PREVIOUS
PREVIOUS
  • Backdoor.Win64.ANCHOR.A

    This is the Trend Micro detection for the backdoor installed by the PowerTrick post-exploitation toolkit believed to be developed by creators of Trickbot.This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
    Read more   

  • Backdoor.MSIL.REMCOS.AOJ

    This malware was seen delivered via malicious spam spoofing the brand DHL as the sender. It came as an .
    Read more   

  • Coinminer.Linux.KERBERDS.A

    This new version of KERBERDS, a known crypto-mining malware that uses an ld.so.
    Read more   

  • Trojan.SH.KERBERDS.A

    This new version of KERBERDS, a cryptomining malware that uses an ld.so.
    Read more   

  • Trojan.JS.NODSTER.A

    This malware is part of the fileless botnet Novter that is delivered via the KovCoreG malvertising campaign.This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
    Read more   

  • Trojan.JS.KOVCOREG.A

    This malware is part of the fileless botnet Novter distributed by the KovCoreG malvertising campaign.This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
    Read more   

  • Rootkit.Linux.SKIDMAP.A

    This rootkit is used by Skidmap - a Linux malware - to hide its cryptocurrency-mining abilities.This Rootkit arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
    Read more   

  • Coinminer.Win64.MALXMR.TIAOODBZ

    This miner figured in the fileless GhostMiner that uses WMI Objects. GhostMiner is known to kill competing other miner payloads.
    Read more   

  • Backdoor.Linux.BASHLITE.SMJC2

    This backdoor is seen propagating via CVE-2018-18636, a cross-site scripting vulnerability affecting the wireless router D-Link DSL-2640T. This malware is capable of receiving commands to flood other systems.
    Read more   

  • ELF_SETAG.SM

    This malware is part of an attack chain that involves searching for exposed or publicly accessible Elasticsearch databases/servers. The malware would invoke a shell with an attacker-crafted search query with encoded Java commands.
    Read more   

PREVIOUS
PREVIOUS