Search

Description Name: CVE-2018-9206 - JQuery Arbitrary File Upload Exploit Attempt - HTTP (Request) . This is Trend Micro detection for HTTP network protocol that manifests exploit activities and can be used for N/A.The host exhibiting this type of netwo...

This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It encrypts files found in specific folders. It

This Hacking Tool arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It connects to a website to send and receive

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It gathers certain information on the affected computer.

compromised. Arrival Details This Trojan arrives via SMS messages that contain the following details: In order to install the free encryption software on mobile,please use this link http://{BLOCKED

This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It drops files as ransom note. Arrival Details This

path}\ids.txt -> contains encryption key and available drives %AppDataLocal%\.{Machine GUID} {directory with encrypted files}\.{Machine GUID} -> contains encryption key, extension, ransom note file name

This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This spyware arrives on a system as a

This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This spyware arrives on a system as a

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It connects to certain websites to send and receive

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a

(Default: yes) -p {path} → Target folder to encrypt files -reboot {yes|no} → Reboot after end encryption of all files or disks. (Default: yes) -rename {yes|no} → Rename file after encryption. (Default: yes)

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It attempts to steal sensitive online banking

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It attempts to steal sensitive online banking

information, which may then lead to the unauthorized use of the stolen data. Installation This Trojan drops the following files: %Application Data%\{random folder name 2}\{random file name}.osb - non-malicious

launching on other machines /TARGET= → specify a path to a file or a directory to encrypt /FAST=→ specify buffer size for fast encryption /MIN=→ specify minimum file size to encrypt /MAX=→ specify minimum

parameters for launching on other machines /TARGET= → specify a path to a file or a directory to encrypt /FAST= → specify buffer size for fast encryption /MIN= → specify minimum file size to encrypt /MAX=

the password used to archive files, this file is deleted immediately after encryption It leaves the following text files: {Logical Drive}:\+{user name}_files C:\tempfile\number.asc --> this file is the

the password used to archive files, this file is deleted immediately after encryption It leaves the following text files: {Logical Drive}:\+{user name}_files C:\tempfile\number.asc --> this file is the

Ransomware accepts the following parameters: -v / --verbose -no-mutex --exit-safe-boot --sd-killer-off → skips to file encryption -p {path to encrypt} -m {all | local | net | backups} -l {output to log file}