The Kings in Your Castle, Pt #4
Oftentimes, there is talk about a "sophisticated" malware-based attack against an individual or an organization. The prevalent assumption is that a great deal of development work has gone into the attack tools. In the 4th part of the article series, Marion Marschalek and Raphael Vinot will…
Bochum The big coup against the Avalanche botnet
Botnets are a real menace. An international group of law enforcement agencies and private IT security parties has dismantled the Avalanche botnet yesterday. Germany alone had suffered damages of millions of Euros from this botnet. After the takedown, users have to clean their PC from the remains.…
The Rampage of Locky
Locky has been a constant in the malware zoo for a considerable time. And while we are aware that there are still victims being hit by the variant sporting the .ODIN extension, in this post we are going to have a look on its statistical data and an in-depth analysis at yet another two later flavors:…
P@55w0rd5 – Blessing or curse?
By now, everybody has passwords for something, just like keys to different doors. The more doors you have to unlock, the bigger your keychain is going to be. This in turn pokes holes in pockets and every now and then one of those keys may just slip away. The same applies to passwords. Though they…
Panama Papers: the result of neglected IT security
The financial, legal and political world have been turned upside down by the Panama Papers. But how on earth was it possible to steal 2.6 terabytes of data from Mossack Fonseca?
mTAN fraud relies on conventional Trojans
In the last couple of days, a fraud has come to light in which mTAN-protected online banking accounts (also known as smsTAN or mobileTAN) have been plundered.
G DATA Exploit Protection effectively prevents attacks by infected Magento shops
Thousands of online shops running an outdated version of the Magento eCommerce platform have been infected with malware since 18 October 2015, according to a report by security firm Sucuri (https://blog.sucuri.net/2015/10/massive-magento-guruincsite-infection.html). The infected shops distribute…
Vulnerability in Android media engine Stagefright
Current media reports talk of a vulnerability that should be taken seriously and that allegedly affects 95% of all Android mobile devices. For this reason the problem has huge implications; nevertheless, it is important to react to this information with a level head. G DATA is providing tips to…
Casper: the newest member of the cartoon malware family
Casper is considered to be EvilBunny’s and Babar’s successor, believed to be originating from the same group of programmers – possibly connected to a French intelligence agency. Two very interesting changes the malware has undergone: it now has a modular structure which allows the attackers to…
The power of trust: “Superfish” case turns into a worst case scenario
The case of the “Superfish” adware has caused quite a sensation through its association with computer technology company Lenovo. However, the following report shows that “Superfish” is just the tip of the iceberg. It explains the implications of and possibilities for misuse. By way of an example,…
Karsten Hahn
Virus Analyst
Tim Berghoff
Security Evangelist
