Rewterz News Archives - Page 367 of 1080

October 5, 2022

Rewterz Threat Alert – Chaos Ransomware – Active IOCs

Severity High Analysis Summary Chaos is a customizable ransomware builder that emerged on June 9 2021 (in underground forums) by falsely marketing itself as the .NET […]

October 5, 2022

Rewterz Threat Alert – IcedID banking Trojan – Active IOCs

Severity High Analysis Summary IcedID, aka BokBot – a banking trojan – first appeared in 2017. The threat actor behind IcedID is Lunar Spider. The main […]

October 5, 2022

Rewterz Threat Alert – Remcos RAT – Active IOCs

Severity High Analysis Summary Remcos malware has been operating since 2016. This RAT was originally promoted as genuine software for remote control of Microsoft Windows from […]

October 5, 2022

Rewterz Threat Alert – Lazarus APT Group Exploit Dell Driver Vulnerability Using New FudModule Rootkit – Active IOCs

Severity High Analysis Summary The North Korean-backed Lazarus Group has been seen distributing a Windows rootkit that exploits a Dell hardware driver in a Bring Your […]

October 4, 2022

Rewterz Threat Alert – Witchetty APT Group – Active IOCs

Severity High Analysis Summary Researchers discovered the Witchetty cyber espionage threat actor group, which employs steganography to conceal backdoor malware in the Windows logo in its latest campaign. […]

October 4, 2022

Rewterz Threat Update – Recent Microsoft Exchange Server Zero-Day Mitigation Can Be Easily Bypassed

Severity High Analysis Summary Microsoft verified that two zero-day vulnerabilities in Microsoft Exchange discovered by GTSC researchers are being actively exploited in the wild.The IT giant has […]

October 4, 2022

Rewterz Threat Alert – Bumblebee Malware Evolving Its TTPs – Active IOCs

Severity Medium Analysis Summary The malware loader, Bumblebee, is used to download Cobalt Strike and perhaps other malware such as ransomware. It also replaces the BazarLoader […]

October 4, 2022

Rewterz Threat Alert – Amadey Botnet – Active IOCs

Severity High Analysis Summary Amadey infects a victim’s computer and incorporates it into a. botnet. The Amadey trojan can also download additional malware. and exfiltrate user information to […]

October 4, 2022

Rewterz Threat Alert – PatchWork APT Group Targeting Pakistan – Active IOCs

Severity High Analysis Summary Indian threat actor Patchwork has been active since December 2015 and frequently uses spear phishing to strike Pakistan. PatchWork, (also known as […]