Search cyberveille.decio.ch

CVE-2023-36025 Exploited for Defense Evasion in Phemedrone Stealer Campaign

This blog delves into the Phemedrone Stealer campaign's exploitation of CVE-2023-36025, the Windows Defender SmartScreen Bypass vulnerability, for its defense evasion and investigates the malware's payload.

#trendmicro #EN #2023 #CVE-2023-36025 #Phemedrone #Stealer

·trendmicro.com·Jan 12, 2024

CVE-2023-36025 Exploited for Defense Evasion in Phemedrone Stealer Campaign

A Closer Look at ChatGPT's Role in Automated Malware Creation

As the use of ChatGPT and other artificial intelligence (AI) technologies becomes more widespread, it is important to consider the possible risks associated with their use. One of the main concerns surrounding these technologies is the potential for malicious use, such as in the development of malware or other harmful software. Our recent reports discussed how cybercriminals are misusing the large language model’s (LLM) advanced capabilities: We discussed how ChatGPT can be abused to scale manual and time-consuming processes in cybercriminals’ attack chains in virtual kidnapping schemes. We also reported on how this tool can be used to automate certain processes in harpoon whaling attacks to discover “signals” or target categories.

#trendmicro #EN #2023 #malware #articles #news #reports #research #ChatGPT

·trendmicro.com·Nov 15, 2023

A Closer Look at ChatGPT's Role in Automated Malware Creation

Malvertising Used as Entry Vector for BlackCat Actors Also Leverage SpyBoy Terminator

We found that malicious actors used malvertising to distribute malware via cloned webpages of legitimate organizations. The distribution involved a webpage of the well-known application WinSCP, an open-source Windows application for file transfer. We were able to identify that this activity led to a BlackCat (aka ALPHV) infection, and actors also used SpyBoy, a terminator that tampers with protection provided by agents.

#trendmicro #EN #2023 #malware #endpoints #BlackCat #WinSCP #report #SpyBoy #GoogleAds

·trendmicro.com·Jul 3, 2023

Malvertising Used as Entry Vector for BlackCat Actors Also Leverage SpyBoy Terminator

BlackCat Ransomware Deploys New Signed Kernel Driver

In this blog post, we will provide details on a BlackCat ransomware incident that occurred in February 2023, where we observed a new capability, mainly used for the defense evasion phase.

#trendmicro #EN #2023 #ransomware #research #BlackCat #Kernel #Driver

·trendmicro.com·May 22, 2023

BlackCat Ransomware Deploys New Signed Kernel Driver

Lemon Group’s Cybercriminal Businesses Built on Preinfected Devices

An overview of the Lemon Group’s use of preinfected mobile devices, and how this scheme is potentially being developed and expanded to other internet of things (IoT) devices. This research was presented in full at the Black Hat Asia 2023 Conference in Singapore in May 2023.

#trendmicro #EN #2023 #malware #cyber-crime #LemonGroup #Preinfected #Guerrilla #Android #mobile #mobile-device #IoT #AndroidOS_Guerilla

·trendmicro.com·May 21, 2023

Lemon Group’s Cybercriminal Businesses Built on Preinfected Devices

Attackers Use Containers for Profit via TrafficStealer

We found TrafficStealer abusing open container APIs in order to redirect traffic to specific websites and manipulate engagement with ads.

#trendmicro #EN #2023 #cloud #report #Containers #TrafficStealer #docker

·trendmicro.com·Apr 26, 2023

Attackers Use Containers for Profit via TrafficStealer

Mac Malware MacStealer Spreads as Fake P2E Apps

We detected Mac malware MacStealer spreading via websites, social media, and messaging platforms Twitter, Discord, and Telegram. Cybercriminals lure victims to download it by plagiarizing legitimate play-to-earn (P2E) apps’ images and offering jobs as beta testers.

#trendmicro #EN #2023 #MacStealer #malware #macos #report #Telegram #Twitter #P2E #Mac

·trendmicro.com·Apr 5, 2023

Mac Malware MacStealer Spreads as Fake P2E Apps

Information on Attacks Involving 3CX Desktop App

In this blog entry, we provide technical details and analysis on the 3CX attacks as they happen. We also discuss available solutions which security teams can maximize for early detection and mitigate the impact of 3CX attacks.

