A new variant of the Dharma Ransomware was released this week that appends the .brrr extension to encrypted files. This variant was first discovered by Jakub Kroustek who tweeted a link to the sample ...
The Darkhotel campaign, which targets business users of luxury hotels, has evolved with the use of new techniques and a previously unknown zero-day vulnerability from Hacking Team's stolen files. In a ...
The Fareit trojan is using an uncommon file type as a disguise as it is spread via phishing and other spam mail campaigns. Fareit has been around for a little while now, and we all know that Locky ...
Mon Aug 31, 2015 12:00 AM Last update on: Mon Aug 31, 2015 12:00 AM Darkhotel APT attacks dated 2014 and earlier are characterized by the misuse of stolen certificates, the deployment of .hta files ...
Attackers are hiding interesting malware in a boring place, hoping victims won’t bother to look. Where’s the last place you’d expect to find malware? In an email from your mother? Embedded in software ...
The malware "KimJongRAT," known to be linked to the Kimsuky hacking group under North Korea's Reconnaissance General Bureau, is being distributed disguised as a national tax notice file, raising ...
Today, Michael Gillespie noticed what appeared to be a new variant of the Crysis/Dharma Ransomware uploaded to his ID-Ransomware site. Jakub Kroustek then discovered some samples to confirm that it ...