Threat Outbreak Alert RuleID25536: Email Messages Distributing Malicious Software on October 11, 2016

Medium Alert ID: 49247 First Published: 2016 October 11 20:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25536 may contain the following files: Name |...

Threat Outbreak Alert RuleID25309: Email Messages Distributing Malicious Software on October 11, 2016

Medium Alert ID: 49243 First Published: 2016 October 11 15:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25309 may contain the following files: Name |...

Threat Outbreak Alert RuleID25489: Email Messages Distributing Malicious Software on October 11, 2016

Medium Alert ID: 49242 First Published: 2016 October 11 15:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25489 may contain the following files: Name |...

MS16-120 and MS16-123: Description of the security update for kernel-mode drivers: October 11, 2016

None None...

Threat Outbreak Alert RuleID25481: Email Messages Distributing Malicious Software on October 10, 2016

Medium Alert ID: 49232 First Published: 2016 October 10 14:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25481 may contain the following files: Name |...

Threat Outbreak Alert RuleID25407: Email Messages Distributing Malicious Software on October 10, 2016

Medium Alert ID: 49231 First Published: 2016 October 10 14:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25407 may contain the following files: Name |...

Threat Outbreak Alert RuleID25467: Email Messages Distributing Malicious Software on October 7, 2016

Medium Alert ID: 49222 First Published: 2016 October 7 14:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25467 may contain the following files: Name |...

Threat Outbreak Alert RuleID25457: Email Messages Distributing Malicious Software on October 7, 2016

Medium Alert ID: 49221 First Published: 2016 October 7 14:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25457 may contain the following files: Name |...

Threat Outbreak Alert RuleID25483: Email Messages Distributing Malicious Software on October 7, 2016

Medium Alert ID: 49225 First Published: 2016 October 7 14:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25483 may contain the following files: Name |...

Threat Outbreak Alert RuleID25482: Email Messages Distributing Malicious Software on October 7, 2016

Medium Alert ID: 49224 First Published: 2016 October 7 14:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25482 may contain the following files: Name |...

Increased Use of WMI for Environment Detection and Evasion

Introduction Throughout the past few months, FireEye Labs has observed an increased use of Windows Management Instrumentation WMI queries for environment detection and evasion of dynamic analysis and virtualization engines. WMI provides high-level interaction with Windows objects using C/C++,...

On Virus Bulletin, APT False Flags, and the NSA Contractor Arrest

Mike Mimoso and Chris Brook discuss this week’s Virus Bulletin conference in Denver and CNBC’s Cambridge Cyber Summit at MIT, the NSA contractor arrest, APT false flags, and more. Download: ThreatpostNewsWrapOctober72016.mp3 Music by Chris Gonsalves...

Increased Use of WMI for Environment Detection and Evasion

Introduction Throughout the past few months, FireEye Labs has observed an increased use of Windows Management Instrumentation WMI queries for environment detection and evasion of dynamic analysis and virtualization engines. WMI provides high-level interaction with Windows objects using C/C++,...

Threat Outbreak Alert RuleID25469: Email Messages Distributing Malicious Software on October 6, 2016

Medium Alert ID: 49215 First Published: 2016 October 6 17:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25469 may contain the following files: Name |...

Threat Outbreak Alert RuleID25470: Email Messages Distributing Malicious Software on October 6, 2016

Medium Alert ID: 49216 First Published: 2016 October 6 17:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25470 may contain the following files: Name |...

Threat Outbreak Alert RuleID25261: Email Messages Distributing Malicious Software on October 6, 2016

Medium Alert ID: 49203 First Published: 2016 October 6 14:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25261 may contain the following files: Name |...

Threat Outbreak Alert RuleID25326: Email Messages Distributing Malicious Software on October 6, 2016

Medium Alert ID: 49208 First Published: 2016 October 6 14:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25326 may contain the following files: Name |...

Threat Outbreak Alert RuleID25324: Email Messages Distributing Malicious Software on October 6, 2016

Medium Alert ID: 49206 First Published: 2016 October 6 14:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25324 may contain the following files: Name |...

Threat Outbreak Alert RuleID25298: Email Messages Distributing Malicious Software on October 6, 2016

Medium Alert ID: 49205 First Published: 2016 October 6 14:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25298 may contain the following files: Name |...

Threat Outbreak Alert RuleID25265: Email Messages Distributing Malicious Software on October 6, 2016

Medium Alert ID: 49204 First Published: 2016 October 6 14:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25265 may contain the following files: Name |...