#trendmicro #EN #2023 #3CX #reports #research

·trendmicro.com·Apr 2, 2023

Information on Attacks Involving 3CX Desktop App

New OpcJacker Malware Distributed via Fake VPN Malvertising

We discovered a new malware, which we named “OpcJacker” (due to its opcode configuration design and its cryptocurrency hijacking ability), that has been distributed in the wild since the second half of 2022.

#trendmicro #EN #2023 #malware #endpoints #research #articles #news #reports #OpcJacker #VPN #Malvertising

·trendmicro.com·Mar 29, 2023

New OpcJacker Malware Distributed via Fake VPN Malvertising

Enigma Stealer Targets Cryptocurrency Industry with Fake Jobs

We discovered an active campaign targeting Eastern Europeans in the cryptocurrency industry using fake job lures.

#trendmicro #EN #2023 #malware #endpoints #research #Cryptocurrency #campaign #Fake #Jobs

·trendmicro.com·Feb 9, 2023

Enigma Stealer Targets Cryptocurrency Industry with Fake Jobs

Batloader Malware Abuses Legitimate Tools Uses Obfuscated JavaScript Files in Q4 2022 Attacks

We discuss the Batloader malware campaigns we observed in the last quarter of 2022, including our analysis of Water Minyades-related events (This is the intrusion set we track behind the creation of Batloader).

#trendmicro #EN #2023 #Malware #Batloader #analysis

·trendmicro.com·Jan 19, 2023

Batloader Malware Abuses Legitimate Tools Uses Obfuscated JavaScript Files in Q4 2022 Attacks

Mac Malware MacStealer Spreads as Fake P2E Apps

We detected Mac malware MacStealer spreading via websites, social media, and messaging platforms Twitter, Discord, and Telegram. Cybercriminals lure victims to download it by plagiarizing legitimate play-to-earn (P2E) apps’ images and offering jobs as beta testers.

#trendmicro #EN #2023 #MacStealer #malware #macos #report #Telegram #Twitter #P2E #Mac

·trendmicro.com·Apr 5, 2023

Mac Malware MacStealer Spreads as Fake P2E Apps

Information on Attacks Involving 3CX Desktop App

In this blog entry, we provide technical details and analysis on the 3CX attacks as they happen. We also discuss available solutions which security teams can maximize for early detection and mitigate the impact of 3CX attacks.

#trendmicro #EN #2023 #3CX #reports #research

·trendmicro.com·Apr 2, 2023

Information on Attacks Involving 3CX Desktop App

New OpcJacker Malware Distributed via Fake VPN Malvertising

We discovered a new malware, which we named “OpcJacker” (due to its opcode configuration design and its cryptocurrency hijacking ability), that has been distributed in the wild since the second half of 2022.

#trendmicro #EN #2023 #malware #endpoints #research #articles #news #reports #OpcJacker #VPN #Malvertising

·trendmicro.com·Mar 29, 2023

New OpcJacker Malware Distributed via Fake VPN Malvertising

Enigma Stealer Targets Cryptocurrency Industry with Fake Jobs

We discovered an active campaign targeting Eastern Europeans in the cryptocurrency industry using fake job lures.

#trendmicro #EN #2023 #malware #endpoints #research #Cryptocurrency #campaign #Fake #Jobs

·trendmicro.com·Feb 9, 2023

Enigma Stealer Targets Cryptocurrency Industry with Fake Jobs

Batloader Malware Abuses Legitimate Tools Uses Obfuscated JavaScript Files in Q4 2022 Attacks

We discuss the Batloader malware campaigns we observed in the last quarter of 2022, including our analysis of Water Minyades-related events (This is the intrusion set we track behind the creation of Batloader).

#trendmicro #EN #2023 #Malware #Batloader #analysis

·trendmicro.com·Jan 19, 2023

Batloader Malware Abuses Legitimate Tools Uses Obfuscated JavaScript Files in Q4 2022 Attacks