Tag

Smokeloader

All articles tagged with #smokeloader

SmokeLoader Malware Exploits MS Office Bugs to Target Taiwanese Firms
cybersecurity1 year ago

SmokeLoader Malware Exploits MS Office Bugs to Target Taiwanese Firms

The SmokeLoader malware has resurfaced, targeting manufacturing, healthcare, and IT sectors in Taiwan. Known for its modular design and evasion techniques, SmokeLoader is being distributed via phishing emails exploiting old security flaws. It acts as a downloader and can execute attacks by downloading plugins from its command-and-control server. Despite a decline in activity following a Europol-led crackdown, SmokeLoader remains active due to cracked versions available online, continuing to pose a threat by stealing data and launching attacks.

Escalating Cyber Warfare: Ukraine and Russia Engage in Hacking Battles
cybersecurity2 years ago

Escalating Cyber Warfare: Ukraine and Russia Engage in Hacking Battles

Ukrainian cybersecurity officials have reported an increase in Smokeloader malware attacks targeting financial and government organizations. The malware, primarily functioning as a loader, can perform various malicious functions, including stealing credentials and executing DDoS attacks. The attacks involve meticulously crafted phishing emails with financial themes to trick victims into downloading malicious attachments. The hackers have also compromised money transfer processes to redirect funds to their own accounts. The researchers suspect potential connections to Russian cybercriminal operations due to the prevalence of Russian domain registrars. The evolving threat landscape in Ukraine includes financially motivated cybercriminals and state-sponsored hackers.