Posts created by: Josh Grunzweig

Unit 42 uncovers a campaign leveraging a previously unreported customized dropper used to deliver lures primarily pertaining to the South Korean and North Korea region.

Reaper Group uses custom malware family called DOGCALL to deploy RAT. Get the full report.

Unit 42 uncovers NOKKI, a type of malware with ties to the previously discovered KONNI malware family, used to attack Eurasia and Southeast Asia.

Slithering between nation state and cybercrime: Unit 42 examines the Gorgon Group’s unsophisticated yet effective attacks. Read the full report.

Unit 42 investigates the RANCOR group’s use of DDKONG and PLAINTEE malware families to deliver targeted espionage attacks in South East Asia

Unit 42 investigates the rise of cryptocurrency miners.

Unit 42 unravels TheBottle’s activities and his newest malware family

Unit 42 observes the Patchwork group continuing to use weaponized legitimate documents to deliver their updated BADNEWS payload.

Unit 42 discovers ComboJack, a new currency stealer that alters clipboards to steal cryptocurrency.

Unit 42 observes Russian BitTorrent site covertly mining Monero cryptocurrency to its users

Unit 42 tracks a series of attacks that use a remote backdoor malware family named Comnie

Unit 42 observes a wave of attacks leveraging popular third party services to deliver malicious decoy documents.

Unit 42 analyzes a large-scale Monero cryptocurrency mining operation that leverages the open source XMRig utility.

SunOrcal expands to Vietnam and Myanmar by adding GitHub and Stenography to its repertoire.

Unit42 discovers Reaver, a new malware family with ties to attackers using SunOrcal malware.