QBot malware has been a persistent threat to Windows devices for some time now, and the new phishing campaign using Windows Script Files (WSF) is making it easier than ever to infect these devices.
Operators of the Raspberry Robin worm shifted tactics to make the malware harder to detect and analyze. (Image: Shutterstock) Threat actors behind malware distribution platform Raspberry Robin worm ...
Threat actors distributing Raspberry Robin now use Windows Script Files (WSF) to spread the worm alongside other methods, such as USB drives. HP Threat Research identified new campaigns starting in ...
The TASK#STOMP backdoor steals office documents on Windows PCs, grabs new files as they're saved, and can rebuild itself if partly removed.
The latest variants of the ViperSoftX info-stealing malware use the common language runtime (CLR) to load and execute PowerShell commands within AutoIt scripts to evade detection. CLR is a key ...