The Database Slayer: Deep Dive and Simulation of the Xbash Malware
In the world of malware, common ransomware schemes aim to take the data within databases ...
Read MoreThe State of Magecart: A Persistent Threat to E-Commerce Security
Trustwave SpiderLabs first blogged about Magecart back in 2019; fast forward five years and it is ...
Read MoreEmail Bombing: Why You Need to be Concerned
Over the last few months, the topic of email bombing has been brought to our attention multiple ...
Read MoreWhen User Input Lines Are Blurred: Indirect Prompt Injection Attack Vulnerabilities in AI LLMs
It was a cold and wet Thursday morning, sometime in early 2006. There I was sitting at the very top ...
Read MoreCVE-2024-11477: 7-Zip Flaw Allows Remote Code Execution
On November 20th, 2024, Zero Day Initiative (ZDI) researchers disclosed a critical flaw in 7-Zip.
Read MoreRockstar 2FA Phishing-as-a-Service (PaaS): Noteworthy Email Campaigns
Welcome to the second part of our investigation into the Rockstar kit, please check out part one ...
Read MoreRockstar 2FA: A Driving Force in Phishing-as-a-Service (PaaS)
Trustwave SpiderLabs has been actively monitoring the rise of Phishing-as-a-Service (PaaS) ...
Read MoreLessons from a Honeypot with US Citizens’ Data
Prior to last week’s US Presidential Election, the Trustwave SpiderLabs team was hard at work ...
Read More2024 Trustwave Risk Radar Report: Cyber Threats to the Retail Sector
As the holiday shopping season approaches, the 2024 Trustwave Risk Radar Report: Retail Sector ...
Read MoreHooked by the Call: A Deep Dive into The Tricks Used in Callback Phishing Emails
Introduction Previously, Trustwave SpiderLabs covered a massive fake order spam scheme that ...
Read MoreHow Threat Actors Conduct Election Interference Operations: An Overview
The major headlines that arose from the three most recent US presidential election cycles ...
Read MoreFeline Hackers Among Us? (A Deep Dive and Simulation of the Meow Attack)
Introduction In the perpetually evolving field of cybersecurity, new threats materialize daily. ...
Read MorePronsis Loader: A JPHP-Driven Malware Diverging from D3F@ck Loader
Trustwave's Threat Intelligence team has discovered a new malware dubbed Pronsis Loader, with its ...
Read MoreWhat We Know So Far About Zero-Day CUPS Vulnerabilities: CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177
On September 26, 2024, security researcher Simone Margaritellidisclosed the details of four ...
Read MoreShedding Light on Election Deepfakes
Contrary to popular belief, deepfakes — AI-crafted audio files, images, or videos that depict ...
Read MoreHTML Smuggling: How Blob URLs are Abused to Deliver Phishing Content
HTML smuggling techniques have been around for quite some time. A previous Trustwave SpiderLabs’ ...
Read MoreWhy Do Criminals Love Phishing-as-a-Service Platforms?
Phishing-as-a-Service (PaaS) platforms have become the go-to tool for cybercriminals, to launch ...
Read MoreSpam With A Political Twist: Fraudsters Are Exploiting The Election Season
The US election is less than 70 days away and threat actors are busy crafting malicious spam that ...
Read MoreDistributed Denial of Truth (DDoT): The Mechanics of Influence Operations and The Weaponization of Social Media
With the US election on the horizon, it’s a good time to explore the concept of social media ...
Read MoreTrustwave SpiderLabs Research: 20% of Ransomware Attacks in Financial Services Target Banking Institutions
The 2024 Trustwave Risk Radar Report: Financial Services Sector underscores the escalating threat ...
Read MoreExploring an Experimental Windows Kernel Rootkit in Rust
Around two years ago, memN0ps took the initiative to create one of the first publicly available ...
Read MoreHypervisor Development in Rust for Security Researchers (Part 1)
In the ever-evolving field of information security, curiosity and continuous learning drive ...
Read MoreYour Money or Your Data: Ransomware Readiness Planning
Today’s blog installment brings us to the end of our 30-week journey that covered 30 cybersecurity ...
Read MoreExposed and Encrypted: Inside a Mallox Ransomware Attack
Recently, a client enlisted the support of Trustwave to investigate an unauthorized access incident ...
Read MoreThe Willy Wonka World of Application Security Defenses
One doesn’t have to be a magician to understand how to track the hundreds, if not thousands, of ...
Read MoreThe Bug Stops Here: Using DevSecOps Workflows for Pest-Free Applications
Developers and cybersecurity have an interesting relationship. Developers have no problem with ...
Read MoreDeep Dive and Simulation of a MariaDB RCE Attack: CVE-2021-27928
In early 2021, a new vulnerability, identified as CVE-2021-27928, was discovered and published. It ...
Read MoreTrustwave Rapid Response: Mitigate Windows TCP/IP RCE Vulnerability (CVE-2024-38063)
Microsoft has disclosed a critical (CVSS 9.8) TCP/IP remote code execution (RCE) vulnerability that ...
Read More