Drive-by download campaign targets Chinese websites, experiments with exploits

This custom made drive-by download attack targets some Chinese websites and their visitors while experimenting with exploits. Categories: Threat analysis Tags: Chinesecoinhivedrive-byEKexploit kitexploitsFlash PlayerInternet Explorersvchost.exe (Read more...)

The post Drive-by download campaign targets Chinese websites, experiments with exploits appeared first on Malwarebytes Labs.

The post Drive-by download campaign targets Chinese websites, experiments with exploits appeared first on Security Boulevard.

from Drive-by download campaign targets Chinese websites, experiments with exploits

Fake Spectre and Meltdown patch pushes Smoke Loader malware

German users are being targeted with a rogue patch for the recently announced Meltdown and Spectre flaws. Categories: Cybercrime Social engineering Tags: germanmalwareMeltdownphishingsmoke loaderSmoke Loader MalwaresmokeloaderSpectre (Read more...)

The post Fake Spectre and Meltdown patch pushes Smoke Loader malware appeared first on Malwarebytes Labs.

The post Fake Spectre and Meltdown patch pushes Smoke Loader malware appeared first on Security Boulevard.

from Fake Spectre and Meltdown patch pushes Smoke Loader malware

Seamless campaign serves RIG EK via Punycode

The most prolific gate to the RIG exploit kit is coming in a different flavor. The Seamless campaign is now using a domain name with foreign characters translated by Punycode. Categories: Exploits Threat analysis Tags: phishingPunycoderamnitRamnit TrojanRIGRIGEKSeamlesstrojan (Read more...)

The post Seamless campaign serves RIG EK via Punycode appeared first on Malwarebytes Labs.

The post Seamless campaign serves RIG EK via Punycode appeared first on Security Boulevard.

from Seamless campaign serves RIG EK via Punycode

Persistent drive-by cryptomining coming to a browser near you

If you think closing your browser window to leave a site that runs a cryptominer will stop the mining process, think again. Persistent drive-by cryptomining has arrived. Categories: Cybercrime Malware Tags: coinhiveCryptojackingcryptominingDrive-by miningmoneropopunder (Read more...)

The post Persistent drive-by cryptomining coming to a browser near you appeared first on Malwarebytes Labs.

The post Persistent drive-by cryptomining coming to a browser near you appeared first on Security Boulevard.

from Persistent drive-by cryptomining coming to a browser near you

Disdain exploit kit served with a side of social engineering

Exploits may not be enough as threat actors combine them with social engineering in a new Disdain exploit kit attack method. Categories: Exploits Threat analysis Tags: DisdainEKexploit kitneutrino (Read more...)

The post Disdain exploit kit served with a side of social engineering appeared first on Malwarebytes Labs.

The post Disdain exploit kit served with a side of social engineering appeared first on Security Boulevard.

from Disdain exploit kit served with a side of social engineering

A look into the global drive-by cryptocurrency mining phenomenon

As drive-by downloads slow down, drive-by cryptocurrency mining emerges as the latest annoyance that hijacks our PCs' CPU. Categories: Cybercrime Exploits Privacy Tags: coinhivecryptocurrenciesCryptojackingDrive-by miningJsMinermonero (Read more...)

The post A look into the global drive-by cryptocurrency mining phenomenon appeared first on Malwarebytes Labs.

The post A look into the global drive-by cryptocurrency mining phenomenon appeared first on Security Boulevard.

from A look into the global drive-by cryptocurrency mining phenomenon

Compromised LinkedIn accounts used to send phishing links via private message and InMail

A recent attack uses existing LinkedIn user accounts to send phishing links to their contacts via private message but also to external members via email. Categories: Social engineering Threat analysis Tags: gmailinmailLinkedInmalwarephishingscamSocial Engineering (Read more...)

The post Compromised LinkedIn accounts used to send phishing links via private message and InMail appeared first on Malwarebytes Labs.

from Compromised LinkedIn accounts used to send phishing links via private message and InMail

Cerber ransomware delivered in format of a different order of Magnitude

We review a trick that the Magnitude exploit kit uses to bypass security scanners. Categories: Exploits Threat analysis Tags: binary paddingcerberexploit kitgateMagnigatemagnitude EKransomwareXML (Read more...)

The post Cerber ransomware delivered in format of a different order of Magnitude appeared first on Malwarebytes Labs.

from Cerber ransomware delivered in format of a different order of Magnitude

New ‘Jaff’ ransomware via Necurs asks for 2 BTC

The dreaded Necurs botnet delivers a new ransomware with a high ransom ask in this newest spam campaign. Categories: Cybercrime Malware Tags: JaffJaff ransomwareLockyLocky ransomwarenecursransomwarespam (Read more...)

