CMS, Encryption, File names and Phishing - Information Management Today

Crooks use hidden directories of compromised HTTPS sites to deliver malware

Security Affairs

APRIL 2, 2019

Hacked websites were used for several malicious purposes, experts observed compromised WordPress and Joomla websites serving Shade /Troldesh ransomware, coin miners, backdoors, and some times were involved in phishing campaigns. The attackers use these locations to hide malware and phishing pages from the administrators.

CMS

CMS Phishing Ransomware File names

The Long Run of Shade Ransomware

Security Affairs

FEBRUARY 19, 2019

The phishing email contains a.zip file named “slavneft.zakaz.zip”, which means something like “slavneft order” in English, showing a direct reference to “Slavneft”. It contains a russian speaking JavaScript file named “«??? «??? «?????????» ??????????? ??????”, Content of README.txt file.

Ransomware

Ransomware Mining File names Encryption

Information Management Today

Crooks use hidden directories of compromised HTTPS sites to deliver malware

The Long Run of Shade Ransomware

Webinars

Stay Connected