PREVIOUS
PREVIOUS
  • TROJ_HWDOOR.A

    This malware is associated with the attacks against the word processing application Hangul Word Processor (HWP), which is able to run PostScript code. The attacks do not involve actual exploits, the attackers instead abuse a feature of PostScript.
    Read more   

  • TSPY_EMOTET.AUSJLA

    This information stealing malware arrives as spam spoofing an invoice or payment notification. If the user clicks the URL in the email, it executes a PowerShell command that downloads EMOTET.
    Read more   

  • TSPY_EMOTET.AUSJKV

    This information stealing malware arrives as spam spoofing an invoice or payment notification. If the user clicks the URL in the email, it executes a PowerShell command that downloads EMOTET.
    Read more   

  • TSPY_EMOTET.AUSJKW

    This information stealing malware arrives as spam spoofing an invoice or payment notification. If the user clicks the URL in the email, it executes a PowerShell command that downloads EMOTET.
    Read more   

  • TSPY_EMOTET.SMD3

    This information stealing malware arrives as spam spoofing an invoice or payment notification. If the user clicks the URL in the email, it executes a PowerShell command that downloads EMOTET.
    Read more   

  • TROJ_ANDROM.SVN

    This malware is involved in the filelessly-installed backdoor malware attack discovered early August 2017. Users affected by this malware may find their systems exhibiting malicious routines.
    Read more   

  • TROJ_PSINJECT.A

    This malware is involved in the filelessly-installed backdoor malware attack discovered early August 2017. It is able to install a backdoor malware onto the systems it infects.
    Read more   

  • BKDR_ANDROM.ETIN

    This malware is the filelessly-installed backdoor malware discovered on early August 2017. Users whose systems are affected by this particular malware may find the security of their systems compromised.
    Read more   

  • BKDR_FORSHARE.A

    This malware is linked to the discovery of fileless crytocurrency miner TROJ64_COINMINER.QO late August 2017.
    Read more   

  • TROJ64_COINMINER.QO

    This malware is a cryptocurrency mining malware discovered late August 2017 and found to be sporting fileless routines. Users affected by this malware may find their systems being used to mine cryptocurrency without their authorization.
    Read more   

PREVIOUS
PREVIOUS