Categories: News Categories: Threat Intelligence Tags: Education Beyond spikes in detections, the education sector has dealt with an onslaught of attacks ranging from spyware and denial of service tools to ransomware. |
The post Education hammered by exploits and backdoors in 2021 and 2022 appeared first on Malwarebytes Labs.
Read moreCredit to Author: Threat Intelligence Team| Date: Thu, 04 Aug 2022 20:48:37 +0000
BlackBasta lined up behind LockBit as the second most prevalent ransomware in July, a number of new gangs appeared, and an old one reappeared
The post Ransomware review: July 2022 appeared first on Malwarebytes Labs.
Read moreCredit to Author: Threat Intelligence Team| Date: Wed, 03 Aug 2022 21:25:52 +0000
The Malwarebytes Threat Intelligence team has discovered a new Remote Access Trojan that we dubbed Woody Rat used to target Russian entities.
The post Woody RAT: A new feature-rich malware spotted in the wild appeared first on Malwarebytes Labs.
Read moreCredit to Author: Threat Intelligence Team| Date: Wed, 20 Jul 2022 20:10:47 +0000
Scammers go mainstream by hijacking top Google searches and replacing them with malicious ads.
The post Google ads lead to major malvertising campaign appeared first on Malwarebytes Labs.
Read moreCredit to Author: Threat Intelligence Team| Date: Wed, 13 Jul 2022 16:17:09 +0000
While the war in Ukraine still rages, various threat actors continue to launch cyber attacks against its government entities. In this blog we review the latest campaign from the UAC-0056 threat group.
The post Cobalt Strikes again: UAC-0056 continues to target Ukraine in its latest campaign appeared first on Malwarebytes Labs.
Read moreCredit to Author: Threat Intelligence Team| Date: Fri, 01 Jul 2022 21:40:25 +0000
LockBit remained the most active threat in June, and “the costliest strain of ransomware ever documented” went dark while others surged.
The post Ransomware review: June 2022 appeared first on Malwarebytes Labs.
Read moreCredit to Author: Threat Intelligence Team| Date: Tue, 21 Jun 2022 15:25:09 +0000
Threat actors associated with Russian intelligence are using the fear or nuclear war to spread data-stealing malware in Ukraine.
The post Russia’s APT28 uses fear of nuclear war to spread Follina docs in Ukraine appeared first on Malwarebytes Labs.
Read moreCredit to Author: Threat Intelligence Team| Date: Mon, 20 Jun 2022 21:21:04 +0000
While we have heard less about web skimming attacks, attacks are still going on, but more quietly than before.
The post Client-side Magecart attacks still around, but more covert appeared first on Malwarebytes Labs.
Read moreCredit to Author: Threat Intelligence Team| Date: Mon, 13 Jun 2022 17:41:16 +0000
Tech support scams follow a simple business model that has not changed much over the years. After all, why change a recipe that continues to yield large profits. We see countless such campaigns and block them indiscriminately to protect our customers from being defrauded by a fraudulent tech support agent over the phone. Every now…
The post Taking down the IP2Scam tech support campaign appeared first on Malwarebytes Labs.
Read moreCredit to Author: Threat Intelligence Team| Date: Wed, 08 Jun 2022 21:33:04 +0000
We catch up with some old acquaintances that just aren’t ready to hang up the towel just yet.
The post MakeMoney malvertising campaign adds fake update template appeared first on Malwarebytes Labs.
Read more