Category: Fortinet Threat Research Blog

Ransomware Roundup – Underground

The Underground ransomware has victimized companies in various industries since July 2023. It encrypts files without changing the original file extension. Learn more.        This article has been indexed from Fortinet Threat Research Blog Read the original article: Ransomware Roundup…

Deep Analysis of Snake Keylogger’s New Variant

Fortinet’s FortiGuard Labs caught a phishing campaign in the wild with a malicious Excel document attached to the phishing email. Get a deep analysis of the campaign and how it delivers a new variant of Snake Keylogger.        This article…

PureHVNC Deployed via Python Multi-stage Loader

FortiGuard Lab reveals a malware “PureHVNC”, sold on the cybercrime forum, is spreading through a phishing campaign targeting employees via a python multi-stage loader. Learn more.        This article has been indexed from Fortinet Threat Research Blog Read the original…

Malicious Packages Hidden in PyPI

The FortiGuard Labs team has identified a malicious PyPI package affecting all platforms where PyPI packages can be installed. This report discusses its potential impacts and emphasizes the importance of diligent security practices in managing software dependencies. Read more.       …

Dark Web Shows Cybercriminals Ready for Olympics. Are You?

According to new FortiGuard Labs analysis, this year’s Olympics has been a target for a growing number of cybercriminals. This report provides a comprehensive view of planned attacks, such as third-party breaches, infostealers, phishing, and malware. Read more.        This…

Dark Web Shows Cybercriminals Ready for Olympics. Are You?

According to new FortiGuard Labs analysis, this year’s Olympics has been a target for a growing number of cybercriminals. This report provides a comprehensive view of planned attacks, such as third-party breaches, infostealers, phishing, and malware. Read more.        This…

MerkSpy: Exploiting CVE-2021-40444 to Infiltrate Systems

FortiGuard Labs uncovers MerkSpy, a new spyware exploiting CVE-2021-40444 to steal keystrokes and sensitive data. Learn more.        This article has been indexed from Fortinet Threat Research Blog Read the original article: MerkSpy: Exploiting CVE-2021-40444 to Infiltrate Systems

The Growing Threat of Malware Concealed Behind Cloud Services

Cybersecurity threats are increasingly leveraging cloud services to store, distribute, and establish command and control (C2) servers. Over the past month, FortiGuard Labs has been monitoring botnets that have adopted this strategy. Learn more.        This article has been indexed…

Fickle Stealer Distributed via Multiple Attack Chain

FortiGuard Labs has uncovered a fresh threat, Fickle stealer, which is distributed via various strategies. Read more.        This article has been indexed from Fortinet Threat Research Blog Read the original article: Fickle Stealer Distributed via Multiple Attack Chain

Ransomware Roundup – Shinra and Limpopo Ransomware

Shinra and Limpopo are recent ransomware designed to encrypt files in Windows and VMWare ESXi environments respectively, and they demand payment from victims to decrypt the files.        This article has been indexed from Fortinet Threat Research Blog Read the…

New Agent Tesla Campaign Targeting Spanish-Speaking People

A new phishing campaign was recently captured by our FortiGuard Labs that spreads a new Agent Tesla variant targeting Spanish-speaking people. Learn more.        This article has been indexed from Fortinet Threat Research Blog Read the original article: New Agent…

zEus Stealer Distributed via Crafted Minecraft Source Pack

FortiGuard Labs analysis of a zEus batch stealer distributed via a crafted Minecraft source pack. Learn more.        This article has been indexed from Fortinet Threat Research Blog Read the original article: zEus Stealer Distributed via Crafted Minecraft Source Pack

New “Goldoon” Botnet Targeting D-Link Devices

FortiGuard Labs discovered the new botnet “Goldoon” targeting D-Link devices through related vulnerability CVE-2015-2051. Learn more.        This article has been indexed from Fortinet Threat Research Blog Read the original article: New “Goldoon” Botnet Targeting D-Link Devices

Ransomware Roundup – KageNoHitobito and DoNex

The KageNoHitobito and DoNex are recent ransomware that are financially motivated, demanding payment from victims to decrypt files. Learn more.        This article has been indexed from Fortinet Threat Research Blog Read the original article: Ransomware Roundup – KageNoHitobito and…

Unraveling Cyber Threats: Insights from Code Analysis

FortiGuard Labs unearthed a malicious PyPi package that aims to extract sensitive information from unsuspecting victims. Get an analysis of its origins and propagation methods.        This article has been indexed from Fortinet Threat Research Blog Read the original article:…