Home » NECURS

Necurs Evolves to Evade Spam Detection via Internet Shortcut File

Posted on:April 26, 2018 at 6:00 am
Posted in:Malware, Spam
Author:
Trend Micro

Necurs, a botnet malware that’s been around since 2012, has been improved with the hopes of better defeating cybersecurity measures — it was seen to evolve its second layer of infection using a .URL file (with remote script downloaders detected by Trend Micro as MAL_CERBER-JS03D, MAL_NEMUCOD-JS21B, VBS_SCARAB.SMJS02, and MAL_SCARAB-VBS30.

Necurs, a modular malware with variants that are capable of spam distribution, information theft, and disabling security services and elements, has been in around since 2012, propagating in the wild via the Necurs botnet.

Posted on:June 23, 2014 at 1:25 am
Posted in:Bad Sites, Botnets, Malware
Author:
Jaaziel Carlos (Threat Response Engineer)

TROJ_UPATRE, the most common malware threat distributed via spam, is known for downloading encrypted Gameover ZeuS onto affected systems. This ZeuS variant, in turn, is known for its use of peer-to-peer connections to its command-and-contol (C&C) servers. This behavior has been known about since October 2013. We have observed that these specific ZeuS variants are now…

Posted on:June 9, 2014 at 4:56 pm
Posted in:Malware, Spam
Author:
Maria Manly (Anti-spam Research Engineer)

Threats like UPATRE are continuously evolving as seen in the development of the techniques used so as to bypass security solutions. UPATRE malware are known downloaders of information stealers like ZeuS that typically spread via email attachments. We recently spotted several spam runs that use the popular file hosting service Dropbox. These use embedded links lead to…

Posted on:April 4, 2014 at 1:21 am
Posted in:Malware, Spam
Author:
Marilyn Melliang (Senior Threat Research Engineer)

In 2013, the malware UPATRE was noted as one of the top malware seen attached to spammed messages. The malware was also notorious for downloading other malware, including ZeuS and ransomware, particularly its more sophisticated form, Cryptolocker. This was enough reason to believe that the UPATRE threat is constantly advancing its techniques–this time, by using…

Necurs Evolves to Evade Spam Detection via Internet Shortcut File

ZBOT-UPATRE Far From Game Over, Uses Random Headers

Social Engineering Watch: UPATRE Malware Abuses Dropbox Links

UPATRE Ups the Ante With Attachment Inside An Attachment

Security Predictions for 2018

Business Process Compromise

Stay Updated

Necurs Evolves to Evade Spam Detection via Internet Shortcut File

ZBOT-UPATRE Far From Game Over, Uses Random Headers

Social Engineering Watch: UPATRE Malware Abuses Dropbox Links

UPATRE Ups the Ante With Attachment Inside An Attachment

Security Predictions for 2018

Business Process Compromise

Popular Posts

Stay Updated