‘Sliver’ Emerges as Cobalt Strike Alternative for Malicious C2
Microsoft and others say they have observed nation-state actors, ransomware purveyors, and assorted cybercriminals pivoting to an open source attack-emulation…
The Week in Ransomware – August 19th 2022 – Evolving extortion tactics
Bringing you the latest ransomware news, including new research, tactics, and cyberattacks. We also saw the return of the BlackByte…
Grandoreiro banking malware targets manufacturers in Spain, Mexico
The notorious 'Grandoreiro' banking trojan was spotted in recent attacks targeting employees of a chemicals manufacturer in Spain and workers…
Malware devs already bypassed Android 13’s new security feature
Android malware developers are already adjusting their tactics to bypass a new 'Restricted settings' security feature introduced by Google in the…
SOVA malware adds ransomware feature to encrypt Android devices
The SOVA Android banking trojan continues to evolve with new features, code improvements, and the addition of a new ransomware…
Novel Ransomware Comes to the Sophisticated SOVA Android Banking Trojan
Unusually, SOVA, which targets US users, now allows lateral movement for deeper data access. Version 5 adds an encryption capability.
QBot phishing uses Windows Calculator sideloading to infect devices
The operators of the QBot malware have been using the Windows Calculator to side-load the malicious payload on infected computers.…
In Switch, Trickbot Group Now Attacking Ukrainian Targets
Latest campaigns are a break from its usual financially motivated attacks and appear aligned with Russian interests, security researchers say.
Fake copyright complaints push IcedID malware using Yandex Forms
Website owners are being targeted with fake copyright infringement complaints that utilize Yandex Forms to distribute the IcedID banking malware.…
The Week in Ransomware – July 1st 2022 – Bug Bounties
It has been relatively busy this week with new ransomware attacks unveiled, a bug bounty program introduced, and new tactics…