New commercially available DIY invisible Bitcoin miner spotted in the wild
By Dancho Danchev Just as we anticipated in our previous analysis of a commercially available Bitcoin miner, cybercriminals continue “innovating” on this front by releasing more advanced and...
View ArticleFake ‘Export License/Payment Invoice’ themed emails lead to malware
By Dancho Danchev We have just intercepted yet another currently ongoing malicious spam campaign, enticing users into executing a fake Export License/Payment Invoice. Once gullible and socially...
View ArticleRecent spike in FBI Ransomware striking worldwide
By Israel Chavarria Recently we have seen a spike of this ransomware in the wild and it appears as though its creators are not easily giving up. This infection takes your computer hostage and makes it...
View ArticleCompromised Indian government Web site leads to Black Hole Exploit Kit
By Dancho Danchev Our sensors recently picked up a Web site infection, affecting the Web site of the Ministry of Micro And Medium Enterprises (MSME DI Jaipur). And although the Black Hole Exploit Kit...
View ArticleCybercriminals resume spamvertising Citibank ‘Merchant Billing Statement’...
By Dancho Danchev Over the past week, the cybercriminals behind the recently profiled ‘Citibank Merchant Billing Statement‘ themed campaign, resumed operations, and launched yet another massive spam...
View ArticleMarijuana-themed DDoS for hire service spotted in the wild
By Dancho Danchev Largely thanks to the increasing availability of easy to use DIY (do-it-yourself) DDoS bots, we continue to observe an increase in international cybercrime-friendly market...
View ArticleFake ‘Vodafone U.K Images’ themed malware serving spam campaign circulating...
By Dancho Danchev We have just intercepted yet another spamvertised malware serving campaign, this time impersonating Vodafone U.K, in an attempt to trick the company’s customers into thinking that...
View ArticleCompromised FTP/SSH account privilege-escalating mass iFrame embedding...
By Dancho Danchev Utilizing the very best in ‘malicious economies of scale’ concepts, cybercriminals have recently released a privilege-escalating Web-controlled mass iFrame embedding platform that’s...
View ArticleNew E-shop sells access to thousands of hacked PCs, accepts Bitcoin
By Dancho Danchev Remember the E-shop offering access to hacked PCs, based on malware ‘executions’ that we profiled last month? We have recently spotted a newly launched, competing E-shop, once again...
View ArticlePharmaceutical scammers impersonate Facebook’s Notification System, entice...
By Dancho Danchev Opportunistic pharmaceutical scammers are currently spamvertising tens of thousands of bogus emails impersonating Facebook’s Notification System in an attempt to trick users into...
View ArticleiLivid ads lead to ‘Searchqu Toolbar/Search Suite’ PUA (Potentially Unwanted...
By Dancho Danchev Our sensors recently picked up an advertisement using Yieldmanager’s ad network, enticing users into downloading the iLivid PUA (Potentially Unwanted Application) on their PCs....
View ArticleHacked Origin, Uplay, Hulu Plus, Netflix, Spotify, Skype, Twitter, Instagram,...
By Dancho Danchev Aiming to capitalize on the multi-billion gaming market, cybercriminals actively data mine their botnets for accounting credentials, not just for popular gaming platforms, but also...
View ArticleScammers impersonate the UN Refugee Agency (UNHCR), seek your credit card...
By Dancho Danchev Opportunistic scammers have just launched a targeted spam campaign impersonating the UN Refugee Agency (UNHCR) in an attempt to trick users into handing over their complete credit...
View ArticleFake ‘Unsuccessful Fax Transmission’ themed emails lead to malware
By Dancho Danchev Have you sent an eFax recently? Watch out for an ongoing malicious spam campaign that tries to convince you that there’s been an unsuccessful fax transmission. Once socially...
View ArticleHow not to install Adobe Flash Player
By Dan Para It seems simple enough, I want to install Adobe Flash Player so I search for “flash player download and click on the first result, right? Ignoring the second link which doesn’t have a five...
View ArticleTens of thousands of spamvertised emails lead to W32/Casonline
By Dancho Danchev Fraudsters are currently spamvertising tens of thousands of emails enticing users into installing rogue, potentially unwanted (PUAs) casino software. Most commonly known as...
View ArticleRogue ads lead to SafeMonitorApp Potentially Unwanted Application (PUA)
By Dancho Danchev Our sensors just picked up yet another rogue ad enticing users into installing the SafeMonitorApp, a potentially unwanted application (PUA) that socially engineers users into giving...
View ArticleHow cybercriminals apply Quality Assurance (QA) to their malware campaigns...
By Dancho Danchev In 2013, the use of basic Quality Assurance (QA) practices has become standard practice for cybercrininals when launching a new campaign. In an attempt to increase the probability of...
View ArticleAndroid.Bankun: Bank Information Stealing Application On Your Android Device
By Nathan Collier There’s one variant of Android.Bankun that is particularly interesting to me. When you look at the manifest it doesn’t have even one permission. Even wallpaper apps have internet...
View ArticleDeceptive ads targeting German users lead to the ‘W32/SomotoBetterInstaller’...
By Dancho Danchev We’ve just intercepted yet another campaign serving deceptive ads, this time targeting German-speaking users into downloading and installing the privacy-invading ‘FLV Player’...
View Article