How attackers evade traditional AV and how to stop them
Find threats camouflaging themselves in RAM. When you hear about malware, there’s a good chance you think of sketchy executables or files with extensions like…
Category: MalwareBytes
Magecart threat actor rolls out convincing modal forms
It’s hard to put individuals at fault when the malicious copy is better than the original. This credit card skimmer was built to fool just…
Fake Flipper Zero sellers are after your money
Flipper Zero units are being sold on sites not recognized by developers. Stay away! Thanks to Malwarebytes’ Stefan Dasic who provided the research and screenshots…
Decoy dog toolkit plays the long game with Pupy RAT
We take a look at the discovery of a long running malware toolkit campaign evading detection through its use of DNS. Researchers at Infoblox have…
APC warns about critical vulnerabilities in online UPS monitoring software
In a security notification, APC has warned home and corporate users about critical vulnerabilities in the software used to monitor and control their UPS systems…
Update your PaperCut application servers now: exploits in the wild
We take a look at urgent updates needed for users of PaperCut, after two exploits were found in the wild. PaperCut, maker of print management…
Black Basta ransomware attacks Yellow Pages Canada
Yellow Pages Canada has suffered a cyberattack by the Black Basta ransomware group. The Canadian Yellow Pages Group has confirmed it recently became victim of a cyberattack.…
GuLoader returns with a rotten shipment
We take a look at a GuLoader campaign which comes bundled with an Italian language fake shipment email. GuLoader, a perennial favourite of email-based malware…
iOS Lockdown Mode effective against NSO zero-click exploit
Apple’s Lockdown Mode has shown that it can do what it was designed to do by notifying users about an NSO exploit. Apple’s Lockdown Mode…
Adult content malvertising scheme leads to clickjacking
Malwarebytes’ researchers have discovered a malvertising scheme that uses adult lures for clickjacking purposes. Malwarebytes’ researchers have found a malvertising scheme that leads to clickjacking.…
When should AI be used in emotional crisis? Lock and Code S03E09
This week on Lock and Code, we speak with Courtney Brown about a mental health nonprofit’s use of AI to speak to people suffering emotional…
Update now, there’s a Chrome zero-day in the wild
Users of Chrome should ensure they’re running the latest version to patch an integer overflow in the Skia graphics library. Google has announced an important…