Cybercrime, a new version of the Jupyter trojan is on the wild
Morphisec cybersecurity experts: The malware, written in .NET, is delivered through MSI installer and thwarts online AV scanners.
Cybercrime, Ursnif / Gozi back to Italy with a fake BRT courier email
The xls attachment contacts a single link and downloads the dll, which activates the malware infection. Provided that the IP is Italian and not on the blacklist.
Cybercrime, new Dridex campaign via invoice
The xlsb attachment contacts a random url from an internal list and downloads the dll, which activates the malware infection chain.
Cyber Espionage, Bahrain activists spied via iMessage exploit and Pegasus
Citizen Lab cybersecurity experts: The operation used the KISMET and FORCEDENTRY exploits. This one is able to circumvent Apple’s BlastDoor.
Cybercrime, false invoice conveys the latest Dridex campaign
The email xlsm attachment contacts a single url and downloads the dll, which starts the infection of the malware.
Cybercrime, the Dridex global campaign via Quickbooks evolves
The email xls attachment contacts a random url from an internal list and downloads the malware. The list, however, changes in each file.
Cybercrime, new wave of the Ursnif / Gozi campaign in Italy via BRT
The xlsm attachment contacts a single url from which it downloads the dll, starting the malware infection. But only from Italian IPs and if they’re not blacklisted.
Cybercrime, Ursnif/Gozi exploits again BRT for a campaign in Italy
The xlsm attachment contacts single url from which it downloads the dll, starting malware infection. But only from Italian IPs and if they are not blacklisted.
Cybercrime, Quakbot exploits U.K. STEEL EXPORTS LIMITED company certificates
New signed campaign to trick victims’ antivirus, allowing them to download and install the malware via attachment.
Cybercrime, new Dridex campaign via fake Quickbooks invoice
The email xls attachment contacts a random url from an internal list and downloads the dll, which starts the malware infection.