Category: Fortinet Threat Research Blog

Botnets Continue Exploiting CVE-2023-1389 for Wide-Scale Spread

FortiGuard Labs unveils Moobot, Miroi, AGoent, Gafgyt and more exploiting TP-Link Archer AX21 vulnerability CVE-2023-1389. Learn more.        This article has been indexed from Fortinet Threat Research Blog Read the original article: Botnets Continue Exploiting CVE-2023-1389 for Wide-Scale Spread

ScrubCrypt Deploys VenomRAT with an Arsenal of Plugins

FortiGuard Labs uncovered a threat actor using ScrubCrypt to spread VenomRAT along with multiple RATs. Learn more.        This article has been indexed from Fortinet Threat Research Blog Read the original article: ScrubCrypt Deploys VenomRAT with an Arsenal of Plugins

Byakugan – The Malware Behind a Phishing Attack

FortiGuard Labs has uncovered the Byakugan malware behind a recent malware campaign distributed by malicious PDF files. Learn more.        This article has been indexed from Fortinet Threat Research Blog Read the original article: Byakugan – The Malware Behind a…

Ransomware Roundup – RA World

The RA World ransomware, which debuted late last year, claims to be holding more than 20 organizations worldwide hostage for financial gain. Learn more.        This article has been indexed from Fortinet Threat Research Blog Read the original article: Ransomware…

VCURMS: A Simple and Functional Weapon

ForitGuard Labs uncovers a rat VCURMS weapon and STRRAT in a phishing campaign. Learn more.        This article has been indexed from Fortinet Threat Research Blog Read the original article: VCURMS: A Simple and Functional Weapon

VCURMS: A Simple and Functional Weapon

ForitGuard Labs uncovers a rat VCURMS weapon and STRRAT in a phishing campaign. Learn more.        This article has been indexed from Fortinet Threat Research Blog Read the original article: VCURMS: A Simple and Functional Weapon

New Banking Trojan “CHAVECLOAK” Targets Brazil

FortiGuard Labs discovered a new banking Trojan targeting users in Brazil with stealthy tactics. Learn more.        This article has been indexed from Fortinet Threat Research Blog Read the original article: New Banking Trojan “CHAVECLOAK” Targets Brazil

Ransomware Roundup – Abyss Locker

FortiGuard Labs highlights the Abyss Locker ransomware group that steals information from victims and encrypts files for financial gain. Learn more.        This article has been indexed from Fortinet Threat Research Blog Read the original article: Ransomware Roundup – Abyss…

Android/SpyNote Moves to Crypto Currencies

FortiGuard investigates a hot new sample of Android/SpyNote, which shows the malware authors stealing crypto currencies from crypto wallets.        This article has been indexed from Fortinet Threat Research Blog Read the original article: Android/SpyNote Moves to Crypto Currencies

TicTacToe Dropper

FortiGuard has identified a grouping of malware droppers used to deliver various final-stage payloads throughout 2023. Learn more.        This article has been indexed from Fortinet Threat Research Blog Read the original article: TicTacToe Dropper

Python Info-stealer Distributed by Malicious Excel Document

FortiGuard Labs has uncovered a malware campaign involving a python info-stealer distributed by Excel document. Learn more.        This article has been indexed from Fortinet Threat Research Blog Read the original article: Python Info-stealer Distributed by Malicious Excel Document

Ransomware Roundup – Albabat

The financially motivated Albabat ransomware began distributing as a rogue program in late 2023, and has since evolved. Learn more.        This article has been indexed from Fortinet Threat Research Blog Read the original article: Ransomware Roundup – Albabat

Info Stealing Packages Hidden in PyPI

An info-stealing PyPI malware author was identified discreetly uploading malicious packages. Learn more.        This article has been indexed from Fortinet Threat Research Blog Read the original article: Info Stealing Packages Hidden in PyPI

Deceptive Cracked Software Spreads Lumma Variant on YouTube

FortiGuard Labs uncovered a threat group using YouTube channels to spread Private .NET loader for Lumma Stealer 4.0. Learn more.        This article has been indexed from Fortinet Threat Research Blog Read the original article: Deceptive Cracked Software Spreads Lumma…

Ransomware Roundup – 8base

The 8base ransomware, a variant of Phobos, emerged in May 2023 and has been targeting organizations across various industries globally for financial gain. Learn more.        This article has been indexed from Fortinet Threat Research Blog Read the original article:…

Bandook – A Persistent Threat That Keeps Evolving

FortiGuard Labs has uncovered a fresh threat – the latest generation of Bandook is being distributed via a Spanish PDF file. Learn more.        This article has been indexed from Fortinet Threat Research Blog Read the original article: Bandook –…