Threat Research

It’s what we do.

A peek inside the Ann Malware Loader

February 25, 2012By Dancho Danchev

The ever-adapting cybercrime ecosystem is constantly producing new underground releases in the form of malware loaders, remote access trojans (RATs), malware cryptors, Web, IRC and P2P based command and control interfaces, all with…read more

Researchers spot Citadel, a ZeuS crimeware variant

February 8, 2012By Dancho Danchev

Security researchers from “Tracking Cyber Crime” have spotted a new ZeuS crimeware variant, that’s based on the leaked ZeuS source code from last year. Dubbed Citadel, the crimeware is positioned as a universal…read more

A peek inside the Smoke Malware Loader

February 3, 2012By Dancho Danchev

The competitive arms race between security vendors and malicious cybercriminals constantly produces new defensive¬†mechanisms, next to new attack platforms and malicious tools aiming to efficiently exploit and infect as many people as possible….read more

Research: Google’s reCAPTCHA under fire

February 1, 2012By Dancho Danchev

Who needs automated bots solving CAPTCHAs, when you have teams of low-waged humans recognizing them for pennies? In an underground cybercrime ecosystem dominated by managed services and countless outsourcing opportunities, it’s fairly logical…read more

A peek inside the uBot malware bot

January 26, 2012By Dancho Danchev

Participants in the dynamic cybercrime underground ecosystem are constantly working on new cybercrime-friendly releases in the form of malware bots, Remote Access Tools (RATs) and malware loaders. Continuing the “A peek inside…” series,…read more