Spymel is the latest malware, which uses a digital certificate signed by DigiCert to attack systems, reported the security seller Zscaler. The trojan infection takes place by attackers issuing a JavaScript file as an email attachment. As soon as the user opens the file, it is downloaded and installed on the virtual machine. However, as …
Recently, WhatsApp users have been warned not to open dangerous email, whose purpose is to make them install a malicious executable file. According to security researchers, the above-mentioned malware has being distributed via malware campaign, where emails look as if they have been sent from an official WhatsApp account. The main purpose of cyber criminals …
Two banking trojans are said to target mobile devices lately. The Android/OpFake and the Android/Marry malware families have stored their C&C servers inside Facebook Parse, the company’s BaaS offering. BaaS is a cloud-based service which provides mobile app developers with ready-made tools, in the form of APIs, on which they can build the backend of …
Facebook Parse Used For C&C Server by Two Mobile Banking Trojans Read More »
LatentBot malware has been considered as an unusual attack which uses multiple levels of obfuscation to target companies in the financial and insurance industries all around the world. According to a report by the analysts Taha Karim and Daniel Regalado, this malware has been involved in multiple campaigns against enterprises located in the United States, …
The latest update, which Microsoft made to its SmartScreen security system is said to protect users from drive-by-download attacks in Edge and Internet Explorer. SmartScreen, which was first introduced with IE7, is now one of the security features included with Windows. Its main function is to protect pc users against phishing schemes and social engineering …
Microsoft SmartScreen Security System Protects From Drive-By-Download Attacks Read More »
The ransomeware TeslaCrypt is a Trojan which is known for targeting computer games, such as Call of Duty, World of Warcraft, Minecraft and World of Tanks, and encrypting its game files. Once encrypted, the pc user is prompted with a ransom of $500 worth of bitcoins in order to obtain the key to decrypt the …
New TeslaCrypt Ransomware Version Released, Aimed at Gamers Read More »
Ransom32 is a new type of ransomware based on JavaScript, which infects users via Node.js. The ransomeware has been coded on top of the NW.js platform and it may be considered as the first cross-OS ransomware family. NW.js platform, previously known as Node-WebKit, allows developers to create desktop applications via Node.js modules. For this purpose, …
Ransom32: A Javascript Ransomware That Runs on Windows, Linux and Mac OS X Read More »