Cyber Risks · Cisco Talos

Threat Round-up for the Week of Mar 20 - Mar 24

Summary: Cisco Talos published a weekly round-up of the most prevalent threats it observed for the week of Mar 20 to Mar 24, summarizing key behavior characteristics, indicators of compromise, and how customers are automatically protected. The post describes malware that creates random mutexes, executes netsh to poke a hole in the host's firewall, and modifies registry keys to disable the display of hidden files, start the malware after reboot, and disable Windows updates.

Why it matters: The described malware disables Windows updates and hides its own files on the host, so a compromised machine may stop receiving the patches that would remove it while appearing normal to a user.

Read the original at Cisco Talos ↗

Topics
Malware
Related