We’ve all encountered them before—the too-good-to-be-true email promising millions from a long-lost prince in exchange for a “small” fee. Advanced fee scams are as old as the internet itself, typically relying on email correspondence and official-sounding legal jargon to trick victims out of their money.Fortra Brand Protection uncovered a new variation: an advanced fee scam built around a fake but...

On Friday, the full source code of the Dendroid Remote Access Trojan (RAT) was leaked. Dendroid is a popular crimeware package that targets Android devices and is sold on underground forums for $300. Usually the source code for botnet control panels is encrypted, so it was surprising to find the full source code for the Dendroid control panel included in the leaked files. Analyzing the leaked...

Phishing is a prevalent problem for businesses, particularly financial institutions. Over the years, many services have emerged to help organizations address phishing attacks that are targeting their customers' accounts. When seeking solutions, businesses find they have several options to choose from. These fall into three categories:Phishing takedown servicesAnti-phishing servicesPhishing...

New MitM attacks impersonate banking sites without triggering alerts PhishLabs has observed a new wave of "Man-in-the-Middle" (MitM) attacks targeting users of online banking and social media. Customers of more than 70 different financial institutions are being targeted. In these attacks, hackers use spam to deliver malware that changes DNS settings and installs a rogue Certificate Authority...