“Funky malware format” found in Ocean Lotus sample

Threat analysis | Criminals

Say hello to Baldr, a new stealer on the market

April 9, 2019 - Baldr is a new stealer that is being actively developed and distributed. Will it be able to compete in this crowded arena?

Threat analysis | Criminals

Plugin vulnerabilities exploited in traffic monetization schemes

March 26, 2019 - The latest round of vulnerable WordPress plugins leads to an active traffic monetization campaign via hacked websites.

Threat analysis | Criminals

The Advanced Persistent Threat files: Lazarus Group

March 12, 2019 - Lazarus Group, the threat actors likely behind the Sony breach and WannaCry outbreak, are in the news again. Here's what you need to know about this North Korean organization, and what you should do to protect against such nation-state attacks.

Threat analysis | Malware

Spotlight on Troldesh ransomware, aka ‘Shade’

March 6, 2019 - Troldesh is ransomware that relies heavily on user interaction. Nevertheless, a recent spike in detections shows it's been successful against businesses in the first few months of 2019.

Threat analysis

New Golang brute forcer discovered amid rise in e-commerce attacks

February 26, 2019 - E-commerce sites are a hot commodity these days. We dig into how compromised PCs are helping to hack into them to inject skimmers, whether via vulnerabilities in the websites themselves or through a new malware we discovered gaining entry via brute force.

Threat analysis | Criminals

The Advanced Persistent Threat Files: APT1

February 22, 2019 - Next up in the Advanced Persistent Threat Files: APT1, a unit of the People's Liberation Army of China known for wide-scale and high-volume data collection on mostly English-speaking companies.

Threat analysis | Social engineering

Sophisticated phishing: a roundup of noteworthy campaigns

February 20, 2019 - A phishing page that hides behind a translation service. A kit that uses fake font files. A hyper-realistic campaign that could likely fool even the pros. We look at these noteworthy phishing attempts and more to show how far phishers have evolved, and remind users to remain vigilant against this threat.

Threat analysis | Exploits

Exploit kits: winter 2019 review

February 12, 2019 - We review the top exploit kits in this winter 2019 snapshot.

Threat analysis | Exploits

New critical vulnerability discovered in open-source office suites

February 6, 2019 - A security researcher recently published a proof of concept exploit for open-source office software LibreOffice and OpenOffice. Will this new vulnerability be used in the wild?

Threat analysis | Malware

Analyzing a new stealer written in Golang

January 30, 2019 - We captured a new information-stealing malware written in Golang (Go). Read up on our analysis of its functionality, as well as the tools researchers can use to unpack malware written in this relatively new programming language.