Rewterz News Archives - Page 508 of 1080

May 31, 2022

Rewterz Threat Alert – Lokibot Malware – Active IOCs

Severity Medium Analysis Summary In early 2016, LokiBot was originally made available on underground forums for cybercriminals to use against Microsoft Android phones. This malware steals […]

May 31, 2022

Rewterz Threat Alert – DarkCrystal RAT (DCRat) – Active IOCs

Severity High Analysis Summary DCRat – a Russian backdoor, was initially introduced in 2018, but rebuilt and relaunched a year later. The DCRat backdoor appears to […]

May 31, 2022

Rewterz Threat Alert – Mirai Botnet – Active IOCs

Severity High Analysis Summary A new Mirai variant is making the rounds called mirai_pteamirai. The botnet exploits a vulnerability in KGUARD DVR to spread within an […]

May 31, 2022

Rewterz Threat Alert – Agent Tesla Malware – Active IOCs

Severity Medium Analysis Summary Malspam is being used to target victims in an Agent Tesla campaign. Since its initial appearance in 2014, this has been deployed […]

May 31, 2022

Rewterz Threat Alert – Phobos Ransomware – Active IOCs

Severity High Analysis Summary Phobos Ransomware is based on the Dharma malware that first appeared at the beginning of 2019. It spreads into several systems via […]

May 31, 2022

Rewterz Threat Alert – RedLine Stealer – Active IOCs

Severity High Analysis Summary Redline is an info stealer malware that steals information from web browsers and has the ability to corrupt operating systems by installing […]

May 31, 2022

Rewterz Threat Alert – APT32 Ocean Lotus – Active IOCs

Severity High Analysis Summary A Vietnam-based threat group, APT32 (OceanLotus Group) is active since 2014. It is known for carrying out sophisticated attacks on several private […]

May 31, 2022

Rewterz Threat Alert – WRITE APT Group – Active IOCs

Severity High Analysis Summary In the year 2018, the threat actor WIRTE APT Subgroup was discovered for the first time. Spear-phishing emails are used to encourage […]

May 31, 2022

Rewterz Threat Advisory – Microsoft Support Diagnostic Tool – Zero-Day Vulnerability

Severity High Analysis Summary CVE-2022-30190 Microsoft Support Diagnostic Tool (MSDT) in Windows vulnerability. A remote code execution vulnerability exists when MSDT is called using the URL […]