Threats - Rewterz

December 11, 2019

Rewterz Threat Alert – Snatch Ransomware Reboots Windows in Safe Mode to Bypass Antivirus

Severity High Analysis Summary A new variant of the Snatch ransomware is found, that first reboots infected Windows computers into Safe Mode and only then encrypts […]

December 11, 2019

Rewterz Threat Advisory – CVE-2019-1458 – New Windows 0-Day Exploited in Active Attack

Severity High Analysis Summary A Google Chrome 0-day was first exploited in online attacks called Operation WizardOpium attacks ( the 0-day was assigned CVE-2019-13720). Google released […]

December 10, 2019

Rewterz Threat Alert – Trick Bot – Fake Payroll Emails to Conduct Phishing Attacks

Severity Medium Analysis Summary Trickbot is a well-known, modular credential stealer first discovered in 2016. It has been thought to be a descendent of another well-known […]

December 10, 2019

Rewterz Threat Alert – IcedID Used Steganography to Hide Payload

Severity Medium Analysis Summary While investigating a recent malspam campaign that targeted the United States and distributed the IcedID Trojan, researchers from Malwarebytes Labs noticed some […]

December 9, 2019

Rewterz Threat Alert – Clever Microsoft Phishing Scam Creates a Local Login Form

Severity Medium Analysis Summary A clever phishing campaign has been spotted that bundles the scam’s landing page in the HTML attachment rather than redirecting users to […]

December 5, 2019

Rewterz Threat Alert – “ZeroCleare” Targets Energy Sector in the Middle East

Severity High Analysis Summary Recent APT attack was reported on an oil and gas company compromising a Windows machine via a vulnerable driver. ZeroCleare then pivoted […]

December 5, 2019

Rewterz Threat Alert – CStealer Trojan Targeting Chrome Passwords

Severity Medium Analysis Summary A new CStealer trojan is found that targets Chrome passwords and exfiltrates them via mongoDB database at 18.220.85[.]117:27000, along with target system’s […]

December 5, 2019

Rewterz Threat Alert – Shamoon 2: Disttrack Wiper Returns

Severity High Analysis Summary Shamoon 2 returns with overlapping attack activity that is indicative of ITG013 (also known as “APT34” or “Oilrig”) and an unknown, probably […]

December 4, 2019

Rewterz Threat Alert – Malspam Pushing Ursnif Infection with Dridex Trojan

Severity High Analysis Summary A recent Ursnif malspam campaign is seen as spoofing replies to emails and that includes Dridex as its follow-up malware. The campaign […]

Rewterz Annual Threat Intelligence Report 2025 - Download Now

Rewterz Threat Alert – Snatch Ransomware Reboots Windows in Safe Mode to Bypass Antivirus

Rewterz Threat Advisory – CVE-2019-1458 – New Windows 0-Day Exploited in Active Attack

Rewterz Threat Alert – Trick Bot – Fake Payroll Emails to Conduct Phishing Attacks

Rewterz Threat Alert – IcedID Used Steganography to Hide Payload

Rewterz Threat Alert – Clever Microsoft Phishing Scam Creates a Local Login Form

Rewterz Threat Alert – “ZeroCleare” Targets Energy Sector in the Middle East

Rewterz Threat Alert – CStealer Trojan Targeting Chrome Passwords

Rewterz Threat Alert – Shamoon 2: Disttrack Wiper Returns

Rewterz Threat Alert – Malspam Pushing Ursnif Infection with Dridex Trojan

Security Operations Centers across the region

Saudi Arabia

UAE

Oman

Pakistan