SpiderLabs^® Blog

What's worse than annoying ads on a website? Crypto Miner on a website! Over the last couple of weeks there has been a lot of talk about Coinhive, a service that claims to provide an alternative to advertising for monetizing...

Read More 

Authors: Dr. Fahim Abbasi, Gerald Carsula and Rodel Mendrez Scam Overview Her Majesty's Revenue & Customs (HMRC) is the UK department responsible for collecting taxes and other tax related services like VAT returns. On 6th September, 2017, scammers launched a...

Read More 

It's that time of year where the seasons are changing. The Northern Hemisphere moves into Autumn, and the Southern Hemisphere moves to Spring. So it is with Locky. As we discussed in our last post, spam campaigns were downloading Locky...

Read More 

Back in August 2017, Trustwave Spiderlabs reported a spam campaign that distributed a new Locky variant called "diablo." As predicted that incident was just a primer for a much bigger campaign and indeed just a few weeks later a new...

Read More 

October is here and brings with it patches for 62 CVEs and a handful of additional advisories. 28 of the vulnerabilities patched are rated "Critical" and 34 are rated "Important". The largest number of vulnerabilities patched (18 total) reside in...

Read More 

Today we are publishing a SpiderLabs Advanced Threat Report that details a major cyberattack targeting banks mainly located in post-Soviet states. All the attacks share a common profile and the finely tuned orchestration of the entire operation shows an innovative...

Read More 

Trustwave Spiderlabs is pleased to announce the release of CorSigs version 4.50 for Trustwave Web Application Firewall (WAF) versions 7.6, 8.0 and 8.5. These rules are written to detect attacks or classes of attacks on web applications and their components....

Read More