploits0References8
HackRead
HackRead
added 2018/03/09 3:20 p.m.59 views

New FlawedAmmyy RAT steals data and intercepts audio chat

By Waqas The FlawedAmmyy RAT has been developed using the leaked source This is a post from HackRead.com Read the original post: New FlawedAmmyy RAT steals data and intercepts audio chat...

7AI score
SaveExploits0
Rows per page
Query Builder