HackDig : Dig high-quality web security articles for hacker

Pinkslipbot banking Trojan exploiting infected machines as control servers

Pinkslipbot banking Trojan is a banking Trojan that uses a complicated multistage proxy for HTTPS-based control server communication. Security researchers at McAfee Labs have spotted a new strain of the Pinkslipbot banking malware (also known as QakBot/QBot) that leverages UPnP to open ports, allowing incoming connections from anyone on the Internet to commu
Publish At:2017-06-19 11:00 | Read:199 | Comments:0 | Tags:Breaking News Cyber Crime Malware Banking Malware botnet Cyb

QakBot Banking Trojan Causes Massive Active Directory Lockouts

IBM X-Force Research recently observed a wave of malware-induced Active Directory (AD) lockouts across several incident response engagements. The lockouts caused hundreds to thousands of AD users to get locked out of their company’s domain in rapid succession, leaving employees of the impacted organizations unable to access their endpoints, company ser
Publish At:2017-06-03 00:15 | Read:366 | Comments:0 | Tags:Advanced Threats Incident Response Threat Intelligence Banki

TrickBot Is Hand-Picking Private Banks for Targets — With Redirection Attacks in Tow!

IBM X-Force research follows organized cybercrime and continually monitors the criminals’ targets and modus operandi. In a recent analysis of TrickBot campaigns in the U.K., Australia and Germany, I found that the operators of the infamous Trojan have been adding new redirection attacks focused on a list of brands that I had never seen in the past. Cur
Publish At:2017-04-27 19:35 | Read:486 | Comments:0 | Tags:Banking & Financial Services Fraud Protection Malware Threat

Avalanche: Thwarting Cybercriminal Hazards with Law Enforcement Collaboration

On November 30th, an international law enforcement operation stamped out Avalanche, a large-scale content and management platform designed for the delivery of bullet-proof botnets. Avalanche’s scale and scope spanned victims from 180 countries, over 800,000 domains in 60+ top-level domains (TLD), more than one million phishing and spam e-mails, 500,000 infec
Publish At:2016-12-07 22:10 | Read:828 | Comments:0 | Tags:Botnets Malware Avalanche banking malware botnet law enforce

Brazilian underground is the first in spreading cross-platform malware

Coder in the Brazilian Cyber Criminal underground are Pioneering Cross-platform malware relying on Java archive (JAR) Files. Recently security experts at PaloAlto Networks uncovered a new family of ransomware dubbed KeRanger that targets Mac OS X users, a circumstance that demonstrates that every OS is potentially at risk. Now researchers at Kaspersky Lab ha
Publish At:2016-03-09 11:05 | Read:819 | Comments:0 | Tags:Breaking News Malware Banking Malware Brazil cross-platform

Tinba, a 20KB trojan that scares banks in Singapore and Indonesia

A new variant of the infamous Tinba banking trojan has emerged in the wild and is targeting financial institutions in the Asia Pacific region. Even small threats can scare the giants, this is the case of Tinba, a small malware that continues to create serious problems for financial institutions. Tinba is a popular financial tr
Publish At:2016-01-19 17:30 | Read:925 | Comments:0 | Tags:Breaking News Cyber Crime Malware Banking Malware cyber crim

Banking Malware Moving Over Facebook Hosted in Cloud

A new run of Spy Banker banking malware infections has been targeting Portuguese-speaking victims in Brazil.While Spy Banker is an old threat, dating back to 2009 according to some security companies, the latest wrinkle attackers are taking is a new one. The campaign, spotted by researchers at Zscaler, spreads primarily over social media—Facebook for the m
Publish At:2015-12-10 18:25 | Read:838 | Comments:0 | Tags:Cloud Security Malware Social Engineering Web Security Banki

This Week in Security: Experian and T-Mobile Breach, Linux Botnet, Android Stagefright 2.0

Our security roundup series covers the week’s trending topics in the world of InfoSec. In this quick-read compilation, we’ll let you know of the latest news and controversies that the industry has been talking about recently.Here’s what you don’t want to miss from the week of September 28, 2015:A massive data breach at Experian – one of largest credit report
Publish At:2015-10-05 07:20 | Read:826 | Comments:0 | Tags:This Week in Security banking malware breach Citadel DDoS Ex

Dridex Banking Malware Back in Circulation

Conspicuously off the grid for close to two months, the Dridex banking Trojan made some noise Thursday morning when a large phishing campaign, primarily targeting victims in the U.K., was corralled by researchers at Palo Alto Networks.The phishing emails are laced with a Microsoft Word document that entices users to enable macros that call out to attacker-co
Publish At:2015-10-02 08:30 | Read:526 | Comments:0 | Tags:Malware Banking Malware banking trojan Dridex krebs on secur

Infected Korean Website Installs Banking Malware

On September 18, 2015, we saw an activity on koreatimes.com where we captured a malicious binary. We investigated further and found that this campaign is specifically targeted to Korean sites and Korean banks. We looked at our logs for this year and found more Korean websites infected: koreatimes.com (Sep. 18, 2015) filehon.com(May 30, 2015) joara.com (May
Publish At:2015-09-28 20:10 | Read:1089 | Comments:0 | Tags:Banking Malware exploit kit Malware Deep Dive New Infection

This Week in Security: Health Insurer Breached, Attacks on DOE, McAfee for President

Our security roundup series covers the week’s trending topics in the world of InfoSec. In this quick-read compilation, we’ll let you know of the latest news and controversies that the industry has been talking about recently.Here’s what you don’t want to miss from the week of September 7, 2015:Source: GemaltoAccording to digital security firm Gemalto, its la
Publish At:2015-09-11 16:55 | Read:541 | Comments:0 | Tags:This Week in Security banking malware breach department of e

Winning the Online Banking War

Detecting banking malware has become part and parcel of the security industry, so cybercriminals are continuously looking to gain the upper hand in the battle against the financial industry and security vendors. In the BlackHat presentation Winning the Online Banking War last August 5, Sean Park proposed the use of a new online banking security framework for
Publish At:2015-08-12 05:10 | Read:645 | Comments:0 | Tags:Malware banking malware online banking malware Trojan

Five Arrested in Zeus, SpyEye Group Takedown

Authorities in six different countries worked together to take down a cybercrime ring which ultimately infected tens of thousands of computers with Zeus and SpyEye malware and made off with roughly $2.25 million from banks in the process.Europol and Eurojust joined forces to take down the group, based largely in Ukraine, that was believed to have been develo
Publish At:2015-06-30 06:30 | Read:611 | Comments:0 | Tags:Government Malware Banking Malware Europol JIT malware SpyEy

Europol arrested members of a gang behind Zeus And SpyEye

The law enforcement agencies from six European countries coordinated by the Europol have arrested members of a Ukrainian ring behind Zeus and SpyEye botnets. The law enforcement agencies from six European countries have dealt a serious blow to the organized crime by taking down a Ukrainian ring suspected of developing managing
Publish At:2015-06-27 10:25 | Read:670 | Comments:0 | Tags:Breaking News Cyber Crime Laws and regulations Banking Malwa

Vawtrak Uses Tor2Web making hard to track down its servers

Security experts at Fortinet uncovered a new strain of the Vawtrak banking Trojan is implementing an obscuring mechanism based on the Tor2Web service. The authors of the banking Trojan Vawtrak are adopting a new tactic to hide the traffic to its servers,  they are exploiting  the Tor2Web service to masquerade malicious connect
Publish At:2015-06-10 07:30 | Read:592 | Comments:0 | Tags:Breaking News Malware Banking Malware Cybercrime malware oni


Share high-quality web security related articles with you:)


Tag Cloud