Qihoo 360 Total Security

Reported Context (6)

forcibly close security products: 360 Total Security and its many components, Huorong, and Microsoft Defender / Windows Security Signed SilentSetup Installer Delays Execution Before Deploying PackClient RAT
The fifth sample impersonated a component of the Chinese security product 360 Total Security and used a persistence technique known as COM hijacking. Unit 42 Finds AI Speeds Malware Development, Not Evasion
360 total security process check and injection to vssvc.exeIf none of the listed processes are found, it will instead create a Windows Service that will continuously run the executable F7u00ex.exe as its persistence Cambodia-Focused Malware Campaign Uses Multi-Stage Infection Chain and SparkRAT
A .NET executable that masquerades as “360Safe.exe,” a legitimate binary used by Qihoo 360 Total Security, to reflectively load an assembly implementing an AsyncRAT client. Researchers Detail Espionage Campaigns Targeting Pakistani Police
It can also avoid being detected by security tools like Qihoo’s 360 Total Security while hiding its malicious activity within normal-looking traffic. April Threat Intelligence Roundup Highlights PLC Disruptions, Data Breaches and Malware Campaigns

CVE (1)

Malware (18)

People (2)

Threat Actors (13)

MITRE ATT&CK (37)

Vendors (10)

Products (38)

Tools (12)

Industries (9)

Countries (11)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.