Malware

Oops! Wrong number. Or rather, wrong website. A man believed to be a "wannabe cybercriminal" mistook recent Damballa research on Pony Loader "as a sales pitch" and queried the company, looking to buy the malware and get help installing it.

What had been the relatively quiet Magnitude exploit kit (EK) has been picking up some steam of late having been spotted on several online ad networks, according to a researcher at Malwarebytes.

Researchers at Cheetah Mobile Security Lab discovered Amazon has been selling third-party Android tablets pre-loaded with what they call a "dangerous" Trojan known at Cloudsota, likely the work of attackers in China.

Cyber-criminals have been trying to infect point of sale terminals in time for Christmas with a new strain of malware dubbed AbaddonPoS.

Researchers have spotted the POS malware dubbed "Cherry Picker" targeting the food and beverage industry.

Malwarebytes spotted malvertising on the Barclays Premier League official fantasy site that redirected users to Nuclear Exploit Kits that exploited Flash vulnerabilities.

Security researchers discovered that visitors to the Ammyy website in late October were being served up malware along with the Ammyy Admin Remote Desktop Software that would allow the Buhtrap gang to gain control of victims' computers.

Google and Apple have both removed the third-party Instagram app InstaAgent from their respective app stores that was busy stealing user passwords.