Security

QuickHealSecurity

Banking malware, Dridex bounces back through PDF

Credit to Author: Ankita Ashesh| Date: Wed, 10 May 2017 06:55:01 +0000

Dridex is a banking malware which uses macros to spread on windows systems. Spam email attachments are utilized to spread this infection. Banking malware are generally key loggers. They trick users into opening the attachment; it then records the keystrokes on user’s computer and uses them for their own benefit….

The post Banking malware, Dridex bounces back through PDF appeared first on Quick Heal Technologies Security Blog | Latest computer security news, tips, and advice.

Read More
QuickHealSecurity

7 Deadly Internet Security Mistakes

Credit to Author: Rajib Singha| Date: Wed, 10 May 2017 05:30:44 +0000

Simply installing an antivirus software on your PC cannot guarantee your online safety. Internet security is an ongoing process, where you need to stay on guard against the latest threats. Run through the below post and check if you are making any of these 7 deadly Internet Security mistakes. 1….

The post 7 Deadly Internet Security Mistakes appeared first on Quick Heal Technologies Security Blog | Latest computer security news, tips, and advice.

Read More
FortinetSecurity

Deep Analysis of New Emotet Variant – Part 2

Credit to Author: Xiaopeng Zhang| Date: Tue, 09 May 2017 11:11:59 -0700

This is the second part of FortiGuard Labs’ deep analysis of the new Emotet variant. In the first part of the analysis we demonstrated that by bypassing the server-side Anti-Debug or Anti-Analysis technique we could download three or four modules (.dll files) from the C&C server. In that first blog we only analyzed one module (I named it ‘module2’). In this blog, we’ll review how the other modules work. Here we go.

Read More
FortinetSecurity

Deep Analysis of New Emotet Variant – Part 1

Credit to Author: Xiaopeng Zhang| Date: Wed, 03 May 2017 09:41:26 -0700

Background Last week, FortiGuard Labs captured a JS file that functions as a malware downloader to spread a new variant of the Emotet Trojan. Its original file name is Invoice__779__Apr___25___2017___lang___gb___GB779.js.  A JS file, as you may be aware, is a JavaScript file that can be executed by a Window Script Host (wscript.exe) simply by double-clicking on it. In this blog we will analyze how this new malware works by walking through it step by step in chronological order. A JS file used to spread malware The original JS code…

Read More