Tags → #malware analysis

Threats
New Ransomware Variant ShrinkLocker Exploits BitLocker Encryption
Nov 13, 2024 ShrinkLocker is a newly identified ransomware variant that utilizes BitLocker encryption and VBScript, raising concerns about its potential to compromise multiple systems quickly within a network.
Threats
Russia Recognized as Major Cyber Power and Threat Actor
Nov 12, 2024 Russia has been recognized as a significant military and cyber power, with its state-sponsored hackers, particularly the Turla group, linked to advanced persistent threat operations like the Moonlight Maze and the sophisticated Snake malware network.
Threats
New Ransomware Family "Ymir" Identified in Cybersecurity Investigation
Nov 11, 2024 A new ransomware family named "Ymir" has been identified, posing a sophisticated threat to organizations and highlighting the need for improved cybersecurity measures.
Threats
Reptile 2.0 Rootkit Introduces New Kernel Loading Method
Nov 11, 2024 The Reptile version 2.0 rootkit has developed a new method for loading kernel-level components that bypasses traditional commands, utilizing a custom launcher to enhance evasion techniques.
Vulnerabilities
Cryptography in Malware Development: The Decorrelated Fast Cipher
Nov 10, 2024 The article discusses the Decorrelated Fast Cipher (DFC), a symmetric block cipher developed by a team of cryptographers, highlighting its features, innovations, and identified vulnerabilities in the context of malware development.
Cybercrime
Global Law Enforcement Operation Targets RedLine Stealer Malware
Nov 10, 2024 On October 28, 2024, a global law enforcement operation named Operation Magnus was executed to dismantle the RedLine Stealer malware-as-a-service operation, resulting in the seizure of servers and domains, as well as arrests in Belgium and the unsealing of charges in the United States.
Threats
Analysis of AsyncRAT Malware Infection Methods
Nov 9, 2024 A threat intelligence analyst has detailed the methods used to distribute AsyncRAT malware, highlighting two distinct techniques involving obfuscated scripts and PowerShell commands to facilitate remote access and maintain persistence on infected systems.
Threats
New Android Banking Trojan "AMEXTROLL" Identified
Nov 9, 2024 Cyble Research Labs has identified a new Android Banking Trojan malware named "AMEXTROLL," which is being advertised on underground cybercrime forums and has evolved significantly since its initial detection in 2021.
Threats
New Phishing Campaign Distributes Remcos Remote Access Trojan
Nov 9, 2024 Fortinet's FortiGuard Labs has identified a new phishing campaign that distributes a variant of the Remcos Remote Access Trojan, targeting Windows systems through deceptive emails containing a malicious Excel document.
Threats
Ransomware Attack Reported by Cisco Talos Incident Response
Nov 9, 2024 On November 7, 2024, Cisco Talos Incident Response reported a significant ransomware attack attributed to the Interlock ransomware group, which utilized advanced tactics including big-game hunting and double extortion.