Cyber Risks · Cisco Talos

Threat Source newsletter (Aug. 1, 2019)

Summary: Cisco Talos' Aug. 1, 2019 Threat Source newsletter highlights a deep dive into adware campaigns targeting some of the most popular sites on the web, and announces the Re2PCAP tool that generates a PCAP file in seconds from a raw HTTP request or response. The issue also lists five malware samples with SHA 256 and MD5 hashes, typical filenames such as qmreportupload.exe and xme64-2141.exe, and detection names including Win.Trojan.Generic and Unix.Exploit.Lotoor.

Key Takeaway: The newsletter's own sample list shows commodity threats hiding behind ordinary filenames - an Excel spreadsheet, a report uploader - which is exactly the shape of file that reaches an analyst's inbox without a second look.

Read the original at Cisco Talos ↗

Topics
Malware
Related