Vidar Malware Launcher Concealed in Help File

March 24, 2022 | Diana Lopera

Hunter

Yet Another Archive Format Smuggling Malware

June 24, 2021 | Diana Lopera

The use of novel disk image files to encapsulate malware distributed via spam ...

Image File Trickery Part II: Fake Icon Delivers NanoCore

March 11, 2021 | Diana Lopera

The .zipx file extension is used to denote that the ZIP archive format is ...

A Trump Sex Video? No, It's a RAT!

January 06, 2021 | Diana Lopera

While reviewing our spam traps, a particular campaign piqued our interest ...

Evasive URLs in Spam: Part 2

October 01, 2020 | Diana Lopera

A URL can be completely valid, yet still misleading. In this blog, we will ...

RATs and Spam: The Node.JS QRAT

August 24, 2020 | Diana Lopera

The Qua or Quaverse Remote Access Trojan (QRAT) is a Java-based RAT that can be ...

PhishINvite with Malicious ICS Files

July 01, 2020 | Diana Lopera

In an earlier blog entitled “Phishing in the Cloud”, we outlined that threat ...

TrickBot Disguised as COVID-19 Map

June 18, 2020 | Diana Lopera

Cybercriminals are continuously exploiting the Coronavirus (COVID-19) pandemic. ...

Excel Malspam: Password Protected … Not!

April 17, 2020 | Diana Lopera

Early March of this year, we blogged about multiple malspam campaigns utilizing ...

More Excel 4.0 Macro MalSpam Campaigns

March 11, 2020 | Diana Lopera

In light of the recent blog by my colleague Rodel Mendrez, we looked back at ...

RATs Wrapped and Hidden in PNG

February 27, 2020 | Diana Lopera

The Remote Access Tool (RAT) is one of the malware types we often encounter ...

Fake Windows Update Spam Leads to Cyborg Ransomware and Its Builder

November 19, 2019 | Diana Lopera

Recently, fake Microsoft Windows Update emails were spammed with the following ...

Double Loaded Zip File Delivers Nanocore

November 05, 2019 | Diana Lopera

Most malware sent via emails is packaged in archives such as ZIP, RAR, and 7z ...

Documents with IRM Password Protection Lead to Remcos RAT

September 27, 2019 | Diana Lopera

Documents attached to emails are commonly used as the initial vector to deliver ...

“Sexfavor” Email Scam Delivers Danabot

July 09, 2019 | Diana Lopera

Sextortion has been a widely used theme in spam campaigns since Q1 of 2018. ...

Fake CIA Sextortion Scam Uses SatoshiBox

April 04, 2019 | Diana Lopera

Another round of sextortion scam emails with a pdf attachment were pushed out ...

Sextortion Scam Now With Malicious Downloader

February 06, 2019 | Diana Lopera

Sextortion scams were a hit campaign last year and are continuing in 2019 with ...

Sextortion Scam Now With Malicious Downloader

February 06, 2019 | Diana Lopera

Sextortion scams were a hit campaign last year and are continuing in 2019 with ...