#fortiguardlabs — Public Fediverse posts

Fake Voicemail Emails Install UpCrypter Malware on Windows – Source:hackread.com https://ciso2ciso.com/fake-voicemail-emails-install-upcrypter-malware-on-windows-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #FortiGuardLabs #cybersecurity #PhishingScam #BabylonRAT #UpCrypter #Fortinet #Hackread #PureHVNC #security #malware #Windows #DcRAT

Fake Voicemail Emails Installs UpCrypter Malware on Windows https://hackread.com/fake-voicemail-emails-install-upcrypter-malware-windows/ #FortiGuardLabs #Cybersecurity #PhishingScam #BabylonRAT #UpCrypter #Security #Fortinet #PureHVNC #Malware #Windows #DcRAT

New Banking Trojan Targets Brazil

FortiGuard Labs recently uncovered a threat actor employing a malicious PDF file to propagate the banking Trojan CHAVECLOAK in Brazil. This intricate attack involves the PDF downloading a ZIP file and subsequently utilizing DLL side-loading techniques to execute the final malware. CHAVECLOAK is specifically designed to target users in Brazil, aiming to steal sensitive information linked to financial activities. It employs Portuguese language settings, indicating a strategic approach to the region, and actively monitors victims' interactions with financial portals. CHAVECLOAK exemplifies the sophistication of contemporary banking trojans, necessitating continual vigilance and proactive cybersecurity measures to safeguard against evolving threats within the financial landscape of South America.

Pulse ID: 65eb4a6e81789f86b903f4b7
Pulse Link: https://otx.alienvault.com/pulse/65eb4a6e81789f86b903f4b7
Pulse Author: AlienVault
Created: 2024-03-08 17:27:10

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#OTX #OpenThreatExchange #InfoSec #bot #CyberSecurity #Malware #SouthAmerica #RAT #Brazil #Bank #Trojan #PDF #ZIP #FortiGuard #FortiguardLabs #BankingTrojan #AlienVault

Info Stealing Packages Hidden in PyPI

FortiGuard Labs has identified new variants of Whitesnake PE malware that target Windows users and institutions, and suggests they may also be carrying out a similar attack on the Python Package Index (PyPI).

Pulse ID: 65b917a105b103306716687c
Pulse Link: https://otx.alienvault.com/pulse/65b917a105b103306716687c
Pulse Author: AlienVault
Created: 2024-01-30 15:37:04

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#OTX #OpenThreatExchange #InfoSec #bot #CyberSecurity #Malware #Windows #Python #FortiGuard #FortiguardLabs #PyPI #AlienVault