TrickBot’s returned, Worse than Before

The botnet called TrickBot and its operators has been a pain in the side of cybersecurity experts for years now. In October, Microsoft announced that the tech giant had partnered with several security firms and internet service providers that it had attempted to cripple TrickBot’s infrastructure. It was hoped that their actions would takedown the botnet often used to spread ransomware. These were high hopes, and the InfoSec community knew that TrickBot would return. Microsoft’s actions were not in vain, as one of the main aims of the partnership was to prevent TrickBot from having an impact on the recent US National Elections. In this, the mission succeeded, but more than a few probably hoped that TrickBot remained hobbled for longer. Those behind TrickBot were not inclined to admit defeat after their infrastructure had been crippled, the opposite is probably true and several new features have been added recently...

IncognitoSearchPro Browser Hijacker

IncognitoSearchPro browser hijacker modifies browser's settings to force users to visit the incognitosearchpro.com address/to use a fake search engine. Also, it reads browsing data. Most of the times users download and install apps like IncognitoSearchPro unknowingly, therefore, they are categorized as potentially unwanted applications (PUAs). IncognitoSearchPro promotes incognitosearchpro.com by making it as the address of a default search engine, homepage and new tab in the settings of a hijacked browser. Therefore, it redirects to that address when users open a browser, new tab and enter search queries into URL bar. When used to search the web, incognitosearchpro.com redirects users to search.yahoo.com/provides results generated by Yahoo. In other words, incognitosearchpro.com does not generate individual, unique results - it is useless. Like most browser hijackers, IncognitoSearchPro prevents users f...