CISA adds Microsoft SharePoint vulnerability to the KEV Catalog

September 23, 2020

4 Phishing Attacks Making Waves Targeting VPNs and Brokers

3 min read - Threat actors have no want of creativity when it comes to phishing scams. They look for new lures, new subjects and new targets as a means of preying upon organizations and users. Fortunately, researchers are well aware of this stream…

September 3, 2020

Which Cybersecurity Incidents Involve Misuse of Legitimate Services

2 min read - Threat actors who misuse legitimate tools have several advantages over those who use intrusive software, notes Kaspersky Lab, a Russia-based multinational cybersecurity and anti-virus provider, in a press release. It’s more difficult for cybersecurity solutions to discern between regular user…

August 18, 2020

Phishers Grab Microsoft Credentials With Fake SharePoint Emails

3 min read - A new phishing attack begins with a scam email disguised as an automated message from Microsoft SharePoint, Abnormal Security observed on Monday, July 27. Those responsible for the attack do not address the email to any specific employee within the…

August 5, 2020

Users Beware: Spotting a Microsoft Renewal Scam

3 min read - A novel scam began when a user received an email impersonating a notification from Microsoft, Abnormal Security observed on Friday, July 17. The scam arrived after Microsoft had recently taken several steps to deter scammers. Security professionals should be aware of…

July 28, 2020

Emotet Returns With Old Tricks, Malware Partners

3 min read - A malspam campaign involving Emotet saw a resurgence after five months of laying low, Malwarebytes detected on Friday, July 17. This operation used the well-known method of sending attack emails as a reply within an existing email thread. From there,…

July 21, 2020

Conti Ransomware Identified as Ryuk’s Potential Successor

3 min read - According to Bleeping Computer, Advanced Intel’s Vitali Kremez analyzed Conti and found ransomware based off the code for Ryuk, another crypto-malware family. He also discovered that Conti was using the same ransom note template that early versions of Ryuk employed…

July 14, 2020

Fake DNS Security Upgrade Scam Compromises WordPress Websites

3 min read - In late June, Naked Security received a scam email that pretended to originate from WordPress.com. It leveraged this cover to inform the recipient that their website was eligible to receive security upgrades under the Domain Name System Security Extensions (DNSSEC). The message…

News July 6, 2020

.CRIMSON Ransomware Module Shipped With Java STRRAT

2 min read - In recent malware news, security researchers discovered a malware strain called “STRRAT” that shipped with the .CRIMSON ransomware module. STRRAT wasn’t the only new malware threat making headlines. Security researchers also uncovered a new threat that modified the Discord client…

News June 18, 2020

Ransomware News Roundup: Maze Gang Forms Extortion Cartel

3 min read - In early June 2020, the Maze gang teamed up with other crypto-malware actors to extort non-paying victims using its shared data leaks platform. Maze wasn’t the only strain that made news. Those behind the REvil family also attracted the security…

June 3, 2020

Excel 4.0 Macro Functionality Incorporated Into Ursnif Delivery Campaigns

2 min read - Security researchers discovered a new Ursnif malware delivery campaign leveraging Excel 4.0 macro functionality.