Malware

Researchers at Switzerland's CERT found malware on the network of defense contractor Ruag bearing similarities to malware used by Turla APT, a Russian cyberespionage group.

Researchers spot threat actors flocking to CryptXXX after TeslaCrypt authors close shop.

Researchers at endpoint security solutions company Invincea have discovered a new variant of Cerber ransomware that could lock out legitimate users, while still allowing attackers to potentially launch DDoS attacks against other networks.

Operation Ke3chang, the APT that in 2013 was discovered targeting Europe-based Ministries of Foreign Affairs, not only apparently remains active but also seems to be leveraging a new family of malware called TidePool.

Microsoft researchers recently detected a file containing a VBA project that scripts a malicious macro.

Updated: A worm that made its way into Ubiquiti Networks equipment through outdated AirOS firmware has wreaked havoc on ISPs and others that use the Ubiquiti networking platform.

Researchers spotted Petya and Mischa ransomware bundled together in a single malicious payload.

The authors of the TeslaCrypt ransomware have publicly released the master decryption key that unlocks files encrypted by the malware in efforts to close up shop and go home for good.