Threat Intelligence

HermeticWiper: A detailed analysis of the destructive malware that targeted Ukraine

March 4, 2022 - Hours before the invasion of Ukraine by Russian forces, a new piece of malware was launched at Ukrainian targets. In this blog post, we take apart its components and highlight its capabilities.

Threat Intelligence

North Korea’s Lazarus APT leverages Windows Update client, GitHub in latest campaign

January 27, 2022 - How one of North Korea's most sophisticated APTs tries to avoid detection by using legitimate tools during its attacks.

Threat Intelligence

Malwarebytes CrackMe – contest summary

November 19, 2021 - We announce the results of the 3rd Malwarebytes Crackme!

Threat Intelligence

The return of the Malwarebytes CrackMe

October 29, 2021 - The Malwarebytes CrackMe challenge is back!

Threat Intelligence

AvosLocker enters the ransomware scene, asks for partners

July 23, 2021 - We examine AvosLocker, a new ransomware aiming to grow into the coveted big game hunting space.

Threat Intelligence

Revisiting the NSIS-based crypter

May 31, 2021 - In this blog we look at the constantly evolving NSIS crypter which malware authors have been leveraging as a flexible tool to pack and encrypt their samples.

Threat Intelligence

A deep dive into Saint Bot, a new downloader

April 6, 2021 - Saint Bot is a downloader that has been used to drop stealers. We take a deep look at it and its accompanying panel.

Malware | Threat analysis | Threat Intelligence

Cleaning up after Emotet: the law enforcement file

January 29, 2021 - Following global law enforcement action to take over the Emotet botnet, a special update is being sent to clean up infected machines.

Malware | Threat analysis | Threat Intelligence

German users targeted with Gootkit banker or REvil ransomware

November 30, 2020 - After a noted absence, the Gootkit banking Trojan returns en masse to hit Germany. In an interesting twist, some of the victims may receive ransomware instead.

Cybercrime | Social engineering | Threat Intelligence

Fake COVID-19 survey hides ransomware in Canadian university attack

October 28, 2020 - Universities are a hot target for malware right now. In this latest attack, a threat actor was targeting the University of British Columbia with the goal of distributing ransomware.