Malware

Previously unseen tactic can work on various connected devices found in both traditional workplaces and WFH environments.

Raccoon Stealer can collect passwords, cookies, and the “autofill” text for websites, including credit card data and other PII that’s potentially stored by the browser.

IIS malware most recently appeared in the Halfnium Exchange Server attacks. Zuzana Hromcová created what may be the first systematic overview of the wide world of IIS malware.

The recently discovered malicious "ISOmorph" campaign is designed to infect victims with a RAT by dynamically constructing a malicious dropper payload via their browsers.

The malware profiled by CISA cover a wide array of functions, though many appear to be different Pulse Secure scripts modified to load web shells.

Cybercriminals paid for malicious search engine ads to trick people interested in downloading cracked versions of productivity software.

A new website looks to aid ransomware policy discussions through open data, weeding out what works and what doesn't.