Cybersquatting or URL Hijacking simply means squatting or sitting on the cyber or domain name of someone else. It involves buying website URLs of popular business names or trademarks so that they can resell it at a cost. Typosquatting, on the other hand, makes use of common typing mistakes when typing the domain name of popular websites in the address […]
Cybersquatting and Typosquatting Read More »
Gh0st RAT is a popular example of a Remote Access Trojan used by attackers to control infected endpoints, originally attributed to threat actor groups in China. Gh0st RAT and its variants are still some of the most widely used RAT tools in existence due to their effectiveness.
The Ursnif Trojan (also known as Gozi ISFB or Dream bot) is one of the most prolific information-stealing Trojans in the cybercrime landscape. Since its reappearance in early 2013, it has been constantly evolving. In 2015, its source code was leaked and made publicly available on Github, which led to further development of the code by different threat
DarkComet is a freely available remote access trojan (RAT) developed by an independent programmer, “DarkCoderSC,” first observed in 2011, and is still considered to be one of the most common RATs used. It is marketed as a “tool” as opposed to a “trojan” as it is claimed to be for network administrator use; however, its functionality
DarkComet RAT cum Trojan Read More »
Troldesh aka Encoder.858 or Shade is a Trojan and a crypto-ransomware variant created in Russia and spread all over the world. Troldesh is based on so-called encryptors that encrypt all of the user’s personal data and extort money to decrypt the files. Troldesh encrypts a user’s files with a “.xtbl” extension. Troldesh is spread initially
Troldesh Ransomware Read More »
