THREATS

Domen toolkit gets back to work with new malvertising campaign

Domen toolkit gets back to work with new malvertising campaign

February 28, 2020

Last year, we documented a new social engineering toolkit we called “Domen” being used in the wild. Threat actors were using…

Fraudsters cloak credit card skimmer with fake content delivery network, ngrok server

Fraudsters cloak credit card skimmer with fake content delivery network, ngrok server

February 26, 2020

Threat actors love to abuse legitimate brands and infrastructure—this, we know. Last year we exposed how web skimmers had found their…

Threat spotlight: RobbinHood ransomware takes the driver’s seat

Threat spotlight: RobbinHood ransomware takes the driver’s seat

February 20, 2020

Despite their name, the RobbinHood cybercriminal gang is not stealing from the rich to give to the poor. Instead, these ransomware…

WOOF locker: Unmasking the browser locker behind a stealthy tech support scam operation

WOOF locker: Unmasking the browser locker behind a stealthy tech support scam operation

January 22, 2020

Update [01-27-2020]: Shortly after this blog was published we noticed that a large part of the infrastructure behind this browlock was…

Business in the front, party in the back: backdoors in elastic servers expose private data

Business in the front, party in the back: backdoors in elastic servers expose private data

January 17, 2020

It seems like every day we read another article about a data breach or leak of cloud storage exposing millions of…

Threat spotlight: Phobos ransomware lives up to its name

Threat spotlight: Phobos ransomware lives up to its name

January 10, 2020

Ransomware has struck dead on organizations since it became a mainstream tool in cybercriminals’ belts years ago. From massive WannaCry outbreaks…

6 ways hackers are targeting retail businesses

6 ways hackers are targeting retail businesses

January 8, 2020

Retail hacking is no new phenomenon, although it has increased in frequency over the last few years. In fact, retailers experienced…

New evasion techniques found in web skimmers

New evasion techniques found in web skimmers

December 30, 2019

For a number of years, criminals have been able to steal credit card details from unaware online shoppers without attracting too…

Spelevo exploit kit debuts new social engineering trick

Spelevo exploit kit debuts new social engineering trick

December 18, 2019

2019 has been a busy year for exploit kits, despite the fact that they haven’t been considered a potent threat vector…