enterprise software security – Computer Security Articles

No payment necessary: Fighting back against ransomware

January 23, 2017 admin Advanced persistent threats, antimalware, Antimalware research for IT pros and enthusiasts, Coordinated Malware Eradication, enterprise software security, malware research, microsoft, Microsoft Edge, MMPC, Product features and announcements, ransomware, research, Windows 10, Windows Defender, Windows Defender ATP, Windows Defender for Windows 10

Any IT professional who’s ever had an experience with malware knows how fast an intrusive attack can happen, and how difficult it can be to educate employees to be vigilant against such threats. And with ransomware attacks only growing, having information, tools and technologies to help protect your network can mean the difference between serious…

Microsoft Security

Fake fax ushers in revival of a ransomware family

January 23, 2017 admin antimalware, Antimalware research for IT pros and enthusiasts, Crimace, enterprise software security, fake fax, malware research, microsoft, Microsoft Edge, MMPC, Ransom:Win32/WinPlock.B, ransomware, research, spam, Trojan, TrojanDownloader:JS/Crimace.A, Windows 10, Windows Defender, Windows Defender for Windows 10, WinPlock

“Criminal case against you” is a message that may understandably cause panic. That’s what a recent spam campaign hopes happens, increasing the likelihood of recipients opening the malicious attachment. We recently discovered a new threat that uses email messages pretending to be fax messages, but in truth deliver a ransomware downloader. The attachment used in this…

Microsoft Security

Digging deep for PLATINUM

January 23, 2017 admin Activity groups, Advanced persistent threats, advanced threat, enterprise software security, guidance, hunters, malware, malware research, Microsoft Security Essentials, MMPC, phishing, research, Uncategorized, Windows 10, Windows Defender, Windows Defender ATP, Windows Defender for Windows 10

This blog introduces our latest report from the Windows Defender Advanced Threat Hunting team. You can read the full report at: PLATINUM: Targeted attacks in South and Southeast Asia There is no shortage of headlines about cybercriminals launching large-scale attacks against organizations. For us, the activity groups that pose the most danger are the ones…

Microsoft Security

No mas, Samas: What’s in this ransomware’s modus operandi?

January 23, 2017 admin antimalware, Credential Guard for Windows 10 Enterprise, cybersecurity, Device Guard for Windows 10 Enterprise, Disable macro, Disable macro in Office, enterprise software security, Java-based vulnerabilities, JBOSS, Lateral account movement security, Macro-based malware, microsoft, Microsoft Passport, New ransomware, Outdated JBOSS, Ransom:MSIL/Samas, ransomware, Ransomware modus operandi, Redhat, Samas ransomware, Samas ransomware geographical distribution, Samas ransomware geoloc_, Samas ransomware infection chain, Secure your code integrity, Securing Lateral Account Movement, Windows 10, Windows Defender, Windows Defender blogs for home users and small businesses, Windows Defender for Windows 10, Windows Hello

We’ve seen how ransomware managed to become a threat category that sends consumers and enterprise reeling when it hits them. It has become a high-commodity malware that is used as payload to spam email, macro malware, and exploit kit campaigns. It also digs onto victims’ pockets in exchange for recovering files from their encrypted form. …