FortiGuard Labs analyzed fresh TOTOLINK vulnerabilities which the Beastmode Mirai-based DDoS campaign added to its arsenal. Read about how this threat leverages these vulnerabilities to control affected devices.
During the past month, FortiEDR detected a campaign by Deep Panda, a Chinese APT group. In this blog, FortiGuard Labs researchers share their analysis of the flow of infection, the backdoor, and new rootkit, along with the attribution of this campaign to these Chinese nation-state threat actors.
FortiGuard Labs discovered a spearphishing email for a Ukrainian fuel company with an attached invoice—seemingly from another fuel provider—that contains the IcedID Trojan. Read to learn more about the infection process and subsequent malware deployment by the threat actors behind IcedID.
FortiGuard Labs discovered more than 500 Microsoft Excel files involved in a campaign to deliver a fresh Emotet Trojan variant. Read part II of our analysis to learn more about malicious modules involved and how to avoid this lure.
FortiGuard Labs uncovered tax themed phishing scams. Read our blog to learn more about how to avoid these socially engineered lures this season and stay ahead of threat actors.
FortiGuard Labs provides a brief historical insight into the history of computer malware from the pre-internet era to the current world of botnets, ransomware, viruses, worms, etc. Read to learn more.
Findings in the semiannual FortiGuard Labs threat report indicate that cyber criminals are developing attacks faster than ever. Discover the tactics that are being used.
FortiGuard Labs discovered a phishing email addressed to a Ukrainian recipient that masqueraded as purchase order containing a PPT attachment aiming to deploy the Agent Tesla RAT. Learn more.
FortiGuard Labs discovered more than 500 Microsoft Excel files involved in a campaign to deliver a fresh Emotet Trojan variant. Read to learn more how to avoid this lure.
With the Attack Flow Project with MITRE, FortiGuard Labs and other Center participants aim to show how attacks are moving from left to right on the kill chain. This flow gives a view of where specific actions will take place so that IT leaders can better prioritize cyber defense.