Tesla Malware Archives

As part of phishing attempts, attackers are using an outdated Microsoft Office vulnerability as a weapon to spread a malware strain known as Agent Tesla. To trick potential targets into opening decoy Excel documents attached to messages with an invoice theme and trigger the exploitation of CVE-2017-11882 (CVSS score: 7.8), a memory corruption vulnerability in Office's Equation Editor that could lead to code execution with the user's privileges, the infection chains use these documents. The Zscaler ThreatLabz discoveries expand on earlier findings from Fortinet FortiGuard Labs, which described a related phishing campaign read more Hackers Exploiting Old MS Excel Vulnerability to Spread Agent Tesla Malware. Get up to date on the latest cybersecurity news and enhance your knowledge ...

A fresh iteration of the Agent Tesla malware has been seen to be distributed through a lure file that uses the ZPAQ compression format in order to collect information from almost forty different web browsers and email clients. In a Monday analysis, G Data malware analyst Anna Lvova stated, "ZPAQ is a file compression format that offers a better compression ratio and journaling function compared to widely used formats like ZIP and RAR." As a result, ZPAQ archives may be smaller, resulting in file transfer bandwidth and storage space savings. The largest drawback with ZPAQ, though, is its lack of software support read more New Agent Tesla Malware Variant Using ZPAQ Compression in Email Attacks. Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecur...