Securezoo Cybersecurity Threat Center blog posts of malware threats.
TrickBot recently replaced one of its propagation modules “mworm” with new module named “nworm.” The updated module can exploit vulnerable domain controllers (DCs) and evade detection by running in memory.
TrickBot trojan updates propagation module with nworm to evade detection Read More »
Security researchers have discovered a new version of Sarwent malware that has new command functionality, such as executing PowerShell commands and preference for using RDP.
Sarwent malware has new command functions, targets RDP Read More »
A large Snake ransomware campaign has targeted healthcare companies worldwide. One of the victims include Fresenius, Europe’s largest private hospital operator and leading healthcare company based out of Germany.
Snake ransomware campaign targets healthcare companies Read More »
Security researchers have spotted a spearphishing campaign that targets companies in the oil and gas sector to drop Agent Tesla malware.
Spearphishing campaign targets Oil and Gas sector to drop Agent Tesla malware Read More »
Security experts discovered LokiBot, a trojan malware, has been impersonating a popular game launcher. As a result, cybercriminals are able to trick users into downloading the fake app and executing the malware on their systems.
LokiBot trojan disguised as popular game launcher Read More »
The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) released six new malware reports on malicious cyber activity from North Korea.
CISA and FBI reports new North Korean malicious cyber activity (6 new malware reports) Read More »
Security experts have spotted a new malware campaign that uses a new version of Loda remote access trojan (RAT). Cisco’s Talos security group observed over the past few months websites hosting a new version of Loda written in AutoIT. Loda was first discovered in 2017 and has been used for spying on victims. According to
Loda RAT malware campaign Read More »
The Australian Cyber Security Centre (ACSC) has released a security advisory and guidance on Mailto ransomware incidents. Mailto, also known as Kazakavkovkiz, belongs to the KoKo ransomware family.
Mailto ransomware threat and mitigation guidance Read More »
Cybercriminals are launching new ransomware attacks against industrial control systems (ICS). The ransomware dubbed Ekans features new functionality designed to stop critical processes related to ICS operations.
Ekans ransomware targets industrial control systems Read More »
The FBI has issued a new warning on Magecart e-skimming attacks, used by cybercriminals to steal your credit card or payment card information.
FBI issues new warning on e-skimming attacks Read More »
