The newly discovered BLISTER malware loader leverages valid code signing certificates to evade detection. Consequently,… New BLISTER Malware Loader Exploits Valid Code Signing Certificate on Latest Hacking News. click here to read full Article...
A new malware dropper has surfaced online targeting users in recent phishing campaigns. Identified as… New Hancitor Malware Loader Delivers Malware Via Clipboard on Latest Hacking News. click here to read full Article Read...
Threat actors have been found using a previously undocumented JavaScript malware strain that functions as a loader to distribute an array of remote access Trojans (RATs) and information stealers. HP Threat Research dubbed the...
A new JavaScript malware loader named RATDispenser has been found distributing RATs as payloads in multiple stealthy attacks. The delivered malware families include STRRAT, WSHRAT, AdWind, Formbook, Remcos, Panda Stealer, GuLoader, and Ratty. Organizations are...
QAKBOT is a prevalent information-stealing malware that was first discovered in 2007. In recent years, its detection has become a precursor to many critical and widespread ransomware attacks. click here to read full Article...
Cisco Talos warned against SquirrelWaffle malware that is spreading quickly via spam campaigns. Experts believe it has the potential to become the next big threat in the spam space. Hackers use the DocuSign signing...
A new spam email campaign has emerged as a conduit for a previously undocumented malware loader that enables the attackers to gain an initial foothold into enterprise networks and drop malicious payloads on compromised...
ZE Loader hides as part of legitimate software by performing a dynamic link library (DLL) hijacking. Using a malicious DLL instead of the original one, it replaces a DLL named DVDSetting.dll. click here to...
Huan is an encrypted PE Loader Generator that I developed for learning PE file structure and PE loading processes. It encrypts the PE file to be run with different keys each time and embeds...
In recent months Minerva Labs researchers have seen a spike in events associated with Taurus loader. Its spreading method allows it to generate new samples and infect new devices continuously. click here to read...
Researchers identified a threat actor targeting multiple organizations including large universities and high schools in the U.S., along with high-tech organizations in Belgium. click here to read full Article Read more on Malware updates...
A malware campaign that has been undergoing constant development in its toolsets since February now boasts of four different malware versions – all of which start with an AHK executable that leads to the...
Microsoft warns of an ongoing spear-phishing campaign targeting aerospace and travel organizations with multiple remote access trojans (RATs) deployed using a new and stealthy malware loader. click here to read full Article Read more...
Why is the campaign called A41APT? In 2019, we observed an APT campaign targeting multiple industries, including the Japanese manufacturing industry and its overseas operations, that was designed to steal information. We named the...
While previous Twitter analysis identified this loader as a mere variant of TA800’s existing BazaLoader malware, new research cites evidence that NimzaLoader is a disparate strain. click here to read full Article Read more...
Flaws like these in boot loaders allow circumvention of UEFI Secure Boot, a verification mechanism for ensuring that code executed by a computer’s UEFI firmware is trusted and not malicious. Click here for image...
