Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures
A Brazilian banking trojan called Ousaban is targeting Windows users in Spain and Portugal, using phishing PDFs disguised as corrupted files. Discovered…
Tag: Kaspersky
Brazilian Tetrade: Banking Trojan Syndicate
The Brazilian Tetrade is a group of banking trojans identified by Kaspersky, including Grandoreiro, Guildma, Melcoz, and Ousaban (Javali). They originated in…
StrikeShark Campaign Uses Novel SharkLoader Malware to Deploy Cobalt Strike Beacon
A newly identified cyber attack campaign, tracked as StrikeShark by Kaspersky, is deploying a previously undocumented malware family called SharkLoader to deliver…
OceanLotus Targets Vietnam Investors With SPECTRALVIPER in FireAnt Supply Chain Attack
ESET has uncovered two campaigns by the Vietnam-aligned threat actor OceanLotus (APT32) targeting domestic entities and stock investors with the SPECTRALVIPER backdoor.…
The Gentlemen RaaS Deploys GentleKiller EDR Framework Targeting 400 Security Processes
The Gentlemen ransomware-as-a-service (RaaS) operation is actively developing and maintaining a suite of endpoint detection and response (EDR) killers that it hands…
WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool
A new active campaign is targeting WhatsApp Desktop and WhatsApp Web users across multiple countries, including Malaysia, Brazil, India, Mexico, Singapore, the…
Kaspersky: Reports on Nimbus Manticore’s New Tools
Kaspersky, a global cybersecurity company, recently reported on Nimbus Manticore's use of the NightLedger backdoor and custom WebSocket tunnelers. Their findings contribute…