Fortinet

FortiGuard Labs uncovered a new campaign targeted at Chinese-speakers using malware that bypasses normal authentication by exploiting known WinRAR file (cve-2018-20250) and RTF file (cve-2017-11882) vulnerabilities. Read this analysis to learn more.<img src=”http://feeds.feedburner.com/~r/fortinet/blog/threat-research/~4/34AxhazOK7c” height=”1″ width=”1″ alt=””/>

FortiGuard Labs recently captured a number of Word documents that were spreading a new variant of the Ursnif trojan. Learn more about how it operates and the techniques it uses.<img src=”http://feeds.feedburner.com/~r/fortinet/blog/threat-research/~4/gB4h2sgbiiQ” height=”1″ width=”1″ alt=””/>

Find out about the latest threat trends revealed by Fortinet’s latest Threat Landscape Report, and learn what you can do to protect your organization from these risks.<img src=”http://feeds.feedburner.com/~r/fortinet/blog/threat-research/~4/TscXePRjslk” height=”1″ width=”1″ alt=””/>

The FortiGuard Labs threat research team has noticed for some time that Pastebin and similar services are being used by malware authors, sometimes to evade detection or to obscure their purposes. Find out more.<img src=”http://feeds.feedburner.com/~r/fortinet/blog/threat-research/~4/S8DgnOngSrE” height=”1″ width=”1″ alt=””/>

FortiGuard Labs recently discovered and reported 7 vulnerabilities in version 8.0.1.0 and below of LiveZilla’s Live Chat. Read more about these vulnerabilities, all of which have since been fixed by the vendor.<img src=”http://feeds.feedburner.com/~r/fortinet/blog/threat-research/~4/kWh4bHiYnfQ” height=”1″ width=”1″ alt=””/>

FortiGuard Labs has released a new playbook on the threat actor group named Yet Another Panda. Learn more about a recent spear phishing email campaign containing the Zegost info stealer malware.<img src=”http://feeds.feedburner.com/~r/fortinet/blog/threat-research/~4/49hGDVcEPgo” height=”1″ width=”1″ alt=””/>

In Part II of this blog series, we identified three child processes that were created by the IcedID malware. In Part III, we provide a deep analysis of those child processes.<img src=”http://feeds.feedburner.com/~r/fortinet/blog/threat-research/~4/0EEDkjvcpuo” height=”1″ width=”1″ alt=””/>

Learn more about the core IcedID payload, a banking trojan which performs web injection on browsers and acts as proxy to inspect and manipulate traffic. This is part two of a three part series.<img src=”http://feeds.feedburner.com/~r/fortinet/blog/threat-research/~4/UXFtcuRIqfE” height=”1″ width=”1″ alt=””/>