Advanced Threats April 14, 2020

TA505 Continues to Infect Networks With SDBbot RAT

7 min read - IBM X-Force IRIS recently identified attacks likely linked to Hive0065, also known as TA505, which spread the SDBbot remote-access Trojan (RAT) alongside other custom malware.

X-Force April 13, 2020

Grandoreiro malware now targeting banks in Spain

6 min read - A familiar malware threat called Grandoreiro, a remote-overlay banking Trojan that typically affects bank customers in Brazil, has spread to attack banks in Spain.

April 13, 2020

Weekly Security News Roundup: Dark_Nexus Vies for Supremacy on Compromised Machines

3 min read - A new IoT botnet called "dark_nexus" drew researchers' attention to its efforts to establish and maintain dominance on a compromised machine. Learn what else happened last week in security news.

Endpoint April 9, 2020

Phishers and iPhone Thieves Rolling Out Multimillion-Dollar Operations

9 min read - Going down the rabbit hole of a physical iPhone theft followed by a SMiShing campaign, IBM X-Force IRIS researchers found a large-scale operation of phishers with over 600 phishing domains.

April 7, 2020

Emotet Brings Down Entire Corporate Network by Overheating Computers

2 min read - Emotet brought down the entire network of a targeted organization by overheating all of its connected computers.

Advanced Threats April 7, 2020

ITG08 (aka FIN6) Partners With TrickBot Gang, Uses Anchor Framework

6 min read - Financially motivated, adaptable, sophisticated and persistent, the ITG08 threat group is likely to remain one of the most potent cybercriminal groups in this new decade.

X-Force April 1, 2020

Breaking the ice: A deep dive into the IcedID banking trojan’s new major version release

14 min read - Since 2017, the IcedID Trojan has received consistent updates that enable it to continue targeting banks and other businesses. Find out what changes were included in the latest major release.

March 30, 2020

Weekly Security News Roundup: 24 Children’s Gaming Apps Laden With Tekya Clicker

2 min read - Researchers found a new clicker malware called "Tekya" hidden within 24 children's games on the Google Play store. Read on to learn what else happened last week in security news.

Malware March 30, 2020

Zeus Sphinx Trojan Awakens Amidst Coronavirus Spam Frenzy

7 min read - The renewed Zeus Sphinx activity that IBM X-Force is seeing features a modified variant targeting online banking users in North America and Australia through the use of maldocs themed around COVID-19.

Threat Intelligence March 18, 2020

9 Best practices from X-Force Red for organizations and employees

6 min read - As employers rapidly respond to the need to protect their workforces from potential exposure and spread of the novel coronavirus, also known as COVID-19, many organizations are making the very difficult decision to pivot to a work-from-home model. This means…