Threat Report | Stinner IT Solutions

AcidRain Wiper Suspected in Satellite Broadband Outage in Europe

by | 1. Apr 2022 | Threat Report

FortiGuard Labs is aware of a report that a new wiper malware was deployed and destroyed data on modems and routers for KA-SAT satellite broadband services, resulting in service outages across Europe on February 24th, 2022. The service interruption also caused the...

SpringShell (Spring4Shell) : New Unpatched RCE Vulnerability in Spring Core Framework

by | 31. Mar 2022 | Threat Report

FortiGuard Labs is aware that an alleged Proof-of-Concept (POC) code for a new Remote Code Execution (RCE) vulnerability in Spring Core, part of the popular web open-source framework for Java called “Spring,” was made available to the public (the POC was...

Another Wiper Malware Targeted Enterprises in Ukraine #DoubleZero

by | 25. Mar 2022 | Threat Report

FortiGuard Labs is aware that enterprises in Ukraine were targeted by another wiper malware. Dubbed “DoubleZero,” the malware was distributed in a zip archive and destroys the compromised machine by overwriting files and deleting registry keys.Why is this...

Joint CyberSecurity Advisory Alert on AvosLocker Ransomware

by | 23. Mar 2022 | Threat Report

FortiGuard Labs is aware that a joint advisory on AvosLocker malware was recently issued by the Federal Bureau of Investigation (FBI) and the US Department of Treasury. AvosLocker is a Ransomware-as-a-Service (RaaS) that has targeted organizations across multiple...

GIMMICK Implant Used by StormCloud APT Targeting Users in Asia

by | 23. Mar 2022 | Threat Report

FortiGuard Labs is aware of a new variant of the GIMMICK malware that is targeting Asian users. Discovered by researchers at Volexity, the GIMMICK implant has been attributed to the StormCloud APT group. According to the report, GIMMICK variants for macOS and Windows...

New Rootkit Used by UNC2891 for ATM Money Heist

by | 18. Mar 2022 | Threat Report

FortiGuard Labs is aware of a report that a threat actor known as UNC2891 used a previously unknown rootkit to capture banking card and PIN verification data from compromised ATM switch servers. The captured data was used to perform fraudulent transactions. Dubbed...