Home » Malware

Hide and Script: Inserted Malicious URLs within Office Documents’ Embedded Videos

Posted on:November 12, 2018 at 5:02 am
Posted in:Malware
Author:
Trend Micro

In late October, security researchers from Cymulate showed a proof of concept (PoC) exploiting a logic bug that could allow hackers to abuse the online video feature in Microsoft Office to deliver malware. We indeed identified an in-the-wild sample (detected by Trend Micro as TROJ_EXPLOIT.AOOCAI) in VirusTotal, using this method to deliver the URSNIF information stealer (TSPY_URSNIF.OIBEAO).

Since this kind of attack involves the use of a specially crafted Word document, we can assume that it can arrive on a user’s system through other malware or as an attachment or links/URLs in spam.

Posted on:November 8, 2018 at 5:00 am
Posted in:Malware
Author:
Trend Micro

The concept of a stealthy, difficult-to-detect malware operating behind the scenes has proven to be an irresistible proposition for many threat actors, and they’re evidently adding even more techniques, as seen in a cryptocurrency miner (detected as Coinminer.Win32.MALXMR.TIAOODAM) we discovered that uses multiple obfuscation and packing as part of its routine.

Posted on:November 1, 2018 at 5:04 am
Posted in:Malware
Author:
Trend Micro

Trickbot (detected by Trend Micro as TSPY_TRICKBOT.THOIBEAI) now has a password grabber module that steals access from several applications and browsers.

Posted on:November 1, 2018 at 12:04 am
Posted in:Botnets, Internet of Things, Malware
Author:
Trend Micro Cyber Safety Solutions Team

We uncovered an operation of a hacking group, which we’re naming “Outlaw” (translation derived from the Romanian word haiduc, the hacking tool the group primarily uses), involving the use of an IRC bot built with the help of Perl Shellbot. The group distributes the bot by exploiting a common command injection vulnerability on internet of things (IoT) devices and Linux servers. Further research indicates that the threat can also affect Windows-based environments and even Android devices.

Posted on:October 31, 2018 at 5:00 am
Posted in:Malware, Ransomware, Spam, Vulnerabilities
Author:
Trend Micro Cyber Safety Solutions Team

Smart Protection Network (SPN) data and observations from Managed Detection and Response (MDR) for the North American region show the persistence of older threats and tactics: delivery methods such as spam emails are still going strong, while ransomware attacks have seen a renewed vigor alongside newer threats such as cryptocurrency mining malware in the third quarter of 2018.

However, the prevalence of these older threats should not be misconstrued as a sign that threat actors are resting on their laurels. In fact, it should be taken as proof that they are constantly improving proven tools and techniques to get ahead in the never-ending cat-and-mouse game between cybercriminals and security providers.

Page 1 of 27112 › »

Hide and Script: Inserted Malicious URLs within Office Documents’ Embedded Videos

Cryptocurrency Mining Malware uses Various Evasion Techniques, Including Windows Installer, as Part of its Routine

Trickbot Shows Off New Trick: Password Grabber Module

Perl-Based Shellbot Looks to Target Organizations via C&C

Gathering Insights on the Reemergence and Evolution of Old Threats Through Managed Detection and Response

Security Predictions for 2018

Business Process Compromise

Stay Updated

Hide and Script: Inserted Malicious URLs within Office Documents’ Embedded Videos

Cryptocurrency Mining Malware uses Various Evasion Techniques, Including Windows Installer, as Part of its Routine

Trickbot Shows Off New Trick: Password Grabber Module

Perl-Based Shellbot Looks to Target Organizations via C&C

Gathering Insights on the Reemergence and Evolution of Old Threats Through Managed Detection and Response

Security Predictions for 2018

Business Process Compromise

Popular Posts

Stay Updated