Nymaim malware got a major 'upgrade', says Verint
The miscreants behind the Nymaim malware dropper have updated their code to include better obfuscation and blacklisting against security software.
Analytics outfit Verint, which discovered the latest version and offers its analysis here, says the new code base targets phishing rather than the drive-by-download approach favoured by the original version of the malware.
Nymaim has been around since 2013, but has gone through few iterations to try and stay ahead of threat researchers. Verint asserts that attacks are rising, up 63 per cent compared to last year. They write that the variant has “new delivery mechanisms, obfuscation methods, PowerShell usage and even an interesting form of ‘anti-security solution/analysis’ blacklisting”.
