G Data SecurityBlog (english)

Phone Scams: Are you still using your phone for phone calls?

Thu, 07 Apr 2022 10:00:00 +0200

It seems that the number of complaints concerning phone scams is increasing. Let’s try to identify a number of frequently occurring fraudulent practices. What can you do to stop those annoying phone scams?

War in Ukraine: What are the consequences for companies?

Fri, 11 Mar 2022 13:52:00 +0100

The uncertainty surrounding the armed conflict in Ukraine also raises numerous questions: How can companies protect themselves from getting caught between the fronts and becoming a target? There is only one thing that is certain: There are currently more questions than answers.

An attacker's toolchest: Living off the land

Tue, 08 Mar 2022 10:11:00 +0100

If you’ve been keeping up with the information security world, you’ve certainly heard that recent ransomware attacks and other advanced persistent threats are sometimes using special kind of tools. But for the most part, the tools will be very familiar to you.

Research Project: SmartVMI

Wed, 02 Mar 2022 13:00:00 +0100

SmartVMI is getting off the ground: Alongside the University of Passau and innowerk, G DATA is conducting research into improving the state of virtual machine introspection for memory analysis and malware detection.

Android Malware: An underestimated problem?

Tue, 22 Feb 2022 10:00:00 +0100

Is Android malware dangerous? How can I prevent my phone from being infected? How can I remove a malicious app from my phone? What’s the real reason why we see so many malicious apps for Android? All these are questions we will look into during the next minutes.

Allcome clipbanker is a newcomer in underground forums

Mon, 14 Feb 2022 13:37:00 +0100

The malware underground market might seem astoundingly professional in marketing and support. Let's take a look under the covers of one particular malware-as-a-service—the clipboard banker Allcome.

QR codes on Twitter deliver malicious Chrome extension

Thu, 03 Feb 2022 16:20:00 +0100

ISO file downloads are advertised via QR codes on Twitter and on supposedly free gaming sites, but they don't contain what they promise.

Merck wins Not Petya claim – but the future of cybersecurity insurance is complicated

Thu, 27 Jan 2022 10:23:00 +0100

Pharmaceutical company Merck & Co won its case for coverage of losses incurred during the Not Petya cyberattack, securing a payment of 1.4 billion US-Dollars from its insurance company. Previously, the company withheld the money, citing exclusion policies.

Malware vaccines can prevent pandemics, yet are rarely used

Wed, 19 Jan 2022 13:00:00 +0100

Vaccines have distinct advantages over detection based defense mechanisms, so we developed a vaccine to protect from one of the most notorious ransomware families—STOP/DJVU. But unlike vaccines against biological viruses, malware vaccines are not particularly common. This article explains why.

Germanys National Cybersecurity Agency declares red alert: Wave of attacks possibly imminent due to Log4Shell vulnerability

Thu, 16 Dec 2021 09:01:00 +0100

The remaining days before Christmas will not be relaxing ones for IT and IT security managers in companies around the world: The Log4Shell security vulnerability is currently keeping the IT world on tenterhooks.