Latest Dropper news

Police seize over 100 malware loader servers, arrest four cybercriminals

An international law enforcement operation codenamed 'Operation Endgame' has seized over 100 servers worldwide used by multiple major malware loader operations, including IcedID, Pikabot, Trickbot, Bumblebee, Smokeloader, and SystemBC.
- Bill Toulas
- May 30, 2024
- 04:35 AM
- 1
Over 90 malicious Android apps with 5.5M installs found on Google Play

Over 90 malicious Android apps were found installed over 5.5 million times through Google Play to deliver malware and adware, with the Anatsa banking trojan seeing a recent surge in activity.
- Bill Toulas
- May 28, 2024
- 05:48 PM
- 7
Cybercrime service bypasses Android security to install malware

A new dropper-as-a-service (DaaS) named 'SecuriDropper' has emerged, using a method that bypasses Android 13's 'Restricted Settings' to install malware on devices and grant them access to the Accessibility Services.
- Bill Toulas
- November 06, 2023
- 07:00 AM
- 0
Discord still a hotbed of malware activity — Now APTs join the fun

Discord continues to be a breeding ground for malicious activity by hackers and now APT groups, with it commonly used to distribute malware, exfiltrate data, and targeted by threat actors to steal authentication tokens.
- Bill Toulas
- October 16, 2023
- 05:29 PM
- 4
Android malware droppers with 130K installs found on Google Play

A set of Android malware droppers were found infiltrating the Google Play store to install malicious programs by pretending to be app updates.
- Bill Toulas
- October 28, 2022
- 06:00 AM
- 0
New NullMixer dropper infects your PC with a dozen malware families

A new malware dropper named 'NullMixer' is infecting Windows devices with a dozen different malware families simultaneously through fake software cracks promoted on malicious sites in Google Search results.
- Bill Toulas
- September 27, 2022
- 05:08 PM
- 0
Malware devs already bypassed Android 13's new security feature

Android malware developers are already adjusting their tactics to bypass a new 'Restricted settings' security feature introduced by Google in the newly released Android 13.
- Bill Toulas
- August 17, 2022
- 10:00 AM
- 2
Stealthy new JavaScript malware infects Windows PCs with RATs

A new stealthy JavaScript malware loader named RATDispenser is being used to infect devices with a variety of remote access trojans (RATs) in phishing attacks.
- Bill Toulas
- November 24, 2021
- 11:08 AM
- 0
U.S. Govt Agency Hit with New CARROTBALL Malware Dropper

A new malware called CARROTBALL, used as a second-stage payload in targeted attacks, was distributed in phishing email attachments delivered to a U.S. government agency and non-US foreign nationals professionally affiliated with current activities in North Korea.
- Ionut Ilascu
- January 24, 2020
- 03:35 AM
- 0
New WiryJMPer Dropper Hides Netwire RAT Payloads in Plain Sight

A new malware dropper was observed while infecting computers with a Netwire malicious payload hidden between two benign binaries and using obfuscation to fly under the radar of most anti-malware solutions.
- Sergiu Gatlan
- September 12, 2019
- 01:54 PM
- 1
Glupteba Malware Uses Bitcoin Blockchain to Update C2 Domains

A new variant of the Glupteba malware dropper is using the Bitcoin blockchain to fetch command and control (C2) server domains from Bitcoin transactions marked with OP_RETURN script opcodes.
- Sergiu Gatlan
- September 04, 2019
- 02:03 PM
- 0
Back to School? Be Careful of Malware Hiding As Textbooks

Searching for textbooks and essays in electronic form on the Internet exposes students to a wide range of malicious attacks as Kaspersky Lab researchers found after analyzing data gathered over the past academic year.
- Sergiu Gatlan
- September 02, 2019
- 01:05 PM
- 1
Android Trojan Infects Tens of Thousands of Devices in 4 Months

A new Trojan dropper dubbed xHelper was observed while slowly but steadily spreading to more and more Android devices since May, with over 32,000 smartphones and tablets having been found infected in the last four months.
- Sergiu Gatlan
- August 27, 2019
- 06:49 PM
- 0
Hackers Infect Pale Moon Archive Server With a Malware Dropper

The Pale Moon web browser team announced today that their Windows archive servers were breached an the hackers infected all archived installers of Pale Moon 27.6.2 and below with a malware dropper on December 27, 2017.
- Sergiu Gatlan
- July 10, 2019
- 03:52 PM
- 1
Malware Loader Goes Through Heaven's Gate to Avoid Detection

Researchers discovered a malware loader specifically designed by its developers to hide in plain sight and allow the payload to evade detection by anti-malware solutions by injecting into the memory of compromised computers.
- Sergiu Gatlan
- July 01, 2019
- 01:10 PM
- 0
LinkedIn Messaging Abused to Target US Companies With Backdoors

A series of malware campaigns that push the More_eggs backdoor via fake jobs offers are targeting employees of US companies which use shopping portals and similar online payment systems.
- Sergiu Gatlan
- February 23, 2019
- 12:00 PM
- 0
Multi-Stage Rietspoof Malware Drops Multiple Malicious Payloads

Rietspoof is a new malware family which uses a multi-stage delivery system, is designed to drop multiple payloads on the systems it infects, and that offers very little to no information on what audience it targets.
- Sergiu Gatlan
- February 18, 2019
- 03:55 PM
- 1
Apple iOS Games Found Talking to Golduck Malware C&C Servers

Researchers found 14 retro games in Apple's App Store that communicated with command-and-control servers previously used by the Android Golduck Loader
- Sergiu Gatlan
- January 07, 2019
- 10:14 AM
- 0
Necurs Botnet Pushing New Marap Malware

Security researchers from Proofpoint have discovered a new malware strain that they named Marap and which is currently distributed via massive waves of spam emails carrying malicious attachments (malspam).
- Catalin Cimpanu
- August 17, 2018
- 04:50 AM
- 0
Droppers Is How Android Malware Keeps Sneaking Into the Play Store

For the past year, Android malware authors have been increasingly relying on a solid trick for bypassing Google's security scans and sneaking malicious apps into the official Play Store.
- Catalin Cimpanu
- July 20, 2018
- 05:13 AM
- 0