Arquivo de trojan - Segurança Informática

Brazilian trojan impacting Portuguese users and using the same capabilities seen in other Latin American threats

12 Março, 2022

Introduction A new variant of a Brazilian trojan has impacted Internet end users in Portugal since last month (February 2022). Although there are no…

Malware and Phishing Analysis, Phishing, segurancainformatica

Taking the bait: The modus operandi of massive social engineering waves impacting banks in Portugal

31 Janeiro, 2022

Taking the bait: The modus operandi of massive social engineering waves impacting banks in Portugal in the last two years.

Malware, Malware and Phishing Analysis, reverse engineering, segurancainformatica

The new maxtrilha trojan is being disseminated and targeting several banks

10 Setembro, 2021

A new banking trojan dubbed maxtrilha (due to its encryption key) has been discovered in the last few days and targeting customers of European and…

Malware, Malware and Phishing Analysis, reverse engineering, segurancainformatica

The clandestine Horus Eyes RAT: From the underground to criminals’ arsenal

5 Agosto, 2021

The clandestine Horus Eyes RAT: From the underground to criminals’ arsenal.

Malware, Malware and Phishing Analysis, reverse engineering, segurancainformatica

Latin American Javali trojan weaponizing Avira antivirus legitimate injector to implant malware

16 Fevereiro, 2021

Latin American Javali trojan weaponizing Avira antivirus legitimate injector to implant malware.

Malware, Malware and Phishing Analysis, reverse engineering, segurancainformatica

Lampion trojan disseminated in Portugal using COVID-19 template

10 Fevereiro, 2021

The fresh release of the Latin American Lampion trojan was updated with a new C2 address. Lampion trojan disseminated in Portugal using COVID-19 template.

computer security, Malware, Malware and Phishing Analysis, reverse engineering, segurancainformatica

New release of Lampion trojan spreads in Portugal with some improvements on the VBS downloader

6 Julho, 2020

New release of Lampion trojan spreads in Portugal with some improvements on the VBS downloader.

Malware, Malware and Phishing Analysis, reverse engineering, segurancainformatica

In-depth analysis of a trojan banker impacting Portugal and Brazil

1 Junho, 2020

In-depth analysis of a trojan banker impacting users in Portugal and Brazil at the end of May 2020.

Malware

Operadores do grupo Turla lançam nova release do ComRAT que usa a interface do Gmail como C2

27 Maio, 2020

Operadores do grupo Turla lançam nova release do ComRAT que usa a interface do Gmail como C2.

Malware, Malware and Phishing Analysis, segurancainformatica

The updated Grandoreiro Malware equipped with latenbot-C2 features in Q2 2020 now extended to Portuguese banks

26 Maio, 2020

The updated Grandoreiro Malware equipped with latenbot-C2 features in Q2 2020 now extended to Portuguese banks.

Malware, Malware and Phishing Analysis, reverse engineering, segurancainformatica

Trojan Lampion is back after 3 months

11 Maio, 2020

Trojan Lampion is back after 3 months. The malware was observed last days with a new obfuscation layer, new C2, and distributed inside an MSI file.

Malware, Malware and Phishing Analysis, segurancainformatica

Lampion malware origin servers geolocated in Turkey

27 Fevereiro, 2020

After three months from the first detection, the Lampion origin was identified. A webserver named “portaldasfinancas” is available in Turkey and has been used to spread the threat in Portugal.

Malware, Malware and Phishing Analysis, segurancainformatica