Threat Intelligence Archives - Security Boulevard

Avast Threat Labs analysis of CCleaner incident

by Jas Dhaliwal on September 22, 2017

Experts at Avast Threat Labs have been analyzing the CCleaner advanced persistent threat (APT) continuously for the past few days and apart from the information in recent blog posts (Piriform and Avast posts), we are starting a series of technical blog posts describing details and technical information that we encountered during our analysis. Today, we will cover the ongoing analysis of the CnC server and the 2nd stage payload.
Read more

SBN Threat Intelligence

What History Teaches Us About Today’s Insider Threats

by Noah Powers on September 21, 2017

While insider threat attacks continue to make waves in the news, the origins of insider threats go back decades and even centuries. Insiders have emerged in religious texts, insiders have ... The post What History Teaches Us About Today’s Insider Threats appeared first on Delta Risk.
Read more

Endpoint Malware SBN Threat Intelligence Threats & Breaches

How BitPaymer ransomware covers its tracks

by Bill Brenner on September 21, 2017

This BitPaymer malware variant uses tricks that you don't usually see in ransomware - but it still scrambles your files in the end.
Read more

Cyberlaw SBN Threat Intelligence

McAfee joins the anti-Kaspersky witch hunt in shitty attempt to sell a few boxes

by Graham Cluley on September 21, 2017

A witch hunt against a long-established major player in the infosecurity space should be something that brings the industry together. It's ghastly to see how McAfee is behaving.
Read more

Cyberlaw Data Security SBN Threat Intelligence Threats & Breaches

Hackers holds entire school district to ransom

by Lisa Vaas on September 21, 2017

The hacking group stole personal information and sent explicit death threats against children to their parents.
Read more

Malware SBN Threat Intelligence Threats & Breaches

Fake IRS notice delivers customized spying tool

by Jérôme Segura on September 21, 2017

Threat actors leverage a Microsoft Office exploit to spy on their victims. In this blog post, we will review its delivery mechanism and analyze the malware we observed, a modified version of a commercial Remote Administration Tool (RAT). Categories: Malware Threat analysis Tags: CP2000CVE-2017-0199docexploitIRSmalspammalwareOfficephishingratremote administration toolRMSspyword (Read more...) The post Fake IRS notice delivers customized spying tool appeared first on Malwarebytes Labs.
Read more

Threat Intelligence

News in brief: DDoS threat spam; Army logic bomber; Viacom leak

Using infrared cameras to break out of air-gapped networks