CISA adds Microsoft SharePoint vulnerability to the KEV Catalog

News July 12, 2021

Scammers Poured Themselves a Glass and Got to Work on Wine-Themed Phishing Emails in 2020

2 min read - Lots of people opened up bottles of wine on Zoom visits in isolation. And, 2020 saw rising wine sales and digital scams to match. Researchers at Recorded Future and Area 1 Security witnessed an increase in wine-themed domain registrations and…

News July 5, 2021

Amateur Critical Infrastructure Attacks Growing in Frequency, Relative Severity

3 min read - Low-sophistication operational technology (OT) attacks grew in frequency and relative severity over the previous few years, according to Mandiant. In doing so, they broadened the type of threat against which companies and governments need to defend their OT assets. Attackers…

News July 1, 2021

Malware Actors Have Begun Using AutoHotkey Scripts For Attacks

2 min read - Living-off-the-land attacks aren’t new. They’re tactics in which attackers misuse tools native to an infected device. They do this in an effort to not install any foreign files or tools as a means. That way, most security tech won’t notice…

News June 21, 2021

New Buer Malware Loader Spread Through DHL Scam Email

2 min read - Digital attackers are using fake DHL shipping emails to trick recipients into opening a malicious Microsoft Office document. According to Proofpoint, the DHL scam email leads to an infection of ‘RustyBuer,’ a new variant of the Buer Loader malware family…

News June 14, 2021

Social Engineering Scam Asks for Bitcoin Wallet Recovery Codes

2 min read - Twitter users having a hard time with their bitcoin wallets should be wary of accounts that offer to fix them. Attackers are using this social engineering method to trick cryptocurrency owners into forking over their wallet recovery codes. Malwarebytes spotted…

News June 11, 2021

What’s Behind Rising Ransomware Costs?

3 min read - On June 9, 2021, the U.S. division of a global meat company paid $11 million to the attackers who targeted its facilities with ransomware. An executive at that division confirmed the payment to the Wall Street Journal and said it…

News June 7, 2021

Fake Microsoft Store and Spotify Ads Lead to Ficker Malware

2 min read - People tend to be less guarded when they’re dealing with something familiar. Digital attackers know this, which explains why they set up malware behind ads pretending to be for Microsoft Store products and Spotify. Bleeping Computer learned from ESET that…

News May 31, 2021

Telegram Messenger Ads for ‘Hacker’ Software Hide Cryptocurrency Theft

2 min read - Digital attackers are leveraging ads on the Telegram messenger app to target cryptocurrency owners with samples of HackBoss malware. One notable element of this campaign is that it’s targeting people who want to make a buck through sketchy means themselves.…

News May 21, 2021

LinkedIn Security Warning: Malware Sent via Fake Job Offers

2 min read - LinkedIn security problems may come not from the website itself but from people trying to abuse it. Digital attackers launched a spear-phishing campaign on LinkedIn in April that used fake job offers to spread malware. The attackers attempted to trick…

News May 5, 2021

Personal Information Theft: Threat Actors Lurking in Car Insurance Quotes

2 min read - Threat actors are stealing information by taking advantage of the application design and code of websites that provide instant quotes for auto insurance rates, the New York Department of Financial Services (NYDFS) reported in March. This personal information theft was first…