Malware

Symantec is investigating a pump and dump stock spam campaign that used the long-lived W.32 Waledac botnet to target a marijuana farming company possibly generating thousands in illegal profits.

The recently discovered mobile-banking trojan SlemBunk is proving more resilient than first thought and is actively being used in several on-going campaigns.

A new malware family uses compromised digital certificates to avoid detection, surveils infected devices' activities, and sends the information to the attacker.

Arbor Networks has identified a new Remote Access Trojan (RAT), dubbed Trochilus, that has proven to be basically invisible to anti-malware software and possibly used for espionage purposes.

Security protocol OAuth 2.0 used by many social networks could allow hackers to stage man-in-the-middle attacks, say researchers who have identified two vulnerabilities.

Researchers at Malwarebytes uncovered a malvertising campaign on the PopAds network that launches the Magnitude exploit kit (EK), infecting victims using old versions of Flash Player with CryptoWall 4.0 ransomware, according to a blog post.

Now we come to a useful application of STIX: characterizing a campaign.

Following a cyberattack on a utility provider in the Ukraine, the Electricity Information Sharing and Analysis Center warned its members to improve their network defenses.