Cybercrime, Bitubit LLC-Aqua Direct s.r.o last Quakbot signed campaign victims
Threat actors exploit the company certificates to sign the attachment to decept the anti virus. Goal: to let the victims download and install QBot malware.
Cybercrime: here it comes Ghimob, last mobile banking trojan
Kaspersky cybersecurity experts: The malware, designed by Guildma, abuses Accessibility Mode and exploits email to spread.
Cybercrime, Quakbot uses again FORTUNE STAR TRADING, INC. certificates
Threat actors exploit company certificates to sign the attachment. Objective: to decept the anti virus and let the victims download and install QBot malware.
Cybercrime, Italy hit by a continous Ursif/Gozi offensive
Institutions leveraged in daily-based campaigns. Last one exploits INPS. An xls attachment, different for each message, contacts a single link and downloads a DLL that activates malware infection.
Cybercrime, QuakBot exploits APP DIVISION ApS certificates to spread
The QBot malspam campaign continues to spread exploiting companies certificates to sign the exe file with malware.
Cybercrime, QuakBot hides behind OOO Vertical and APPI CZ certificates
The QBot malspam campaign continues to spread exploiting companies certificates to sign the exe file with malware.
Cybercrime, QuakBot uses TRAUMALAB INTERNATIONAL APS certificates
The global signed campaign continues. It relies on companies certificates to sign the exe file with malware.
Cybercrime, ABEL RENOVATIONS, INC used in Quakbot signed campaign
It exploits company certificates to sign the executable and decept the anti virus. The malware infection chain is activated by the attachment.
Cybercrime, QuakBot use SERVICE STREAM in its signed global campaign
It exploits company certificates to sign the executable and decept the anti virus. The malware infection chain is activated by the attachment.
Cybercrime, Quakbot “signed” campaign continues to spread worldwide
It exploits company certificates to sign the executable and decept the anti virus. The malware infection chain is activated by the attachment.