What’s in your notepad? Infected text editors target Chinese users – Source: securelist.com

by | Mar 14, 2024 | Apple MacOS, backdoor, Cyber Security News, linux, Malware, Malware Descriptions, Malware Technologies, rss-feed-post-generator-echo, securelist.com, Trojan, Unix and macOS malware

Source: securelist.com – Author: Sergey Puzan “Malvertising” is a popular way of attracting victims to malicious sites: an advertisement block is placed at the top of the search results, increasing the likelihood of users clicking the link. Sites at the top of search...

HrServ – Previously unknown web shell used in APT attack – Source: securelist.com

by | Nov 22, 2023 | APT, APT (Targeted attacks), APT reports, Cyber Security News, Malware, Malware Descriptions, Malware Technologies, rss-feed-post-generator-echo, securelist.com, Targeted attacks

Source: securelist.com – Author: Mert Degirmenci Introduction In the course of our routine investigation, we discovered a DLL file, identified as hrserv.dll, which is a previously unknown web shell exhibiting sophisticated features such as custom encoding methods for...

Ducktail fashion week – Source: securelist.com

by | Nov 10, 2023 | Browser Plugins, Cyber Security News, facebook, Malware, Malware Descriptions, Malware Technologies, rss-feed-post-generator-echo, securelist.com, Targeted attacks, Trojan, Trojan-stealer, Windows malware

Source: securelist.com – Author: AMR Ducktail is a malware family that has been active since the second half of 2021 and aims to steal Facebook business accounts. Kaspersky Daily Iran, WithSecure, and GridinSoft have all covered Ducktail attacks: the infostealer...

WhatsApp spy mod spreads through Telegram, attacks Arabic-speaking users – Source: securelist.com

by | Nov 2, 2023 | cyber espionage, Cyber Security News, Google Android, Instant Messengers, Malware, Malware Descriptions, Malware Statistics, mobile malware, Mobile threats, rss-feed-post-generator-echo, securelist.com, Telegram, Trojan, Trojan-Spy, WhatsApp

Source: securelist.com – Author: Dmitry Kalinin It is not rare that users of popular instant messaging services find the official client apps to be lacking in functionality. To address that problem, third-party developers come up with mods that offer sought-after...

A cascade of compromise: unveiling Lazarus’ new campaign – Source: securelist.com

by | Oct 27, 2023 | APT (Targeted attacks), APT reports, backdoor, Cyber Security News, Lazarus, Malware Descriptions, Malware Technologies, rss-feed-post-generator-echo, securelist.com, Targeted attacks, Vulnerabilities and exploits

Source: securelist.com – Author: Seongsu Park APT reports APT reports 27 Oct 2023 minute read Earlier this year, a software vendor was compromised by the Lazarus malware delivered through unpatched legitimate software. What’s remarkable is that these software...

StripedFly: Perennially flying under the radar – Source: securelist.com

by | Oct 26, 2023 | APT (Targeted attacks), APT reports, Cyber Security News, data theft, encryption, ETERNALBLUE, linux, Malware Descriptions, Malware Technologies, Miner, rss-feed-post-generator-echo, securelist.com, Targeted attacks, Tor, Unix and macOS malware

Source: securelist.com – Author: Sergey Belov, Vilen Kamalov, Sergey Lozhkin Introduction It’s just another cryptocurrency miner… Nobody would even suspect the mining malware was merely a mask, masquerading behind an intricate modular framework that supports both...