Miguel Ang
5 articles
-
ResearchRansomware Double Extortion and Beyond: REvil, Clop, and Conti
Ransomware-stricken organizations grapple with multilevel extortion schemes that are advancing at an alarming rate. What exactly happens in these campaigns? We scrutinize three active ransomware families associated with these schemes to find out.
June 15th, 2021 13 minJanus Agcaoili, Miguel Ang, Earle Earnshaw, Byron Gelera…
Read article -
BlogThreat Recap: Darkside, Crysis, Negasteal, Coinminer
Darkside ransomware surfaced, operators behind Crysis/Dharma released a hacking toolkit, a targeted email campaign was used to propagate Negasteal, and a coinminer was seen bundled with legitimate applications.
August 19th, 2020 4 minMiguel Ang, Raphael Centeno, Don Ovid Ladores, Llallum Victoria…
Read article -
BlogLoki Info Stealer Propagates through LZH Files
We recently acquired a spam sample that propagates the Loki infostealer through LZH compressed archive files.
April 28th, 2020 2 minMiguel Ang
Read article -
BlogLoki Delivered as CAB File Attachment
A variant of Loki info stealer that we detected through our honeypot is propagated as Windows CAB file email attachments. It uses process hollowing to evade detection.
April 22nd, 2020 2 minMiguel Ang
Read article -
BlogThreat Actors Deliver Courier-Themed Spam Campaign with Attached ACE Files
Trend Micro researchers detected a new courier service themed malicious spam campaign that uses ACE files as attachments.
April 8th, 2020 2 minMiguel Ang
Read article