Overview: SonicWall Capture Labs Threat Research Team recently found a new sample and activity for the “Clop” ransomware. The unique parts of the sample use Asymmetric Encrypt …

SonicWall Threats Research Team found a few Photo editor applications which were distributed via Google Play Store. Upon analysis, these apps were found to be Adware.

Android malware observed during Thanksgiving 2019

.NET Info Stealer sends the stolen user data through an email to the malware author.

What is Apache Solr? Apache Solr is a fast open-source Java search server. Solr enables you to easily create search engines which searches websites, databases and files. It’s …

Android malware that steals sensitive data from infected device

BAT file based ransomware is targeting people in China

Loki-Bot is an information stealer which is active in the wild since 2015. The bot is now using image steganography and multi-layered protection as a part of its infection.

Introduction: Threat actors and malware authors use various anti-analysis techniques to keep initial access, execution, persistence, privilege escalation, credential access, l …

PHP-FPM (PHP Fast Process Manager) is a FastCGI handler for PHP scripts and applications, especially useful for busier sites. It’s commonly paired with web servers to serve ap …

Variants of the Dtrack Remote Access Trojan in the wild

Webmin servers have been under attack after (August) the major disclosure of remote code execution vulnerability. SonicWall Threat Research Lab continues to observe attempts t …