The notorious Emotet botnet has been linked to a new wave of malspam campaigns that take advantage of password-protected archive files to drop CoinMiner and Quasar RAT on compromised systems.
In an attack chain detected by Trustwave SpiderLabs researchers, an invoice-themed ZIP file lure was found to contain a nested self-extracting (SFX) archive, the first archive acting as a conduit to launch
Related Post
- November 22, 2024
APT-K-47 Uses Hajj-Themed Lures to Deliver Advanced Asyncshell
The threat actor known as Mysterious Elephant has been observed using an advanced version of malware called Asynshell. The attack
- November 22, 2024
Russian Hackers Deploy HATVIBE and CHERRYSPY Malware Across
Threat actors with ties to Russia have been linked to a cyber espionage campaign aimed at organizations in Central Asia,
- November 22, 2024
China-Linked TAG-112 Targets Tibetan Media with Cobalt Strike
A China-linked nation-state group called TAG-112 compromised Tibetan media and university websites in a new cyber espionage campaign designed to
- November 22, 2024
The Scale of Geoblocking by Nation
Interesting analysis: We introduce and explore a little-known threat to digital equality and freedomwebsites geoblocking users in response to political