Fake Windows Defender Antivirus Theme Used to Spread QBot

Fake Windows Defender Antivirus Theme Used to Spread QBot

Digital attackers incorporated a fake Windows Defender Antivirus theme into a malicious document in order to distribute QBot malware. According to Bleeping Computer, the QBot gang began using a new template for ...
BlackRock Malware Goes After Banking, Social and Other Mobile Apps

BlackRock Malware Goes After Banking, Social and Other Mobile Apps

A new banking malware is pushed on Android devices, and it’s using source code from the older, now defunct, Xerxes, and an even older variant called LokiBot. The attackers target apps that ...
Emotet Operators Are Using Wuhan Virus Info to Spread Malware

Emotet Operators Are Using Wuhan Virus Info to Spread Malware

Emotet operators are looking to pray on people’s fears to spread malware through malicious emails. In this case, they are using the real health crisis of the coronavirus outbreak in China. Using ...
Shlayer Trojan Accounted for 30 Percent of Detections for macOS in 2019

Shlayer Trojan Accounted for 30 Percent of Detections for macOS in 2019

The Shlayer trojan accounted for approximately 30 percent of all of Kaspersky Lab’s malware detections for the macOS platform in 2019. Kaspersky Lab revealed on Securelist that Shlayer has been the most ...
Automation giant Pilz halts operations for a week after ransomware infection

Automation giant Pilz halts operations for a week after ransomware infection

Pilz, the German automation company, is still struggling to recover more than a week after it was infected with the BitPaymer ransomware strain. A notice on the company’s website reveals that Pilz ...
ransom

A Closer Look at the Emotet Banking Trojan

Banking trojans can be one of the most financially damaging pieces of malware to infect computers. Banking trojans are typically seen as any piece of malicious software designed to gain access to ...
Security Boulevard
If you have any of these 24 Android apps installed, delete them now!

If you have any of these 24 Android apps installed, delete them now!

Security researchers are sounding the alarm over 24 Android apps laced with a stealthy trojan that signs you up for a costly subscription without your permission. If you’ve downloaded any of the ...
An Analysis of L0rdix RAT, Panel and Builder

An Analysis of L0rdix RAT, Panel and Builder

L0rdix is a multipurpose remote access tool (RAT) that was first discovered being sold on underground criminal forums in November 2018. Shortly after its discovery, Ben Hunter of enSilo analysed the RAT’s ...
Protect Before You Detect: FlawedAmmyy and the Case for Isolation

Protect Before You Detect: FlawedAmmyy and the Case for Isolation

Posted by Ratnesh Pandey, Alex Holland and Toby Gray. In June 2019, Microsoft issued warnings about a phishing campaign delivering a new variant of the FlawedAmmyy remote access Trojan (RAT), and a ...
Figure 1 – Monero’s value in USD from December 2018 to June 2019, source - CoinGecko.com

Cryptojacking: An Unwanted Guest

We analyse a cryptojacking attack that mines the Monero cryptocurrency. The value of Monero in US dollars has more than doubled over the first half of 2019, from $46 to $98. The ...