Dridex is Watching You
And we're watching Dridex. Here's the latest in this malware's evolution.
First reported Jun 17, 2016 07:00 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordPublished file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
And we're watching Dridex. Here's the latest in this malware's evolution.
First reported Jun 17, 2016 07:00 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordA detailed examination of application risk and cybersecurity attack chains, broken down by sector.
First reported Jun 23, 2021 16:55 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordWhen it comes to tallying the total cost of a data breach, lawsuits figure prominently, alongside repair costs, loss of reputation and sales, compliance penalties, and operational downtime.
First reported May 02, 2018 07:00 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordBy targeting critical infrastructure, cyberwarfare attackers can plunge a nation into chaos without ever firing a single shot.
First reported Sep 25, 2018 08:00 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordThe Qbot banking trojan is back, targeting American banks with dedicated campaigns followed by stealth and evasion techniques.
First reported Jun 11, 2020 21:27 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordHow automated fraudsters tried to ruin a restaurant’s promotional contest.
First reported Feb 05, 2024 11:35 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordAttackers are exploiting new vulnerabilities almost as quickly as they're being discovered.
First reported Sep 04, 2018 08:00 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordAs organizations make more of their APIs publicly available, it’s important they understand the potential risks of data exposure and establish best practices for securing all APIs.
First reported Aug 06, 2020 22:00 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordAccording to DARPA, it takes an average of 312 days for security pros to discover software vulnerabilities such as viruses, malware, and other attacks. In hacker time, that’s a virtual eternity in which bad actors can wreak havoc.
First reported Oct 23, 2016 07:00 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordTo quote the late David Foster Wallace: sure, I’m paranoid—but am I paranoid enough?
First reported Dec 14, 2023 12:09 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordIn a climate of rampant online fraud, protecting yourself from identity theft requires taking some simple, proactive steps and remaining constantly vigilant.
First reported Jun 23, 2020 22:00 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordOne of the pillars of DevOps is automation. Along with that comes orchestration, which some might guess to be automation at a higher level of abstraction.
First reported Jan 19, 2017 08:00 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordThe Russian threat landscape is unique from other regions of the world in that it had the most unique attacking IP addresses.
First reported Mar 17, 2020 15:42 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordWe detail the steps for decrypting and decompressing IcedID webinject files, enabling researchers to analyze IcedID samples and pull out target and web injection files.
First reported Sep 04, 2019 19:58 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordWith simple exploits plaguing Windows and Linux SMB week over week, do yourself a favor and patch for CVE-2017-7494 now to avoid having to do it in panic mode.
First reported May 26, 2017 07:00 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordLatin American systems received more attacks from IP addresses within the region that coincidentally did not attack anywhere else in the world.
First reported Dec 03, 2019 15:59 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordMalicious actors and eavesdroppers are forcing Internet communication into a single cryptographic protocol: SSL.
First reported Aug 02, 2016 07:00 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordWhen you must depend on third parties for a variety of products and services, it’s critical that you hold them to high security standards.
First reported Oct 24, 2017 07:00 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordFrom spoofing device fingerprints to hijacking authenticated sessions, attackers use a range of techniques to bypass multifactor authentication.
First reported Jun 17, 2021 15:27 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordRansomware now includes data leakage, stealth, attack delay, anti-security, and ransomware as a service. CI Security’s John-Luke Peck shares his thoughts.
First reported Oct 15, 2020 15:42 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordExplore F5 Labs’ 2026 PQC report: adoption trends, CDN dependence, TLS technical debt, certificate risks, and steps toward quantum resilience.
First reported Sep 22, 2026 20:35 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordA detailed look at the cybersecurity threats to the COVID-19 vaccine rollout pipeline
First reported Feb 01, 2021 17:27 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordWe dig into the credential stuffing attack tool OpenBullet and look at configuring combolists, proxies, parse tokens, and check blocks for launching attacks.
First reported Apr 07, 2021 21:40 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordOne old favorite CVE declined by more than half in July, and a new one (to us) was so heavily targeted it ended up ranked fifth out of 72.
First reported Aug 24, 2023 10:58 UTCCatalog metadata updated Oct 14, 2026 02:21 UTCOpen evidence recordThe public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.