Get to know

Vicky Ray

Blogs by Vicky Ray

Sort By:

Unit 42

Exploring the Cybercrime Underground: Part 1 – An Introduction

This post is the first in a series by Unit 42 covering the cybercrime underground. Cybercrime persists as an epidemic that continues to worsen every year, with associated impacts and losses steadily …

Aug 19, 2016

By Rob Downs and Vicky Ray

Malware, Threat Prevention, Unit 42

Orcus – Birth of an unusual plugin builder RAT

Unit 42 has been tracking a new Remote Access Trojan (RAT) being sold for $40 USD since April 2016, known as “Orcus”. Though Orcus has all the typical features of RAT malware, …

Aug 02, 2016

By Vicky Ray

Malware, Threat Prevention, Unit 42

KRBanker Targets South Korea Through Adware and Exploit Kits

Online banking services have been a prime target of cyber criminals for many years and attacks continue to grow. Targeting online banking users and stealing their credentials has yielded huge profits for …

May 09, 2016

By Kaoru Hayashi and Vicky Ray

Malware, Threat Prevention, Unit 42

New Malware 'Rover' Targets Indian Ambassador to Afghanistan

On December 24, 2015, Unit 42 identified a targeted attack, delivered via email, on a high profile Indian diplomat, an Ambassador to Afghanistan. The body and content of the email suggest that …

Feb 29, 2016

By Vicky Ray and Kaoru Hayashi

Malware, Threat Prevention, Unit 42

NetTraveler Spear-Phishing Email Targets Diplomat of Uzbekistan

Unit 42 recently identified a targeted attack against an individual working for the Foreign Ministry of Uzbekistan in China. A spear-phishing email was sent to a diplomat of the Embassy of Uzbekistan who …

Jan 21, 2016

By Vicky Ray and Robert Falcone

Blogs by Vicky Ray

Sort By:

Unit 42

Bisonal Malware Used in Attacks Against Russia and South Korea

Unit 42 takes a look at how Bisonal Malware was used in attacks against Russia and South Korea. Read the full report.

Jul 31, 2018

By Kaoru Hayashi and Vicky Ray

Unit 42

Compromised Servers & Fraud Accounts: Recent Hancitor Attacks

Unit 42 tracks how attackers use fraudulent accounts and compromise infrastructures of legitimate businesses to deliver Hancitor malware.

Feb 07, 2018

By Vicky Ray and Brad Duncan

Unit 42

Exploring the Cybercrime Underground: Part 4 - Darknet Markets

Unit 42's exploration into the cybercrime underground continues with a look into darknet marketplaces.

Feb 09, 2017

By Vicky Ray

Unit 42

Tropic Trooper Targets Taiwanese Government and Fossil Fuel Provider With P...

Taiwan has been a regular target of cyber espionage threat actors for a number of years. Reasons for Taiwan being targeted range from being one of the sovereign states of the disputed …

Nov 22, 2016

By Vicky Ray, Robert Falcone, Jen Miller-Osborn and Tom Lancaster

Unit 42

Exploring the Cybercrime Underground: Part 2 – The Forum Ecosystem

In this second part of Unit 42’s Cybercrime Underground blog series, we dive into the cybercrime forum ecosystem and focus on observed cybercriminal roles, as well as prevalent tools and services bought …

Aug 29, 2016

By Vicky Ray and Rob Downs

Vicky Ray

Unit 42

Exploring the Cybercrime Underground: Part 1 – An Introduction

Malware, Threat Prevention, Unit 42

Orcus – Birth of an unusual plugin builder RAT

Malware, Threat Prevention, Unit 42

KRBanker Targets South Korea Through Adware and Exploit Kits

Malware, Threat Prevention, Unit 42

New Malware 'Rover' Targets Indian Ambassador to Afghanistan

Malware, Threat Prevention, Unit 42

NetTraveler Spear-Phishing Email Targets Diplomat of Uzbekistan

Unit 42

Bisonal Malware Used in Attacks Against Russia and South Korea

Unit 42

Compromised Servers & Fraud Accounts: Recent Hancitor Attacks

Unit 42

Exploring the Cybercrime Underground: Part 4 - Darknet Markets

Unit 42

Tropic Trooper Targets Taiwanese Government and Fossil Fuel Provider With P...

Unit 42

Exploring the Cybercrime Underground: Part 2 – The Forum Ecosystem

Get the latest news, invites to events, and threat alerts

Popular Resources

Legal Notices

Popular Links