icedid – PossibleThreat Articles

Security Sophos

Bad ad fad leads to IcedID, Gozi infections

July 20, 2023 0 Comments batloader, fakebat, featured, gozi, icedid, malvertising, mdr, security operations, sophos x-ops, threat research

Credit to Author: Matt Wixey| Date: Thu, 20 Jul 2023 10:00:07 +0000

Malvertising campaigns using paid ads result in infostealer and backdoor attacks

MalwareBytes Security

Emotet fixes bug in code, resumes spam campaign

April 27, 2022 0 Comments email spam campaign, emotet, icedid, malware, mark of the web, mimikatz, motw, qakbot, Qbot, trickbot

Credit to Author: Jovi Umawing| Date: Wed, 27 Apr 2022 10:15:34 +0000

Emotet is back with a new spam campaign. And it’s now spreading itself as a shortcut link file pretending to be Word document.

The post Emotet fixes bug in code, resumes spam campaign appeared first on Malwarebytes Labs.

Security Sophos

Nearly a quarter of malware now communicates using TLS

February 18, 2020 0 Comments dridex, icedid, malware, SophosLabs Uncut, SSL, ssl inspection, TLS, trickbot

Credit to Author: Luca Nagy| Date: Tue, 18 Feb 2020 13:30:07 +0000

Encryption is one of the strongest weapons malware authors can leverage: They can use it to obfuscate their code, to prevent users (in the case of ransomware) from being able to access their files, and for securing their malicious network communication. As websites and apps more widely adopt TLS (Transport Layer Security) and communicate over […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/XXvUtjG7XVU” height=”1″ width=”1″ alt=””/>