FAKEUPDATES

Learn about the evolution of fake update campaigns like CoinLurker, the techniques it uses and strategies to defend against this next-generation threat.

Key findings   This report presents: The Russian autonomous system PROSPERO (AS200593) could be linked […]

Microsoft coined the term “human-operated ransomware” to clearly define a class of attack driven by expert human intelligence at every step of the attack chain and culminate in intentional business...

Rapid7 has observed the Fake Browser Update lure utilizing a sophisticated new loader to execute infostealers.

Discover how MintsLoader operates as a stealthy, obfuscated malware loader distributing GhostWeaver, StealC, and BOINC. Read Recorded Future’s in-depth analysis of its evasion tactics, DGA-based C2...

SocGholish operators continue to infect websites at a massive scale, and the threat actor is ramping up its infrastructure to match.

SocGholish, operated by TA569, functions as a Malware-as-a-Service vendor, selling access to clients, usually in the form of fake updates.

Both BLISTER and SocGholish are loaders known for their evasion tactics. Our report details what these loaders are capable of and our investigation into a campaign that uses both to deliver the Loc...

Trend Research analyzed SocGholish’s MaaS framework and its role in deploying RansomHub ransomware through compromised websites, using highly obfuscated JavaScript loaders to evade detection and ex...