Incidents

And even more Bagles

As the previous post says, there have been a lot of new Bagle modifications in the last 24 hours. And they’re continuing, either being spammed, or by previous versions downloading updates to themselves from the Internet. All of this frantic activity is aimed at maintaining the network of infected computers, by finding new victim machines, infecting them, and conscripting them into the network.

We’ve intercepted at least 20 new versions, and are now up to Bagle.dh. They are showing no signs of stopping at the moment.

As usual, our antivirus databases have been updated with detection for all the latest variants.

And even more Bagles

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Reports

ToddyCat: your hidden email assistant. Part 2

An in-depth analysis of Umbrij, a new tool used by the ToddyCat APT group to compromise corporate email communications in Gmail. The attack targeted OAuth authorization tokens, allowing threat actors to gain access to Google services.