Android Ransomware Alert! DoubleLocker changes your phone’s PIN and encrypts your data

DoubleLocker is an Android ransomware the likes of which have never been seen before. The malware is designed to launch a two-pronged attack – it locks down the phone it infects and encrypts all files stored on the device. What is spreading DoubleLocker ransomware? The malware gets into a device when a user is tricked […]

Bad Rabbit Ransomware

What is Bad Rabbit Ransomware and how can you stay safe?

On 24 October 2017 (Tuesday), a new ransomware was let loose on the Internet. It is known as Bad Rabbit and seems to bear similar characteristics to the infamous NotPetya ransomware. Victims of Bad Rabbit Organizations in Russia and Ukraine were the initial casualties of this ransomware – they include Ukraine’s Ministry of Infrastructure, Kiev’s […]

Another Ransomware Outbreak! This time it’s Bad Rabbit

The recent Bad Rabbit ransomware outbreak is currently making headlines. This post outlines the analysis of the ransomware by Quick Heal Security Labs. According to our telemetry, we have not seen any Bad Rabbit ransomware infection on our customer’s machines so far. Propagation technique Bad Rabbit is distributed via a drive-by-download attack from the below […]

Quick Heal supports the Windows 10 Fall Creators Update

Microsoft’s Windows 10 Fall Creators Update is now available. This post lists some of the highlights of this update and compatibility of Quick Heal products with the OS. Windows 10 Fall Creators Update – Highlights Security enhancements in Edge browser Introduction of OneDrive Files On-Demand scan – Cloud feature Windows update improvements Windows Defender changes […]

A recent .NET Framework zero day Vulnerability (CVE-2017-8759) is dropping Infostealer malware- An analysis by Quick Heal Security Labs

.NET Framework Remote Code Execution Vulnerability (CVE-2017-8759) is a code injection vulnerability in the SOAP WSDL parser of .net framework. This vulnerability was a zero-day when it was spotted in the wild. Quick Heal Security Labs had released advisory in the month of September 2017 to address it. This vulnerability when exploited allows attacker to […]

CVE-2017-11826 – Microsoft Office Memory Corruption Vulnerability – an Alert by Quick Heal Security Labs

The recent zero-day vulnerability in Microsoft Office vulnerability CVE-2017-11826 enables attackers to perform a Remote Code Execution on targeted machines. According to a recently published blog post, this vulnerability is being exploited in the wild. Microsoft has released a security update on October 10, 2017, to fix this issue. Vulnerable versions The following versions of […]

How a ransomware infects your computer [INFOGRAPHIC]

Education is a constant process – it never stops. While we have spoken about ransomware at great lengths in the past, there is no reason why we should not be doing that again. Ransomware is probably the most dreaded cyberthreat that can strike anyone and at anytime unless we prepare ourselves against it. And the […]

A fileless malware uses a unique technique – an analysis by Quick Heal Security Labs

Spam email campaigns have increased with the use of multiple random techniques which improve the efficiency of payload distribution to spread malware to more number of users. These attacks have been randomly observed to have increased rapidly in numbers; similar techniques, observed first time in mid-2014, were used in the distribution of the Poweliks fileless […]