Cybercrime, new Agent Tesla campaign via fake DHL delivery confirmation
The email contains a cab attachment. Inside is an exe, the malware itself. This steals data and exfilters it via SMTP.
Cybercrime, multi-malware campaign conveyed via false debt
The email texts and the xlsb attachment change slightly. This contacts a url and has so far downloaded remcosrat in one case and Trickbot in the other.
Cybercrime, Microsoft released “One-Click Mitigation Tool” on Exchange Servers vulnerabilities
The cybersecurity experts: Customers will automatically mitigate CVE-2021-26855 on any server on which it is deployed. However, it’s not a replacement for the patch.
Cybercrime, the Revenue Agency lure for the third Ursnif / Gozi campaign in Italy in one day
The email xlsb attachment contacts a url (different in each message) and downloads the dll which starts the malware infection.
Cybercrime, the DearCry ransomware exploits the Microsoft Exchange Server vulnerabilities
Palo Alto Networks cybersecurity experts: The malware uses AES-256 and RSA-2048 to encrypt files, and the ransom note includes 2 email addresses to contact for pay.
Cybercrime, attack on Facebook users in Italy via “looks like you”
Fake TikTok video with the comment sent by real (unsuspecting) users to contact lists. The operation leads to the Topsietegames YouTube channel.
Cybercrime, the Dridex campaign via Freightquote is back
The email xlsm attachment contacts a random link from an internal list and downloads the DLL, which starts the malware infection chain.
Cybercrime, RedXOR is a new malware which targets Linux systems
Intezer cybersecurity experts: It’s a backdoor linked to the Chinese state-sponsored hacking collective Winnti. It has meny capabilities and can be updated.
Cybercrime: Ursnif / Gozi campaign in Italy on stolen emails, but it’s faulty
The email zip attachment, password protected, contains a doc that downloads the dll and starts the malware infection. However, the macro contains errors.
Cryptolaemus has new enemies: Dridex, Qakbot and Trickbot
The “mealybug destroyers”, the members of the cybersecurity group that for passion contributed to defeat Emotet, talk about the new and old threats.