Microsoft OneNote files are widely used to deliver malware payloads

SonicWall RDTMI detecting a spike of malicious OneNote files are being delivered to the victim’s machine as an email attachments.

LockBit 3.0 'Black' targets large corps. Operator demands $9M for decryption

LockBit 3.0, also known as LockBit Black, is a ransomware family that operates under the Ransomware-as-a-Service (RaaS) model, where the creators collaborate with affiliates who may not have the resources to create and deploy attacks. […]

Linux Kernel ksmbd Integer Underflow Vulnerability

Overview:   SonicWall Capture Labs Threat Research Team has observed the following threat:   KSMBD stands for Kernel-based SMB Direct. It’s a Linux kernel module that provides the implementation of the SMBv3 protocol, allowing the Linux kernel […]

Berbew Backdoor Spotted In The Wild

This week, the Sonicwall Capture Labs Research team analyzed a sample of Berbew, a trojan that has been seen used in connection with Download.Ject and FormBook to steal user passwords for banking and other financial […]

Zoho ManageEngine SAML Response RCE Vulnerability

Overview:   SonicWall Capture Labs Threat Research Team has observed the following threat:   ManageEngine is a subsidiary of Zoho Corporation that provides IT management software for businesses. The company offers a range of products for network, […]

This post is also available in: Portuguese (Brazil) French German Japanese Korean Spanish