SecuriTricks - malspam

Lumma Stealer Malware Thrives as Unique Patterns Uncovered in the Infostealer's Domain Clusters

Recent research reveals Lumma Stealer command and control domain clusters share specific technical characteristics, enabling mapping of entire infrastructure clusters. The infostealer's logs are being shared for free on Leaky[.]pro, a new hacking forum, offering billions of stolen credential record…

malvertising

infostealer

Published: February 22, 2025

Downloadable IOCs: 0

Malware Distributed Using Falcon Sensor Update Phishing Lure

CrowdStrike Intelligence uncovered a phishing campaign impersonating CrowdStrike and distributing malicious files containing a Microsoft Installer (MSI) loader. The loader executes the commodity stealer 'Lumma Stealer' packed with 'CypherIt'. This campaign is likely linked to a previous 'Lumma Stea…

Published: July 29, 2024

Downloadable IOCs: 32

DarkGate switches up its tactics with new payload, email templates

This analysis delves into a recent surge of malicious email campaigns by the DarkGate threat actor, employing novel tactics to distribute malware. These campaigns leverage a technique called 'Remote Template Injection' to bypass security controls and deceive recipients into executing malicious code…

Published: June 6, 2024

Downloadable IOCs: 12

Files with TXZ extension used as malspam attachments

A recent report describes a malspam campaign distributing malware payloads in attachments with TXZ file extensions. The attachments were RAR archives with renamed extensions, likely attempting to exploit native TXZ support in Windows 11. Two campaigns distributed the payloads, one with GuLoader mal…

Published: May 28, 2024

Downloadable IOCs: 2

Security Brief: Millions of Messages Distribute LockBit Black Ransomware

In late April 2024, Proofpoint observed high-volume email campaigns facilitated by the Phorpiex botnet, distributing millions of messages with attachments leading to LockBit Black ransomware infections. The messages appeared to originate from 'Jenny Green' and contained ZIP attachments with executa…

Published: May 13, 2024

Downloadable IOCs: 16

Tag: malspam

Attack reports

Inside DesckVB Rat Analysis: From Malspam to In-Memory RAT

Thousands of Fake Hotel Domains Used in Massive Phishing Campaign

Stealthy .NET Malware: Hiding Malicious Payloads as Bitmap Resources

CVE-2025-24054, NTLM Exploit in the Wild

PhaaS actor uses DoH and DNS MX to dynamically distribute phishing

Lumma Stealer Malware Thrives as Unique Patterns Uncovered in the Infostealer's Domain Clusters

Malware Distributed Using Falcon Sensor Update Phishing Lure

DarkGate switches up its tactics with new payload, email templates

Files with TXZ extension used as malspam attachments

Security Brief: Millions of Messages Distribute LockBit Black Ransomware