Gozi – Computer Security Articles

Bad ad fad leads to IcedID, Gozi infections

July 20, 2023 admin batloader, fakebat, Featured, Gozi, IcedID, malvertising, mdr, security operations, sophos x-ops, threat research

Credit to Author: Matt Wixey| Date: Thu, 20 Jul 2023 10:00:07 +0000

Malvertising campaigns using paid ads result in infostealer and backdoor attacks

Security Sophos

Gozi V3: tracked by their own stealth

December 24, 2019 admin Gozi, ISFB, malware, SophosLabs Uncut, Ursnif, Visual Basic

Credit to Author: sophoslabsbehavioural| Date: Tue, 24 Dec 2019 09:00:32 +0000

Gozi, also known as Ursnif or ISFB, is a banking trojan which has been around for a long time and currently multiple variations of the trojan are circulating after its source code got leaked. Every variant that is distributed has interesting aspects, with Gozi version 3 the most eye-catching in the field of detection evasion. […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/LaetYrage7Q” height=”1″ width=”1″ alt=””/>

MalwareBytes Security

Spelevo exploit kit debuts new social engineering trick

December 18, 2019 admin EK, exploit kit, Gozi, malvertising, qakbot, Qbot, Social engineering, Spelevo, Threat analysis, Ursnif

Credit to Author: Jérôme Segura| Date: Wed, 18 Dec 2019 16:00:00 +0000

In order to maximize infection rate, threat actors are now launching the Spelevo exploit kit with a decoy adult site, social engineering users into downloading a malicious video player.

Categories: