[HEADS UP] New Malware Families Found in Phishing Campaign

New Malware Strains Found in Phishing CampaignResearchers from FireEye's security team found new malware families in a financial phishing campaign. The Malware strains are dubbed Doubledrag, Doubledrop, and Doubleback and have been detected.

So far, this campaign has targeted US, EMEA, Asia, and Australia regions. The attack has been rolled out in two phases. This campaign has been achieved by the bad guys posing as account executives that represented various  industries. 

While the phishing emails contain a PDF attachment it also included a .js file. Victims believed that since the PDF file was 'unreadable', they attempted to double click on the .js file. Unfortunately, that resulted in the Doubledrag downloader being executed. 

Doubledrag then proceeds to download a dropper (i.e. the Doubledrop malware strain) in order to kick in the second phase of the attack. Doubledrop then proceeds to completely own the infected machine by loading a backdoor (ie the Doubleback strain) into memory. 

The researchers from FireEye said in a statement, "Although Mandiant has no evidence about the objectives of this threat actor, their broad targeting across industries and geographies is consistent with a targeting calculus most commonly seen among financially motivated groups,"

While the analysis of the strains are ongoing, these phishing attacks are not going to stop anytime soon. Measures taken such as frequent phishing tests or new-school security awareness training can prepare your users in the event they receive a malicious email. 

ZDNet has the full story. 

Free Phishing Security Test

Would your users fall for convincing phishing attacks? Take the first step now and find out before the bad guys do. Plus, see how you stack up against your peers with phishing Industry Benchmarks. The Phish-prone percentage is usually higher than you expect and is great ammo to get budget.

PST ResultsHere's how it works:

  • Immediately start your test for up to 100 users (no need to talk to anyone)
  • Select from 20+ languages and customize the phishing test template based on your environment
  • Choose the landing page your users see after they click
  • Show users which red flags they missed, or a 404 page
  • Get a PDF emailed to you in 24 hours with your Phish-prone % and charts to share with management
  • See how your organization compares to others in your industry

Go Phishing Now!

PS: Don't like to click on redirected buttons? Cut & Paste this link in your browser:


Topics: Phishing, Malware

Subscribe To Our Blog

Ransomware Hostage Rescue Manual

Get the latest about social engineering

Subscribe to CyberheistNews