PBot: a Python-based adware

Threat analysis | Malware

Encryption 101: How to break encryption

March 6, 2018 - Continuing on in our Encryption 101 series, we now look at what it takes to break encryption. In order for something as powerful as encryption to break, there needs to be some kind of weakness to exploit. That weakness is often a result of an error in implementation.

Threat analysis | Malware

Blast from the past: stowaway Virut delivered with Chinese DDoS bot

March 1, 2018 - A recent Chinese drive-by attack dropped Virut, an ancient virus that's been out of commission since 2013. So what was it doing in this modern attack?

Threat analysis | Malware

Avzhan DDoS bot dropped by Chinese drive-by attack

February 23, 2018 - The Avzhan DDoS bot is back in the wild again, this time being dropped by a Chinese drive-by attack. In this post, we'll take a deep dive into its functionality and compare the sample we captured with the one described in the past.

Threat analysis | Malware

Drive-by cryptomining campaign targets millions of Android users

February 12, 2018 - Android users have been exposed to drive-by cryptomining in one of the largest campaigns that we have detected so far.

Threat analysis | Malware

Scarab ransomware: new variant changes tactics

January 31, 2018 - We've found that a variant of the Scarab ransomware, called Scarabey, is distributed via a different technique, with a different payload code, and a new target: Russia.