Banking Trojans: Ursnif Global Distribution Networks Identified
Unit 42 maps banking-trojan distribution networks: spam botnets push Shiotob downloaders and Ursnif, KINS, Tinba at Japan and European targets via compromised web servers.
46
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenAug 17, 2026
- Last mentionedAug 17, 2026
Timeline
2 articles · newest firstMole Ransomware: How One Malicious Spam Campaign Quickly Increased Complexity and Changed Tactics
Unit 42 tracks the new Mole ransomware (CryptoMix family) spread via USPS-themed malspam, with tactics escalating to JavaScript downloaders dropping multiple malware families.
27
Appears with
- Palo Alto Networksvendor · 2
- Palo Alto Networksorganization · 2
- Rovnixmalware · 1
- Gozimalware · 1
- Pushdomalware · 1
- Tinbamalware · 1
- Ursnifmalware · 1
- USPSorganization · 1
- AutoFocusproduct · 1
- Tokyo Metropolitan Police Departmentorganization · 1
- Wiresharkproduct · 1
- CryptoMixmalware · 1
- Molemalware · 1
- Miurefmalware · 1
- Beblohmalware · 1
- Kovtermalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.