malware

MalwareBytesSecurity

A week in security (July 10 – July 16)

Credit to Author: Malwarebytes Labs| Date: Mon, 17 Jul 2017 19:43:31 +0000

A compilation of security news and blog posts from the 10th of July to the 16th. We go over our PowerShell, an overview of the Petya ransomware family, and more.

Categories:

Tags:

(Read more…)

The post A week in security (July 10 – July 16) appeared first on Malwarebytes Labs.

Read More
QuickHealSecurity

A technical analysis of the Java RAT (Remote Access Trojan) Malware

Credit to Author: Quick Heal Security Labs| Date: Mon, 17 Jul 2017 06:41:56 +0000

Remote Access Trojans are programs that allow attackers to gain unauthorized access to a targeted computer without the victim’s knowledge. Java RAT malware is a Trojan-Dropper written in Java. It is designed to steal passwords, access files, for keylogging (recording what the user types on the keyboard) and for screen-capture….

The post A technical analysis of the Java RAT (Remote Access Trojan) Malware appeared first on Quick Heal Technologies Security Blog | Latest computer security news, tips, and advice.

Read More
MalwareBytesSecurity

Keeping up with the Petyas: Demystifying the malware family

Credit to Author: Malwarebytes Labs| Date: Fri, 14 Jul 2017 16:29:04 +0000

Last June 27, there was a huge outbreak of a Petya-esque malware with WannaCry-style infector in the Ukraine. Since there is still confusion about how exactly this malware is linked to the original Petya, we have prepared this small guide on the background of the Petya family.

Categories:

Tags:

(Read more…)

The post Keeping up with the Petyas: Demystifying the malware family appeared first on Malwarebytes Labs.

Read More
MalwareBytesSecurity

A .NET malware abusing legitimate ffmpeg

Credit to Author: Malwarebytes Labs| Date: Wed, 12 Jul 2017 15:00:52 +0000

There is a growing trend among malware authors to incorporate legitimate applications in their malicious package. This time, we encountered a malware downloading a legitimate ffmpeg.

Categories:

Tags:

(Read more…)

The post A .NET malware abusing legitimate ffmpeg appeared first on Malwarebytes Labs.

Read More
SecuritySophos

Le organizzazioni contano i danni di Petya dopo la tempesta

Credit to Author: Sophos Italia| Date: Tue, 11 Jul 2017 11:39:32 +0000

L&#8217;ottimismo iniziale che il cyberattacco di Petya (o NotPetya / PetyaWrap) potesse essere una mera ulteriore copia dell&#8217;incidente straordinario di WannaCry di maggio è svanito &#8211; ora sembra che sia stato ugualmente serio per ragioni leggermente diverse. La società britannica di prodotti di consumo Reckitt Benckiser ha subito una interruzione di produzione che si prevede [&#8230;]<img alt=”” border=”0″ src=”https://pixel.wp.com/b.gif?host=news.sophos.com&#038;blog=834173&#038;post=40652&#038;subd=sophos&#038;ref=&#038;feed=1″ width=”1″ height=”1″ /><img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/e2zDvww8nMA” height=”1″ width=”1″ alt=””/>

Read More
SecuritySophos

Und täglich grüßt das Würmertier – oder warum wir von Ransomware nicht wirklich überrascht sein sollten

Credit to Author: Jörg Schindler| Date: Mon, 22 May 2017 11:41:22 +0000

„Es ist ziemlich aggressiv und vermehrt sich sehr schnell“ – das könnte die Aussagen eines gestressten System-Administrators sein, der vergangene Woche von der WannaCry (Wanna Decryptor) Ransomware betroffen war. Tatsächlich ist dies aber ein Statement, das ein Security-Experte vor 13 Jahren zu einer neuen Variante des Sasser-Wurms gab. WannaCry zielt auf nicht gepatchte Windwows SMB-Fehler. Genauso [&#8230;]<img alt=”” border=”0″ src=”https://pixel.wp.com/b.gif?host=news.sophos.com&#038;blog=834173&#038;post=37052&#038;subd=sophos&#038;ref=&#038;feed=1″ width=”1″ height=”1″ /><img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/nKVJMJXn98w” height=”1″ width=”1″ alt=””/>

Read More