Avzhan DDoS bot dropped by Chinese drive-by attack

The Avzhan DDoS bot is back in the wild again, this time being dropped by a Chinese drive-by attack. In this post, we'll take a deep dive into its functionality and compare the sample we captured with the one described in the past. Categories: Malware Threat analysis Tags: avzhanBotbotnetddosdrive-by attackexploit kitmalware (Read more...)

The post Avzhan DDoS bot dropped by Chinese drive-by attack appeared first on Malwarebytes Labs.

The post Avzhan DDoS bot dropped by Chinese drive-by attack appeared first on Security Boulevard.

from Avzhan DDoS bot dropped by Chinese drive-by attack

A coin miner with a “Heaven’s Gate”

The Heaven's Gate technique has been around since 2009. But now coin miners are using it to maximize their performance in the target architecture. Categories: Malware Threat analysis Tags: coin minersHeaven's Gatemalware analysis (Read more...)

The post A coin miner with a “Heaven’s Gate” appeared first on Malwarebytes Labs.

The post A coin miner with a “Heaven’s Gate” appeared first on Security Boulevard.

from A coin miner with a “Heaven’s Gate”

How to solve the Malwarebytes CrackMe: a step-by-step tutorial

One of our analysts created a Malwarebytes CrackMe—an exercise in malware analysis—that was released to the community on Twitter and triggered a positive response. Categories: Malwarebytes news Tags: crackmemalware analyst exerciseMalwarebytes CrackMe (Read more...)

The post How to solve the Malwarebytes CrackMe: a step-by-step tutorial appeared first on Malwarebytes Labs.

The post How to solve the Malwarebytes CrackMe: a step-by-step tutorial appeared first on Security Boulevard.

from How to solve the Malwarebytes CrackMe: a step-by-step tutorial

Magniber ransomware: exclusively for South Koreans

A few days ago, Magnitude EK resurfaced, this time with a new payload that targets only the country of South Korea. It's called Magniber ransomware. Categories: Malware Threat analysis Tags: asiamagnibermagnitude EKransomware (Read more...)

The post Magniber ransomware: exclusively for South Koreans appeared first on Malwarebytes Labs.

The post Magniber ransomware: exclusively for South Koreans appeared first on Security Boulevard.

from Magniber ransomware: exclusively for South Koreans

Inside the Kronos malware – part 1

The first part of this research looks at the tricks used by the Kronos banking malware. Categories: Cybercrime Malware Tags: bankerkronosmalwaremalwaretech (Read more...)

The post Inside the Kronos malware – part 1 appeared first on Malwarebytes Labs.

from Inside the Kronos malware – part 1

Floki Bot and the stealthy dropper

Floki Bot, described recently by Dr. Peter Stephenson from SC Magazine is yet another bot, based on the leaked Zeus code. However, the author came up with various custom modifications that makes it more interesting. Categories: Malware Threat analysis Tags: BotFlokiBothasherezademalwaresyscall (Read more...)

from Floki Bot and the stealthy dropper