8th March 2018

New investigations into the CCleaner incident point to a possible third stage that had keylogger capacities

Following the CCleaner incident last year, we have continued to investigate what happened and have shared our latest insights at the Security Security Analyst Summit today.
5th March 2018

Week in security (February 26 – March 4)

Last week on Malwarebytes Labs, we explained how to protect your computer from malicious cryptomining, we gave an encryption 101 lesson using ShiOne ransomware as a case study, and we offered an explanation about SQL injection. We also released a report on the state of malicious cryptomining from its first resurgence in the fall until now. In active malware, we discussed how the RIG malvertising campaign uses cryptocurrency themes as a decoy, how an old virus made its way onto a Chinese DDoS bot, and how a massive DDoS attack washed over GitHub. We also drew your attention to our own Chris Boyd appearing in Jenny Radcliffe’s Human Factor Podcast. Other news Does your endpoint solution stop fileless attacks? They are gaining traction, says a Ponemon Institute study. (Source: Bricata) Feedless is an iOS content blocker that takes the media out of social media. (Source: The Verge) A serious remote code execution vulnerability in both the ‘μTorrent desktop app for Windows and the newly ..
3rd March 2018

Breaches, borders, and Barcelona — the week in security news

Equifax reveals more victims of 2017 breach The breach at credit-reporting agency Equifax was one of the worst not only of 2017, but of all time.
26th February 2018

A week in security (February 19 – February 25)

Last week on Malwarebytes Labs, we gave readers a primer on encryption, took a stab at that Deepfakes tool Internet users seem to be interested in, and started a new series that talks about GDPR. We also looked at a drive-by download campaign that starts in booby-trapped Chinese websites that drop malware via different exploits. This malware is a DDoS bot called Avzhan, which we then studied in detail. Other news Hackers targeted Russian and Indian banks by attempting to abuse the SWIFT global banking network. (Source: Security Week) Are you an independent writer who sells books via Amazon’s Createspace? You may want to check if someone is impersonating you for fraud. (Source: KrebsOnSecurity) Akamai spotted an uptick in credential abuse in the last quarter of 2017. (Source: Computer Weekly) Let’s read about that new Google Chrome “adblocker” that is actually not an adblocker at all. (Source: Sophos’ Naked Security Blog) Should “security” and “social” be in the same sentence together..
26th February 2018

Avast Smart Life protects the growing number of IoT devices in your home

This morning at Mobile World Congress Barcelona, we announced the latest in protection from Avast — Avast Smart Life, a new Internet of Things (IoT) security services platform. Our strategy is to leverage our large, intelligent network to continue expanding the ways we protect you from today’s latest threats, no matter where you are in the mobile connected world we live in. Whether at home, the office or on-the-go, Avast Smart Life uses artificial intelligence (AI) and machine learning technology to identify and block threats so that consumers and small businesses can keep their IoT devices, networks and sensitive data secure.