Quantcast
Channel: Webroot Blog
Browsing all 1153 articles
Browse latest View live

Image may be NSFW.
Clik here to view.

New commercially available DIY invisible Bitcoin miner spotted in the wild

By Dancho Danchev Just as we anticipated in our previous analysis of a commercially available Bitcoin miner, cybercriminals continue “innovating” on this front by releasing more advanced and...

View Article


Image may be NSFW.
Clik here to view.

Fake ‘Export License/Payment Invoice’ themed emails lead to malware

By Dancho Danchev We have just intercepted yet another currently ongoing malicious spam campaign, enticing users into executing a fake Export License/Payment Invoice. Once gullible and socially...

View Article


Image may be NSFW.
Clik here to view.

Recent spike in FBI Ransomware striking worldwide

By Israel Chavarria Recently we have seen a spike of this ransomware in the wild and it appears as though its creators are not easily giving up. This infection takes your computer hostage and makes it...

View Article

Image may be NSFW.
Clik here to view.

Compromised Indian government Web site leads to Black Hole Exploit Kit

By Dancho Danchev Our sensors recently picked up a Web site infection, affecting the Web site of the Ministry of Micro And Medium Enterprises (MSME DI Jaipur). And although the Black Hole Exploit Kit...

View Article

Image may be NSFW.
Clik here to view.

Cybercriminals resume spamvertising Citibank ‘Merchant Billing Statement’...

By Dancho Danchev Over the past week, the cybercriminals behind the recently profiled ‘Citibank Merchant Billing Statement‘ themed campaign, resumed operations, and launched yet another massive spam...

View Article


Image may be NSFW.
Clik here to view.

Marijuana-themed DDoS for hire service spotted in the wild

By Dancho Danchev Largely thanks to the increasing availability of easy to use DIY (do-it-yourself) DDoS bots, we continue to observe an increase in international cybercrime-friendly market...

View Article

Image may be NSFW.
Clik here to view.

Fake ‘Vodafone U.K Images’ themed malware serving spam campaign circulating...

By Dancho Danchev We have just intercepted yet another spamvertised malware serving campaign, this time impersonating Vodafone U.K, in an attempt to trick the company’s customers into thinking that...

View Article

Image may be NSFW.
Clik here to view.

Compromised FTP/SSH account privilege-escalating mass iFrame embedding...

By Dancho Danchev Utilizing the very best in ‘malicious economies of scale’ concepts, cybercriminals have recently released a privilege-escalating Web-controlled mass iFrame embedding platform that’s...

View Article


Image may be NSFW.
Clik here to view.

New E-shop sells access to thousands of hacked PCs, accepts Bitcoin

By Dancho Danchev Remember the E-shop offering access to hacked PCs, based on malware ‘executions’ that we profiled last month? We have recently spotted a newly launched, competing E-shop, once again...

View Article


Image may be NSFW.
Clik here to view.

Pharmaceutical scammers impersonate Facebook’s Notification System, entice...

By Dancho Danchev Opportunistic pharmaceutical scammers are currently spamvertising tens of thousands of bogus emails impersonating Facebook’s Notification System in an attempt to trick users into...

View Article

Image may be NSFW.
Clik here to view.

iLivid ads lead to ‘Searchqu Toolbar/Search Suite’ PUA (Potentially Unwanted...

By Dancho Danchev Our sensors recently picked up an advertisement using Yieldmanager’s ad network, enticing users into downloading the iLivid PUA (Potentially Unwanted Application) on their PCs....

View Article

Image may be NSFW.
Clik here to view.

Hacked Origin, Uplay, Hulu Plus, Netflix, Spotify, Skype, Twitter, Instagram,...

By Dancho Danchev Aiming to capitalize on the multi-billion gaming market, cybercriminals actively data mine their botnets for accounting credentials, not just for popular gaming platforms, but also...

View Article

Image may be NSFW.
Clik here to view.

Scammers impersonate the UN Refugee Agency (UNHCR), seek your credit card...

By Dancho Danchev Opportunistic scammers have just launched a targeted spam campaign impersonating the UN Refugee Agency (UNHCR) in an attempt to trick users into handing over their complete credit...

View Article


Image may be NSFW.
Clik here to view.

Fake ‘Unsuccessful Fax Transmission’ themed emails lead to malware

By Dancho Danchev Have you sent an eFax recently? Watch out for an ongoing malicious spam campaign that tries to convince you that there’s been an unsuccessful fax transmission. Once socially...

View Article

Image may be NSFW.
Clik here to view.

How not to install Adobe Flash Player

By Dan Para It seems simple enough, I want to install Adobe Flash Player so I search for “flash player download and click on the first result, right? Ignoring the second link which doesn’t have a five...

View Article


Image may be NSFW.
Clik here to view.

Tens of thousands of spamvertised emails lead to W32/Casonline

By Dancho Danchev Fraudsters are currently spamvertising tens of thousands of emails enticing users into installing rogue, potentially unwanted (PUAs) casino software. Most commonly known as...

View Article

Image may be NSFW.
Clik here to view.

Rogue ads lead to SafeMonitorApp Potentially Unwanted Application (PUA)

By Dancho Danchev Our sensors just picked up yet another rogue ad enticing users into installing the SafeMonitorApp, a potentially unwanted application (PUA) that socially engineers users into giving...

View Article


Image may be NSFW.
Clik here to view.

How cybercriminals apply Quality Assurance (QA) to their malware campaigns...

By Dancho Danchev In 2013, the use of basic Quality Assurance (QA) practices has become standard practice for cybercrininals when launching a new campaign. In an attempt to increase the probability of...

View Article

Image may be NSFW.
Clik here to view.

Android.Bankun: Bank Information Stealing Application On Your Android Device

By Nathan Collier There’s one variant of Android.Bankun that is particularly interesting to me.  When you look at the manifest it doesn’t have even one permission.  Even wallpaper apps have internet...

View Article

Image may be NSFW.
Clik here to view.

Deceptive ads targeting German users lead to the ‘W32/SomotoBetterInstaller’...

By Dancho Danchev We’ve just intercepted yet another campaign serving deceptive ads, this time targeting German-speaking users into downloading and installing the privacy-invading ‘FLV Player’...

View Article
Browsing all 1153 articles
Browse latest View live