Black Hat 2020: Linux Spyware Stack Ties Together 5 Chinese APTs
The groups, all tied to the Winnti supply-chain specialist gang, were seen using the same…
Malware
CamuBot Banking Trojan Returns In Targeted Attacks
The malware is back in targeted attacks against Brazilian banking customers, this time using a…
SMS Attack Spreads Emotet, Steals Bank Credentials
A new Emotet campaign is spread via SMS messages pretending to be from banks and…
Cobalt Ulster Strikes Again With New ForeLord Malware
Threatpost talks to Alex Tilley, senior security researcher with Dell SecureWorks’ Counter Threat Unit Research…
Activities of a Nigerian Cybercriminal Uncovered
Rise and fall of a Nigerian cybercriminal called ‘Dton,’ who made hundreds of thousands of…
TrickBot App Bypasses Non-SMS Banking 2FA
TrickBot victims are being fooled into downloading an app that records their screens – stealing…
FIN6 and TrickBot Combine Forces in ‘Anchor’ Attacks
FIN6 fingerprints were spotted in recent cyberattacks that initially infected victims with the TrickBot trojan,…
TA505 Crime Gang Deploys SDBbot for Corporate Network Takeover
The custom RAT offers persistent access, data exfiltration and lateral network movement. The TA505 cybercrime…
Banking.BR Android Trojan Emerges in Credential-Stealing Attacks
A new Android trojan targets banking customers with overlay attacks to steal their bank credentials…
Shade Threat Actors Call It Quits, Release 750K Encryption Keys
The team behind the ransomware, first spotted in late 2014 and typically targeting Russian victims,…