Cerber ransomware delivered in format of a different order of Magnitude

Threat analysis | Malware

TrickBot comes with new tricks – attacking Outlook and browsing data

August 1, 2017 - TrickBot is still actively maintained and it is not going to leave the landscape any soon. Take a look at its new modules.

Threat analysis | Malware

A .NET malware abusing legitimate ffmpeg

July 12, 2017 - There is a growing trend among malware authors to incorporate legitimate applications in their malicious package. This time, we encountered a malware downloading a legitimate ffmpeg.

Threat analysis | Malware

All this EternalPetya stuff makes me WannaCry

July 6, 2017 - Get more background on the EternalPetya ransomware. Learn about its origin, attribution, decryption, and the methods of infection and propagation.

Threat analysis | Malware

EternalPetya – yet another stolen piece in the package?

June 30, 2017 - Since 27th June we've been investigating the outbreak of the new Petya-like malware armed with an infector similar to WannaCry. Since the day one, various contradicting theories started popping up. In this post, we will try to fill this gap, by making a step-by-step comparison of the current kernel and the one on which it is based (Goldeneye Petya).

Threat analysis | Malware

EternalPetya and the lost Salsa20 key

June 29, 2017 - The latest Petya seems to be broken on purpose: the victims' keys are lost forever.