Forest Global Training Partners

Cyber Risks · Unit 42 Palo Alto Networks

Kuluoz Trends – October 2014

Summary: Palo Alto Networks' Unit 42 analyzed October 2014 WildFire data on the Asprox/Kuluoz malware family, a mass email phishing Trojan dating to 2007 that drives a significant share of Internet spam. Detections followed a weekly pattern, with valleys on weekends and peaks two to five days later mid-week, and email/webmail was the leading delivery channel, followed by the Web (including cloud and file sharing services) and a smaller number of FTP sessions.

Why it matters: Kuluoz alters binaries enough to evade hash-only detection, so unique sample counts climb even as the underlying campaign stays the same - a reminder that signature matching alone leaves a gap. Its spam themes, from court orders to package delivery notices, are built to look like routine business mail crossing your users' inboxes.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Malware
Related