Cybercrime, Agent Tesla is back in Italy via Avion
The email contains a compressed attachment with an executable inside. Launching it installs the malware. It sends, via SMTP, emails with the stolen data.
Cybercrime: here it comes LOTHFULMEDIA, a new dropper
CISA-CNMF cyber security experts: It’s a malware, used by a sophisticated cyber actor, to deploy a RAT. Once it has persistance, a second file delete the dropper.
Cybercrime, Agent Tesla now “navigate” with vessels
New malspam campaign with a fake invoice by a real maritime ompany. The malware infection chain starts from the .doc document attached.
Cybercrime: APT-C-23 spreads Android spyware via fake Threema-Telegram
ESET cybersecurity experts: The cyber espionage group’s new malware, SpyC23.A, has extended functionality. It exploits a fake app store to distribute it.
Cybercrime, Dridex behind the wave of emails in Italy on fake invoices
A link in the email downloads a .doc file, which then downloads a DLL and infects the pc with malware. The attachment exploits the same template as Emotet.
Cybercrime, new Ursnif / Gozi campaign in Italy via INPS
The malware infection chain is the same type as that used two weeks ago. Xls attachment contacts specific url, from which a DLL is downloaded infecting the victim.
Cybercrime, REvil operators start a recruitment operation for affiliates
Bleeping Computer cybersecurity experts: The group behind the malware put $1 million on a hacker forum to show its “force”. It looks for skilled penetration testers and hackers.
Cybercrime, Agent Tesla is now spread in Italy with curriculum vitae
Fake email from an alleged "professional technical employee" with .ace attachment. Inside there is an executable with malware. The data is exfiltrated via email.
Cybersecurity, Data Privacy is a major challenge also in India
Mallu Cyber Soldiers underline the cybersecurity Expert Nitin Pandey exhortation to pass ASAP the Personal Data Protection Bill 2019 to increase Privacy and Safety.
Cybercrime, Dridex changes bait: it’s DHL’s turn
New malspam campaign on false invoices linked to the courier. The attachment contacts some urls to download a DLL and complete the malware infection.