North Korean Hackers Target Developers with Malicious npm Packages

Threat actors with ties to North Korea have been observed publishing a set of malicious packages to the npm registry, indicating "coordinated and relentless" efforts to target developers with malware and steal cryptocurrency assets. The latest wave, which was observed between August 12 and 27,...

Zusy Malware Installs Via Mouseover – No Clicking Required

Researchers are warning of several recent spam campaigns delivering PowerPoint files that when opened contain a mouseover link that installs a variant of the Zusy malware. The malware is novel because it does not rely on macros, JavaScript or VBA macros to be enabled for the dropper file to...

Researchers Struggle to Get A Grip On Fileless Malware

The future of client-side malware attacks is fileless. And it would appear the future has arrived with a growing number of attacks using fileless or in-memory malware to pose a threat to business that’s increasingly difficult to neutralize. “There has been an unequivocal uptick in the use of...

Kris McConkey on OpSec Failures

At last week’s Security Analyst Summit Kris McConkey, part of PricewaterhouseCoopers’ UK Cyber Threat Operations team, discusses hacker OpSec failures: How attackers are still humans and sometimes make mistakes like using personal email addresses and real names in their campaigns...

Threat Outbreak Alert: Fake Payment Receipt Email Messages on June 19, 2013

Medium Alert ID: 29707 First Published: 2013 June 19 14:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain a payment receipt for the recipient. The email message instructs the recipient to open the...

Threat Outbreak Alert: Fake Shipment Invoice Notification Email Messages on June 13, 2013

Low Alert ID: 29669 First Published: 2013 June 14 12:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a DHL shipment invoice. The text in the email message attempts to convince the recipient to open the attachment and...

Threat Outbreak Alert: Fake Bank Payment Transfer Notification Email Messages on June 13, 2013

Low Alert ID: 29667 First Published: 2013 June 14 12:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank transfer notification for the recipient. The text in the email message attempts to convince the recipient to...