Tech support scams keep trying to use different tactics to work more efficiently. The latest such scam uses a Trojan horse which once launched, makes an executable file. That executable is named “WinInfos.exe”. Registry entries are created to make the…
A trojan horse, created by a hacking group, dubbing it FastPOS, has recently been updated with a new technique that causes infection via a bug in Windows Mailslots mechanisms. The new version of the POS malware is not only created…
The notorious IoT(Internet of Things) botnet Mirai has seen a rapid rise in it’s global infection rate, malware researchers report. When the botnet first came out, nobody believed it will become this widespread, however after the hacker(s) creating it found…
Raw6help.xyz is a website that is directly involved with a tech support scam. The site uses 1-888-345-8305 for the contact phone number. People that run this scam might call you from that number. You can experience endless redirects while browsing…
An Android banking malware dubbed Tordow by Kaspersky researchers has been detected to obtain all types of banking credentials as well as steal login details and root devices. The creators of this malware have designed it to function primarily as…
The 1-844-307-1890 phone number is used in a new tech support scam. A Trojan horse virus is dropped which loads a screen locking you out of your PC. On that screen, it shows an error text titled “Your PC/Device needs…
A dangerous botnet that aims to steal financial information from important computers such as cashier POS machines has been reported to be spread on dark web forums and markets. This type of malware is particularly dangerous because it comes with…
Besides ransomware, this month has seen some older banking Trojans equipped with new variants as well as completely new pieces. The latest banking Trojan that has been lurking around uses Microsoft PowerShell to change the victim’s PC local proxy settings…
A remote access Trojan family dubbed Aveo, that targets primarily Japanese speaking users has been reported by malware researchers to cause infections on a massive scale. This type of Trojans is particularly dangerous since it can gain complete remote control…
Adwind RAT, one of the most spread RATs (Remote Access Trojans), has been recently rebranded, glamorously returning to the underground market with a new name – JBifrost. This is far from the first time the malware changes its name and…
A very dangerous Trojan kits are continuing to wreak havoc on a massive, global scale, according to malware researchers. The family includes different variants of the Trojan.Vundo threat. Symantec researchers have reported that this virus has a wide variety of…
Malware researchers have discovered a new banking Trojan, dubbed by the weird name Scylex. It has been advertised at this present moment on the DarkWeb forums, but the malware has not yet been seen in action. Scylex is reported by…
A Trojan which uses false Facebook messages to expose user data and account credentials has appeared, dubbed Zusy by ESG malware researchers. The Trojan has recently seen a rise in popularity, and it is widespread via spam pessages on Facebook.…
A massive campaign against South Korean users, associated with a Trojan known as BlackMoon has been boosted, reports indicate. Fortinet security experts indicate that the BlackMoon menace discovered initially in 2014, is back with a new campaign. It has already…
The Facebook Notification Virus is believed to be an unwanted browser extensions. What it does is it sends fake Facebook notifications to infected users. From there on, the malware can gain access to your Facebook data and also install browser…
Banking Trojans and ransomware are the top financial cyber threats, currently putting millions of users at risk. Besides the emergence of brand new threats, security researchers also observe already known and detected ones reemerging with updated code and capabilities. Retefe…
A rather strong wave of old malware is resurfacing the Web. In this article we will analyze the Bayrob Trojan (Win32/Bayrob, Trojan.Bayrob!gen8, Trojan.Bayrob) which hasn’t been active for at least 9 years. The threat has been updated and set on…
Security researchers at Dr.Web have reported a new Trojan, dubbed BackDoor.TeamViewer.49. According to the security firm, the threat is designed to install TeamViewer on targeted systems. Why is BackDoor.TeamViewer.49 doing that? To transmit web traffic to specific servers through using…
An unauthorized backdoor access to your system can compromise it in many ways, downloading malicious software onto it being the worst one. Be alert, because a new backdoor identified as Backdoor:Win32/Kirts.A has been reported by security experts at Microsoft. The…
A mobile malware with a devastating impact has been spotted out in the wild, extracting login and financial credentials from infected users. The Trojan is detected as Android/Spy.Agent.Sl(Eset) and Trojan-Banker.AndroidOS.Agent.au(Kaspersky) and Android.SmsBot.539.origin(Dr.Web). Malware researchers from ESET have reported that it…
