All / Spotlight / Malware / Ransomware / Intrusions By DateAlphabetical New version of Cryakl Ransomware demands $10k fo ... January 17, 2020 The Sonicwall CaptureLabs Threats Research team have observed a newly released version of Cryakl ransomware. First seen in early 2014 spreading via email, Cryakl works like mo … APT 33, 34, 35, 39, Destructive ZeroClear January 10, 2020 Overview: SonicWall Capture Labs Threat Research Team has been actively monitoring APT33, APT34, APT35, APT39, and tracking destructive malware in the Middle East and has foun … Dustman malware overwrites logical drives data w ... January 10, 2020 SonicWall Threats Research Team has analyzed Dustman malware whose code has similarity with “ZeroCleare” malware and it is suspected to be developed by Iranian hackers. ServHelper 2.0: Enriched with bot capabilities a ... January 9, 2020 SonicWall RTDMI ™ engine has recently detected a Nullsoft Scriptable Install System (NSIS) compiled executable file which executes new variant of ServHelper malware as a final … PDF Phishing campaign uses Google Docs to steal ... January 8, 2020 SonicWall malware research lab has discovered an ongoing phishing campaign which abuses genuine web-based software office suite platform like google docs MZP Ransomware actively spreading in the wild January 7, 2020 The SonicWall Capture Labs Threat Research Team observed reports of a new variant family of MZP ransomware [MZP.RSM] actively spreading in the wild. The MZP ransomware encrypt … EXIT spammer: Evolution of this work-in-progress ... December 24, 2019 The EXIT spammer author started from sending emails to his own email address and now has evolved to send emails to multiple recipients by dynamically updating spamming link in … Christmas themed Android malware/adware for 2019 December 23, 2019 Christmas themed Android malware/adware Jigsaw ransomware variant: Melka, easily reveals ... December 20, 2019 The SonicWall Capture Labs Threat Research Team observed reports of another variant of the Jigsaw ransomware spreading in the wild. The malware is written in .NET and appears … PDF using unseen MS-Office URI-Scheme to run rem ... December 18, 2019 Malware authors are using a new technique to run remote Microsoft Office (MS Office) files. SonicWall threat research team has observed a PDF file with embedded JavaScript, wh … LALALA InfoStealer which comes with Batch and Po ... December 13, 2019 SonicWall RTDMI ™ engine has recently detected LALALA infostealer which uses batch and PowerShell scripting to steal the victim’s data. File-less execution and use of steganography by ... December 12, 2019 Sonicwall Capture Research team has found an MS-Word file which is being used as initial vector for IcedId bot infection. The malicious word file is being circulated as an ema …
