Threat research notebook
Fresh malware notes, phishing samples, scam redirects, ransomware observations, and field reports from Gridinsoft research. No gallery, no filler: date, case, finding, next read.
305 lab recordsIt's no secret that cybercriminals are increasingly using mobile platforms as an attack vector lately. One example is a new Android malware. It spreads through fake cloud mining scams services and targets cryptocurrency wallets...
Researchers discovered Ducktail Malware, which targets individuals and organizations on the Facebook Business/Ads platform. The malware...
Throughout the entire early May 2023, GridinSoft analysts team observed an anomalous activity of RedLine stealer....
Fake Windows Update became a malware spreading way once again. Updates are a pretty routine part...
LOBSHOT, a recently-detected malware family, appears to be a new strong player in the malware market. Carrying a combination of backdoor and spyware functionality,...
A new Domino Backdoor popped out at the beginning of 2023. Since February, a new malware family coined Domino is used for attack on...
Recent research from the CheckPoint Research team revealed a new ransomware sample that can potentially beat all samples currently present on the market. They...
BlackGuard, a prolific infostealer malware, received an update at the edge of 2023. The new update introduced advanced data-stealing capabilities and secure connectivity features....
As the main shopping event of the year approaches, Black Friday shopping scams have into view. Con actors from all over the world try...
TLS and HTTPS are related, but they are not the same thing. TLS is the encryption protocol that protects data in transit. HTTPS is...
Spyware and stalkerware both monitor devices, but the threat model is different. Learn the key difference, warning signs, and safer next steps.
Unfortunately, millions of users worldwide are at risk every single day. Statistics show that a successful phishing attack occurs every 30 seconds, suggesting cybercriminals...
Social engineering is any attack that manipulates a person into doing something unsafe. The attacker may want a password, MFA code, payment, file download,...
Ransomware rarely chooses the sole type of targets for their attacks. They roam from attacks on small coffee shops to strikes on governmental organisations,...
What is a Reverse Proxy? A reverse proxy is the same server but is in front of a web server. Depending on its configuration,...
If Microsoft Defender or Gridinsoft flags a file you believe is clean, do not simply allow it and move on. A safe false-positive report...
A computer virus is self-replicating malware that infects files, apps, documents, scripts, or boot areas. Learn what viruses do, how they spread, common types,...
Static IP stays fixed while dynamic IP can change automatically. Learn which one you need for home use, gaming, hosting, remote access, privacy, and...
What is penetration testing? Penetration testing is a method by which the security of computer systems and networks can be assessed by simulating a...
Phishing and pharming are both credential-theft attacks, but the path to the fake site is different. Phishing tricks you through a message, link, attachment,...
