Remove Adware Remove Encryption Remove Technology
article thumbnail

Convuster: macOS adware now in Rust

SecureList

Traditionally, most malicious objects detected on the macOS platform are adware: besides the already familiar Shlayer family , the TOP 10 includes Bnodlero, Cimpli, Adload and Pirrit adware. The analysis showed these executables to be a new adware program, that has subsequently been called Convuster. Introduction.

Adware 145
article thumbnail

Lumma/Amadey: fake CAPTCHAs want to know if you’re human

SecureList

Our recent research into the adware landscape revealed that this malicious CAPTCHA is spreading through a variety of online resources that have nothing to do with games: adult sites, file-sharing services, betting platforms, anime resources, and web apps monetizing through traffic.

Adware 126
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Good old malware for the new Apple Silicon platform

SecureList

However, as technology evolves, we also observe a growing interest in the newly released platform from malware adversaries. Encrypting user files. Adware threats for the new platform. A known Mac malware researcher Patrick Wardle recently published a post covering Pirrit adware. Introduction.

Malware 145
article thumbnail

macOS: Bashed Apples of Shlayer and Bundlore

Security Affairs

Though these scripts have slight variations, they mostly belong to a plague of adware strains— Shlayer and Bundlore. The malicious shell scripts used by Shlayer and Bundlore are usually malvertising-focused adware bundlers using shell scripts in the kill chain to download and install an adware payload.

Adware 131
article thumbnail

Mobile malware evolution 2020

SecureList

In 2020, Kaspersky mobile products and technologies detected: 5,683,694 malicious installation packages, 156,710 new mobile banking Trojans, 20,708 new mobile ransomware Trojans. The word “covid” in various combinations was typically used in the names of packages hiding spyware and banking Trojans, adware or Trojan droppers.

Mobile 145
article thumbnail

Cybersecurity ‘Vaccines’ Emerge as Ransomware, Vulnerability Defense

eSecurity Planet

Germany-based G Data CyberDefense released software designed to trick the STOP ransomware variant into believing that a targeted system has already been compromised and keeping it from encrypting files after the device has been infected. But STOP ransomware will not encrypt files anymore if the system has the vaccine.”.

article thumbnail

IT threat evolution Q1 2021

SecureList

We believe that the most significant aspect of the Ecipekac malware is that the encrypted shellcodes are inserted into digitally signed DLLs without affecting the validity of the digital signature. Ransomware encrypting virtual hard disks. Most malicious objects detected for the macOS platform are adware. macOS developments.

Malware 139