Info-Stealer FormBook continues activity using a new file hosting service

guest · Jan 29, 2019

Info-Stealer FormBook continues activity using a new file hosting service
January 27, 2019
https://www.deepinstinct.com/2019/0...-a-new-malware-friendly-file-hosting-service/

As with many information stealing and credential harvesting malware, FormBook’s infection chain starts with a phishing Email containing a malicious attachment, which is usually an Office document or a PDF file.

Analysis of a recent sample from this attack led to the discovery of a new malware-friendly file hosting service, used by threat actors as a point of distribution for their malware, something which is naturally frowned upon by legitimate file hosting/sharing providers.
DropMyBin – A new Malware-Friendly Hosting Service
During the analysis of this attack, the domain from which the malicious payload was dropped (files.dropmybin[.]me) immediately caught our eye, and sent us crawling through known cybercrime forums

A particular point of interest arises when one examines DropMyBin’s FAQ page [...] it clearly states that all abuse claims should be made to “appropriate law enforcement agency” as the operators are not qualified or trained to investigate and fight crimes. Seems like an invitation to upload and direct traffic to whatever one likes to…
Click to expand...

Log in or Sign up

Info-Stealer FormBook continues activity using a new file hosting service

guest Guest

Log in or Sign up

Info-Stealer FormBook continues activity using a new file hosting service

guest Guest

Useful Searches