All / Spotlight / Malware / Ransomware / Intrusions By DateAlphabetical Top Malware Anti-Analysis Coverage November 9, 2019 Introduction: Threat actors and malware authors use various anti-analysis techniques to keep initial access, execution, persistence, privilege escalation, credential access, l … PHP-FPM Vulnerability leads to Remote code execu ... November 4, 2019 PHP-FPM (PHP Fast Process Manager) is a FastCGI handler for PHP scripts and applications, especially useful for busier sites. It’s commonly paired with web servers to serve ap … Dtrack RAT targeting a Nuclear Power Plant in In ... October 30, 2019 Variants of the Dtrack Remote Access Trojan in the wild Hackers continue to mount attacks on Webmin serv ... October 25, 2019 Webmin servers have been under attack after (August) the major disclosure of remote code execution vulnerability. SonicWall Threat Research Lab continues to observe attempts t … vBulletin Remote command execution vulnerability October 18, 2019 Attacks exploiting vBulletin Remote command execution vulnerability (CVE-2019-16759) are active in the wild. BURAN Ransomware spreading through Javascript October 17, 2019 Buran ransomware is being distributed via JavaScript file Astaroth latest variant using Alternative Data S ... October 17, 2019 Astaroth is an information stealer which is primarily affecting Brazilian citizens since 2018. This malware prominently known for using Living Off The Land tactics to become i … Aggressive Android adware communicates with a nu ... October 15, 2019 An android adware that communicates with a bunch of malicious domains and increases the network consumption on the device. LATEST REMCOS V2.5.0 IS BEING USED BY MALWARE A ... October 14, 2019 REMCOS designed as Remote Control and Surveillance tool for legitimate purpose but being used by malware authors since a few years. SonicWall RTDMI ™ engine has recently de … Nemty 1.6 ransomware released. Uses 8192-bit en ... October 11, 2019 The SonicWall Capture Labs Threat Research Team observed reports of a new version of Nemty ransomware being delivered via the RIG exploit kit. Previous versions of Nemty have … Microsoft Security Bulletin Coverage for October ... October 8, 2019 SonicWall Capture Labs Threat Research Team has analyzed and addressed Microsoft’s security advisories for the month of October 2019. OBFUSCATED JAVASCRIPT BEING USED BY WSHRAT V2.0 October 7, 2019 WSHRAT V2.0 is using obfuscated Javascript
