MadMXShell Delivers Malware via Google Ads

by Ophtek, LLC | May 28, 2024 | adblocker, google ads, MadMXShell, malware, Ophtek, typosquatting, verify sources, windows backdoor

Thanks to the presence of a previously unknown Windows backdoor, the MadMXShell malware has created digital chaos through the use of Google Ads Google Ads are a common sight for anyone stepping foot online, and they’re a sure-fire way to guarantee clicks for those...

Chinese PC Maker Ships PCs Customized for Malware

by Ophtek, LLC | Apr 16, 2024 | Acemagic, Bladabindi, China, info stealers, malware, Ophtek, PC vulnerabilities, Redline, Windows source code

In a highly embarrassing incident for Acemagic, a Chinese PC manufacturer, a number of its products have been shipped with numerous vulnerabilities. When setting up a brand-new PC out of the box, you would expect it to be highly secure and as protected against current...

VexTrio Uses 70,000 Hijacked Websites to Spread Malware

by Ophtek, LLC | Mar 26, 2024 | ClearFake, Hijacked websites, Malicious traffic distribution system, malvertising, malware, Ophtek, Phishing, SocGholish, TDS, VixTrio

Threat actors have compromised 70,000 previously legitimate websites and created a powerful network capable of distributing malware. Named VexTrio, this network of compromised websites appears to have started in 2017, but it’s only more recently that details around...

HeadCrab Attacks Servers with Advanced Malware

by Ophtek, LLC | Mar 19, 2024 | authentication, Hackers, HeadCrab, malware, Ophtek, Redis Servers, runtime monitoring, security scans

A new strain of malware, which contains several different attack methods and is considered a severe threat, has been discovered and named HeadCrab. The attack focuses its efforts on Redis servers, an open source, in-memory data structure store. In simpler terms, Redis...

The Dangers of Malware on GitHub

by Ophtek, LLC | Mar 5, 2024 | GitHub, malicious code, malware, Open Source Malware, Ophtek

GitHub is a wildly popular website for developers to create, share, and store their code, but it’s also being increasingly used to spread malware. Launched in 2008, GitHub quickly became the number one destination for developers. Packed full of features – such...

DarkGate and NetSupport Malware is Surging 

by Ophtek, LLC | Feb 13, 2024 | anti-malware tools, BattleRoyal, DarkGate, install updates, malicious websites, malware, NetSupport, Ophtek, Phishing Email, Windows SmartScreen

A new threat actor has spent the last few months ramping up attacks involving the DarkGate and NetSupport malware, and this is set to increase further.  The name of this new threat actor is BattleRoyal, and between September and November 2023, they launched numerous...