Analysis, CMS, File names and Phishing - Information Management Today

Crooks use hidden directories of compromised HTTPS sites to deliver malware

Security Affairs

APRIL 2, 2019

Hacked websites were used for several malicious purposes, experts observed compromised WordPress and Joomla websites serving Shade /Troldesh ransomware, coin miners, backdoors, and some times were involved in phishing campaigns. ” reads the analysis from Zscaler. ” reads the analysis from Zscaler. jpg and msges.

CMS

CMS Phishing Ransomware File names

The Long Run of Shade Ransomware

Security Affairs

FEBRUARY 19, 2019

Technical analysis. The phishing email contains a.zip file named “slavneft.zakaz.zip”, which means something like “slavneft order” in English, showing a direct reference to “Slavneft”. It contains a russian speaking JavaScript file named “«??? «??? «?????????» ??????????? Information about miner executable.

Ransomware

Ransomware Mining File names Encryption

Information Management Today

Crooks use hidden directories of compromised HTTPS sites to deliver malware

The Long Run of Shade Ransomware

Webinars

Stay Connected