Malware & Threats

Malware & Threats

Issued by: Security Week

Microsoft’s security team earlier this week said it found that a malware called Subzero — developed by Vienna-based company DSIRF — was deployed in 2021 and 2022. “Observed victims to date include law firms, banks and strategic consultancies in countries such as Austria, the United Kingdom and Panama,” it wrote in a blog entry on…

Malware & Threats

Issued by: Security Week

Initially announced in February, the macro-blocking feature is meant to prevent phishing attacks by making it more difficult for users to enable macros in documents received from the internet. Small snippets of code embedded in Office documents, macros have long been abused by threat actors in phishing attacks and for malware delivery. In 2016, Microsoft…

Malware & Threats

Issued by: Trend Micro Blog

Our in-depth analysis of what began as an unusual PowerShell script revealed intrusion sets associated with Gootkit loader. In the past, Gootkit used freeware installers to mask malicious files; now it uses legal documents to trick users into downloading these files. We uncovered this tactic through managed extended detection and response (MxDR) and by investigating…

Malware & Threats

Issued by: Security Week

In early April, 1912, many people believed that the Titanic was unsinkable. On April 15, 1912, the Titanic sank and by late April, 1912, as the news spread, people no longer believed that the Titanic was unsinkable. I think that the story of the Titanic and the mistaken belief that it was unsinkable can teach…

Malware & Threats

Issued by: Security Week

The breach was discovered on June 18 and the firm started notifying customers on July 6. However, the intrusion came to light only on July 21 when security researcher Dominic Alvieri came across a copy of the notification sent by Entrust to customers. Entrust is a Minneapolis, MN-based company that provides security solutions for user…