The post New ‘Jaff’ ransomware via Necurs asks for 2 BTC appeared first on Malwarebytes Labs.

from New ‘Jaff’ ransomware via Necurs asks for 2 BTC

A story of fonts by the EITest HoeflerText campaign

The HoeflerText campaign is known for a fake font download that delivers the Spora ransomware. But did you know it also uses special characters in the dropper's file name? Categories: Cybercrime Social engineering Tags: chromeeitestfonthoeflertextmalwareransomwareSpora Ransomware (Read more...)

The post A story of fonts by the EITest HoeflerText campaign appeared first on Malwarebytes Labs.

from A story of fonts by the EITest HoeflerText campaign

Sundown EK gone missing, Terror EK flavours seen in active drive-by campaigns

With another player out at the moment, we take a look at a rebranded exploit kit in current malware campaigns. Categories: Exploits Threat analysis Tags: exploits kitsSundown EKTerror EK (Read more...)

The post Sundown EK gone missing, Terror EK flavours seen in active drive-by campaigns appeared first on Malwarebytes Labs.

from Sundown EK gone missing, Terror EK flavours seen in active drive-by campaigns

Malvertising on iOS pushes eyebrow-raising VPN app

A malvertising campaign on iOS is pushing a scareware page tricking Apple users into installing a free VPN app that comes with serious privacy implications. Categories: Social engineering Threat analysis Tags: AppleiOSiPhonemalvertisingmalwareMyMobileSecurescarewarevpn (Read more...)

The post Malvertising on iOS pushes eyebrow-raising VPN app appeared first on Malwarebytes Labs.

from Malvertising on iOS pushes eyebrow-raising VPN app

Websites compromised in ‘Decimal IP’ campaign

This URL is quite probably unlike anything you've ever seen before and yet still works and redirects to malware. Categories: Cybercrime Exploits Tags: 1760468715EKmalwareRIG EKRIG exploit kitsite hacks (Read more...)

The post Websites compromised in ‘Decimal IP’ campaign appeared first on Malwarebytes Labs.

from Websites compromised in ‘Decimal IP’ campaign

SMS phishing for the masses

This post looks at a recent SMS phishing scam for the RBC bank and a tool the attackers may have used to bulk send fraudulent SMS messages. Categories: Social engineering Tags: Bank of MontrealBMOphishingRBCRoyal BankSendroidsms (Read more...)

The post SMS phishing for the masses appeared first on Malwarebytes Labs.

from SMS phishing for the masses

Canada and the U.K. hit by Ramnit Trojan in new malvertising campaign

This new malvertising campaign on adult websites was pushing the Ramnit information stealer. Categories: Exploits Tags: exoclickmalvertisingramnitRIGRIGEK (Read more...)

The post Canada and the U.K. hit by Ramnit Trojan in new malvertising campaign appeared first on Malwarebytes Labs.

from Canada and the U.K. hit by Ramnit Trojan in new malvertising campaign

Exploit kits: Winter 2017 review

We take a look at the current exploit kit scene (Winter 2017) according to our telemetry and honeypots. Categories: Exploits Threat analysis Tags: EKexploit kitsMagnitudemalvertisingmalvertsmalwareneutrinoransomwareRIGsundown (Read more...)

The post Exploit kits: Winter 2017 review appeared first on Malwarebytes Labs.

from Exploit kits: Winter 2017 review

Rogue Chrome extension pushes tech support scam

Google Chrome may be one of the more secure browsers but an increasing number of malicious extensions are being forced onto users. The one we analyze can hide itself and receive commands from a remote server in order to hijack the browser with incessant offers, fraud and even tech support scams. Categories: Social engineering Threat analysis Tags: chromeChrome Extensionextensionfake chrome extensionGoogleGoogle Chromemalvertisingtech support scam (Read more...)

from Rogue Chrome extension pushes tech support scam

2016 State of Malware Report

2016 was the year that reminded us how important prevention is, no matter what type of user you may be. Indeed ransomware dominated the threat landscape and was heavily distributed via phishing emails, compromised websites, or malicious ads. With such a threat that encrypts your valuable data, there is often times very little you can do... Categories: Malwarebytes news Tags: botnetsddosmalwarephishransomwareState of Malware (Read more...)

from 2016 State of Malware Report

Tech support scam page triggers denial-of-service attack on Macs

Tech support scammers are up to dirty tricks again, trying to cause your computer to freeze by simply visiting a webpage. Categories: Mac Tags: browser alertmacMac OSmalwaresafaritech supporttech support scamTSS (Read more...)

from Tech support scam page triggers denial-of-service attack on Macs

An overview of malvertising on the Mac

Mac users may face less malware attacks than their Windows counterparts, but it doesn't mean they are safe from online crooks. In this post we review the top malvertising attacks that target the OS X platform and how to stay safe. Categories: Social engineering Tags: Applemacmalvertisingmalwareos XPUPPUPsscam (Read more...)

from An overview of malvertising on the Mac