Malware alert! Beware of the BTCWare Aleta Ransomware

Quick Heal Security Labs has observed the entry of a new BTCWare ransomware (first observed at the beginning of 2017) variant called ‘Aleta’. This ransomware is called so because it appends a “.aleta” extension to files it encrypts in an infected computer. Although BTCWare ransomware variants do not seem to use any special techniques or […]

Beware of these fake apps on Google Play Store that use ‘Jio/Jeo’ in their names

Jio took the Indian telecom market by storm when it made its entry with free unlimited calls and data offers. People went into a kind of frenzy for acquiring this service. And with its ‘truly unbelievable’ offers, Jio also launched an array of apps on Google Play Store such as Jio4GVoice, JioChat, JioMusic, etc. And […]

NemucodAES malspam is back and this time it brought along Kovter Trojan

For the last few weeks, we have been observing a new malicious spam (malspam) variant that is spreading via an email claiming to be from the United Parcel Service (UPS) carriages. The email carries a zip attachment that contains NemucodAES Ransomware and fileless Kovter Trojan. Earlier, such malspam campaigns were delivering Cerber Ransomware and Kovter […]

A technical analysis of the Java RAT (Remote Access Trojan) Malware

Remote Access Trojans are programs that allow attackers to gain unauthorized access to a targeted computer without the victim’s knowledge. Java RAT malware is a Trojan-Dropper written in Java. It is designed to steal passwords, access files, for keylogging (recording what the user types on the keyboard) and for screen-capture. Information collected by a RAT […]

Timeline of Ransomware Attacks in 2017 (so far): INFOGRAPHIC

Given the number of ransomware attacks we have witnessed so far, this year may well be dubbed as “The Year of the Ransomware”. And we have all reasons to expect more of these in the coming days. This infographic is a quick recap of the notable ransomware attacks that have happened so far in 2017. […]