DJVU: The Ransomware That Seems Strangely Familiar…

DJVU is new variant of STOP ransomware, boasting multiple layers of obfuscation, which makes it difficult to detect and analyze. This is a constantly evolving ransomware family, making it a prevalent threat to both individuals and enterprises alike.

https://blogs.blackberry.com/en/2022/09/djvu-the-ransomware-that-seems-strangely-familiar


Threat Thursday: BlackGuard Infostealer Rises from Russian Underground Markets

BlackGuard is one of the latest .NET-based information-stealers to rise to prominence in the Russian underground markets. Its focus is on web-browsers, cryptocurrency services, and cold-wallets. The malware will additionally target VPN clients, instant messaging services, FTP clients and VoIP services.

https://blogs.blackberry.com/en/2022/04/threat-thursday-blackguard-infostealer


Threat Thursday: Jupyter Infostealer is a Master of Disguise

Jupyter infostealer is a master of deception, a highly modular malware that hides deep within legitimate installer packages. Once executed, it can receive further malicious components via its C2 server to enhance its capabilities, including an information-stealing module designed to exfiltrate sensitive user data stored within a number of popular web browsers. It also targets crypto wallets.

https://blogs.blackberry.com/en/2022/01/threat-thursday-jupyter-infostealer-is-a-master-of-disguise


Threat Thursday: Redline Infostealer

RedLine is a new infostealer malware family that is distributed via COVID-19 phishing email campaigns. RedLine is extremely versatile and has appeared variously as Trojanized services, games, cracks, and tools.

https://blogs.blackberry.com/en/2021/07/threat-thursday-redline-infostealer


Threat Thursday: Agent Tesla Infostealer

Agent Tesla is an extremely popular information-stealing Trojan that is being sold and distributed across a number of underground hacking forums and platforms. It is highly customizable, which allows threat actors to tailor it to their particular needs.

https://blogs.blackberry.com/en/2021/06/threat-thursday-agent-tesla-infostealer-malware