Minerva Labs Blog

Malware authors are evolving as quickly as the AV and security vendors are. Here are some examples of how evasive techniques were implemented in attacks that hit the headlines.

You’re already keenly aware of the malware threat to your organization – this nasty vehicle by which ransomware, external attacks, and data breaches enter in has become so rampant, you have layers

When deploying software on endpoints, enterprises need to understand the risks a product might pose to the stability of the system. 

If you read our earlier post you are already familiar with Emotet. Recently Minerva prevented a new wave of Emotet attacks, a special Christmas-themed Emotet campaign - “Emotet Grinch”.

End of the year is a great opportunity to reflect upon the key trends that have shaped 2017 and set the direction for the upcoming year. Minerva Labs undertook extensive research into malware

Emotet is a banking Trojan, designed for stealing banking information, email accounts and automatically siphoning money from victims’ bank accounts. It is known to be leveraging victims’ contact

An increasing number of attacks take advantage of the capabilities of modern document formats to get past baseline anti-malware solutions. Such evasive measures involve initiating malicious

I’ve been pondering the use of deception and variability to defend IT assets. Honeypots have been discussed in this context for quite a while, yet their initial implementation failed to take off

Minerva Labs has recently discovered a new cryptocurrency mining campaign that uses evasion techniques to avoid being detected. In the campaign dubbed “WaterMiner”, malicious code was delivered to

Minerva Labs has uncovered malicious software that implements a new evasive cryptocurrency mining campaign.

In our recent paper, “Making sense of the endpoint security” we compared and contrasted different types of endpoint security tools, from endpoint control, to anti-malware, to endpoint detection

Despite worldwide spending reaching billions of dollars on endpoint security, in too many organizations endpoints are still the most vulnerable part of an organization’s technology infrastructure.