Arquivo de Lampion - Segurança Informática

Malware, Malware and Phishing Analysis, reverse engineering, segurancainformatica

Lampion trojan disseminated in Portugal using COVID-19 template

10 Fevereiro, 2021

The fresh release of the Latin American Lampion trojan was updated with a new C2 address. Lampion trojan disseminated in Portugal using COVID-19 template.

computer security, Malware, Malware and Phishing Analysis, reverse engineering, segurancainformatica

New release of Lampion trojan spreads in Portugal with some improvements on the VBS downloader

6 Julho, 2020

New release of Lampion trojan spreads in Portugal with some improvements on the VBS downloader.

Malware, Malware and Phishing Analysis, reverse engineering, segurancainformatica

Trojan Lampion is back after 3 months

11 Maio, 2020

Trojan Lampion is back after 3 months. The malware was observed last days with a new obfuscation layer, new C2, and distributed inside an MSI file.

Malware, Malware and Phishing Analysis, segurancainformatica

Lampion malware origin servers geolocated in Turkey

27 Fevereiro, 2020

After three months from the first detection, the Lampion origin was identified. A webserver named “portaldasfinancas” is available in Turkey and has been used to spread the threat in Portugal.

Malware, Malware and Phishing Analysis, segurancainformatica