Threat Intelligence

Stay up to date with the latest research and threat intelligence reports.

Digital assets continue to be prime target for malvertisers

Digital assets continue to be prime target for malvertisers

Jérôme Segura
August 8, 2023
0 Comments

Cyber-criminals continue to impersonate brands via well-crafted phishing websites. We previously covered attacks on both consumers and businesses via online searches for…

Malicious ad for USPS fishes for banking credentials

Malicious ad for USPS fishes for banking credentials

Jérôme Segura
July 5, 2023
0 Comments

We often think of malvertising as being malicious ads that push malware or scams, and quite rightly so these are probably…

Malvertising via brand impersonation is back again

Malvertising via brand impersonation is back again

Jérôme Segura
May 23, 2023
0 Comments

Web search is about to embark on a new journey thanks to artificial intelligence technology that online giants such as Microsoft and Google…

Fake system update drops Aurora stealer via Invalid Printer loader

Fake system update drops Aurora stealer via Invalid Printer loader

Jérôme Segura
May 9, 2023
0 Comments

Malvertising seems to be enjoying a renaissance as of late, whether it is from ads on search engine results pages or…

Magecart threat actor rolls out convincing modal forms

Magecart threat actor rolls out convincing modal forms

Jérôme Segura
April 27, 2023
0 Comments

To ensnare new victims, criminals will often devise schemes that attempt to look as realistic as possible. Having said that, it is not…

Hands on keyboard

Massive malvertising campaign targets seniors via fake Weebly sites

Jérôme Segura
April 14, 2023
0 Comments

Knowing their audience is something scammers excel at, and for very good reason. This is particularly true for tech support scammers…

New Kritec Magecart skimmer found on Magento stores

New Kritec Magecart skimmer found on Magento stores

Jérôme Segura
March 22, 2023
0 Comments

Threat actors often compete for the same resources, and this couldn’t be further from the truth when it comes to website…

A look at a Magecart skimmer using the Hunter obfuscator

A look at a Magecart skimmer using the Hunter obfuscator

Jérôme Segura
March 21, 2023
0 Comments

Threat actors are notorious for trying to hide their code in various ways, from binary packers to obfuscators. On their own,…

DeepStreamer: Illegal movie streaming platforms hide lucrative ad fraud operation

DeepStreamer: Illegal movie streaming platforms hide lucrative ad fraud operation

Threat Intelligence Team
March 8, 2023
0 Comments

This investigation was a joint effort between Malwarebytes Threat Intelligence’s Jérôme Segura, DeepSee’s Rocky Moss and Antonio Torres. Key findings Introduction…

Contributors icon

Contributors

Threat Center icon

Threat Center

Podcasts icon

Podcast

Glossary icon

Glossary

Scams icon

Scams