Malware Blogs

Ursnif variant found using mouse movement for decryption and evasion

YG

Yogi Gao

TrickBot spread by Necurs botnet, adds Nordic countries to its targets

RD

Roland Dela Paz

WannaCry ransomware-worm targets unpatched systems

FS

Forcepoint Security Labs

New variant of Geodo/Emotet banking malware targets UK

Luke Somerville

Off-the-shelf ransomware used to target the healthcare sector

RD

Roland Dela Paz

Playing cat & mouse: introducing the Felismus malware

Luke Somerville

AT

Abel Toro

The curious case of a reconnaissance campaign targeting ministry and embassy sites

RD

Roland Dela Paz

Carbanak Group uses Google for malware command-and-control

NG

Nicholas Griffin

MM core in-memory backdoor returns as "BigBoss" and "SillyGoose"

NG

Nicholas Griffin

Merry Cryptmas! CryptXXX ransomware offers Christmas discount

RD

Roland Dela Paz

The Many Evolutions of Locky

NG

Nicholas Griffin

Compromised Microsoft OneDrive for Business accounts used to spread malware

RD

Roland Dela Paz