Exploit kits: winter 2019 review

Threat analysis | Exploits

New critical vulnerability discovered in open-source office suites

February 6, 2019 - A security researcher recently published a proof of concept exploit for open-source office software LibreOffice and OpenOffice. Will this new vulnerability be used in the wild?

Threat analysis | Malware

Analyzing a new stealer written in Golang

January 30, 2019 - We captured a new information-stealing malware written in Golang (Go). Read up on our analysis of its functionality, as well as the tools researchers can use to unpack malware written in this relatively new programming language.

Threat analysis | Exploits

Improved Fallout EK comes back after short hiatus

January 17, 2019 - The Fallout exploit kit is back with some noteworthy improvements.

Threat analysis | Criminals

Vidar and GandCrab: stealer and ransomware combo observed in the wild

January 4, 2019 - Threat actors combine new stealer Vidar and GandCrab ransomware in one-two punch.

Threat analysis | Exploits

Underminer exploit kit improves in its latest iteration

December 21, 2018 - We take a look at some recent changes with the elusive Underminer exploit kit.

Threat analysis | Mac

Flurry of new Mac malware drops in December

December 11, 2018 - Multiple new pieces of Mac malware have appeared in December, all distributed through different means, but all opening backdoors on infected computers.

Threat analysis | Mac

Mac malware combines EmPyre backdoor and XMRig miner

December 7, 2018 - New Mac malware is using the EmPyre backdoor and the XMRig cryptominer to drain processor power—and possibly worse.

Threat analysis | Social engineering

Are Deepfakes coming to a scam near you?

November 21, 2018 - Deepfake is a machine learning technique that is capable of perfect imitations of facial expressions in videos. Will adding voice imitations to them lead to the perfect scam?

Threat analysis | Criminals

Web skimmers compete in Umbro Brasil hack

November 20, 2018 - In this web skimming match between two Magecart groups, there can only be one winner.

Threat analysis | Malware

What’s new in TrickBot? Deobfuscating elements

November 12, 2018 - TrickBot has been present in the threat landscape from quite a while. We wrote about its first version in October 2016. October 2018 marks end of the second year since TrickBot’s appearance. Possibly the authors decided to celebrate the anniversary by a makeover of some significant elements of the core. This post is an analysis of the updated obfuscation used by TrickBot’s main module.