Tag: 2024-05-05

This analysis reveals that malicious groups have been exploiting popular YouTube channels, including some with over 800,000 subsc…

The report details an ongoing malware campaign targeting South Korean users, which disguises malicious payloads as cracked versio…

Juniper Threat Labs has observed attempts to exploit Ivanti Pulse Secure authentication bypass and remote code execution vulnerab…

This analysis delves into the activities of a group of malware operators known as Cerberus (formerly Amnesia) Team, who specializ…

Scattered Spider, a financially motivated threat actor group, has been conducting aggressive phishing campaigns targeting various…

This analysis discusses the emergence of a new macOS malware family called 'Cuckoo Stealer', which acts as an infostealer and spy…

This comprehensive analysis provides a thorough examination of the REMCOS Remote Access Trojan (RAT), a prominent malware threat …

A recent surge of malicious JavaScript code has been observed targeting websites using vulnerable versions of the LiteSpeed Cache…

This intelligence report details a sophisticated infection chain that culminates in the deployment of AsyncRAT, a potent malware …

The CERT Polska team is investigating a large-scale malware campaign carried out by the Russian intelligence group APT28, which h…

Amid the rise of bootkits at the time, a dropper was captured in-the-wild and posted on a malware tracker. The malware was called…

This report details the analysis of a malspam campaign utilizing the Matanbuchus loader, which involved decrypting strings within…

This report details the operation of the zEus stealer malware, which is distributed through a crafted Minecraft source pack. The …

This report examines a malware strain distributed to web servers in South Korea that redirects users to an illegal gambling site.…

Security researchers have discovered a campaign distributing RemcosRAT through a sophisticated infection chain involving steganog…

HijackLoader, also known as IDAT Loader, is a modular malware loader capable of executing multiple payloads. It utilizes a variet…

This analysis delves into the continuous distribution of malicious shortcut files (*.LNK) targeting South Korean users, particula…

CYFIRMA researchers identified an Android malware campaign, active for over a year, targeting Indian defense personnel by an unid…

Virus analysts at Doctor Web uncovered an Android application containing a clicker trojan that silently opens advertising sites a…