Overview: SonicWall Capture Labs Threat Research Team recently found a new sample and activity for the “Clop” ransomware. The unique parts of the sample use Asymmetric Encrypt …

Android malware observed during Thanksgiving 2019

.NET Info Stealer sends the stolen user data through an email to the malware author.

Android malware that steals sensitive data from infected device

The SonicWall Capture Labs Threat Research Team observed reports of a new version of the Jigsaw ransomware.  The version analysed here appears to be an early debug build and s …

The SonicWall Capture Labs Threat Research Team observed reports of a new variant family of ANTEFRIGUS ransomware [ANTEFRIGUS.RSM] actively spreading in the wild. The ANTEFRIG …

Loki-Bot is an information stealer which is active in the wild since 2015. The bot is now using image steganography and multi-layered protection as a part of its infection.

Introduction: Threat actors and malware authors use various anti-analysis techniques to keep initial access, execution, persistence, privilege escalation, credential access, l …

Variants of the Dtrack Remote Access Trojan in the wild

Buran ransomware is being distributed via JavaScript file

Astaroth is an information stealer which is primarily affecting Brazilian citizens since 2018. This malware prominently known for using Living Off The Land tactics to become i …

REMCOS designed as Remote Control and Surveillance tool for legitimate purpose but being used by malware authors since a few years. SonicWall RTDMI ™ engine has recently de …