Home > Knowledge Centre > 2020

HorseDeal Riding on The Curveball!

  • Jayesh kulkarni / 6 years
  • 0
  • 5 min read

It’s surprising to see how quickly attackers make use of new vulnerabilities in malware campaigns. Microsoft recently patched a very interesting vulnerability in their monthly Patch Tuesday update for January 2020. It’s a spoofing vulnerability in Windows CryptoAPI (Crypt32.dll) validation mechanism for Elliptic Curve Cryptography (ECC) certificates. An attacker could exploit the vulnerability by using […]

A sloppy click can exfiltrate your important data!

  • Anant Pulgam / 6 years
  • 0
  • 4 min read

Phishing email still remains one of the top malware propagation medium. Recently, we came across an interesting phishing email containing couple of Jumpshare links pointing to malicious components. Jumpshare is an online file sharing service and often cyber criminals abuse these kind of file sharing services. Upon clicking on one of the links in phishing mail, an executable file […]

New wave of Mal-Spam campaign attaching Disk Imaging Files

  • Prakash Galande / 6 years
  • 0
  • 7 min read

From past few months at Quick-Heal Labs, we have been observing a sudden rise in Spear Phishing mail containing distinct file formats as attachment like IMG, ISO, etc. These new types of attachments are mainly used to deploy some well-known and older Remote Access Trojans. The subject of these emails are made to appear as […]

Ako Ransomware targeting businesses using RaaS

  • Shriram Munde / 6 years
  • 0
  • 6 min read

Ako Ransomware targeting businesses using RaaS Quick Heal security researchers recently observed ransomware that uses RaaS (Ransomware as a Service) which is a subpart of MaaS (Malware as a Service). Before delving into the AKO ransomware or RaaS, one must understand what Malware as a Service means, as it is seen that many malware families […]

First Node.js-based Ransomware : Nodera

  • Ravi Gidwani / 6 years
  • 2
  • 5 min read

Recently while threat hunting, Quick Heal Security Labs came across an unusual Node.js framework based on Nodera ransomware. The use of the Node.js framework is not seen commonly across malware families. However, the latest development by threat actors reveals nasty and one-of-its-kind ransomware being created, one that uses the Node.js framework, which enables it to […]

STOP (Djvu) Ransomware: Ransom For Your Shady Habits!

  • Jayesh kulkarni / 6 years
  • 0
  • 11 min read

With almost 200 extensions, STOP (djvu) ransomware can be said to be 2019’s most active and widespread ransomware. Although this ransomware was active a year before, it started its campaign aggressively in early 2019. To evade detection, it has been continuously changing its extensions and payloads. For earlier infections, data recovery was easier if the […]