CISA adds Microsoft SharePoint vulnerability to the KEV Catalog

April 15, 2019

Attackers Use EternalBlue and PowerShell Scripts to Spread Cryptomining Malware Across Asia

2 min read - A cryptomining malware campaign originally discovered in January is now using the EternalBlue exploit to target users in Asia, according to security researchers.

April 15, 2019

Sextortion Scammers Enhance Attack Campaigns With Image Spam, Other New Techniques

2 min read - Security researchers observed sextortion scammers launching new attack campaigns that leverage image spam and other clever techniques to trick users into fulfilling their demands.

April 9, 2019

Phishing Campaign Makes Use of SingleFile Browser Extension Tool to Obfuscate Malicious Activity

2 min read - In a recent phishing campaign, fraudsters used a legitimate browser extension tool called SingleFile to obfuscate their attacks and remain undetected.

April 9, 2019

Web Servers Used to Host 10 Malware Families Distributed via Phishing Emails

2 min read - Digital attackers used more than a dozen web servers to host 10 malware families and distributed those threats using phishing emails.

April 8, 2019

Fraudsters Seize on March Madness Fervor With Phishing Attacks, Streaming Scams

2 min read - Online fraudsters are exploiting users' excitement for March Madness by targeting them with phishing attacks and streaming scams.

April 3, 2019

Shade Ransomware Campaign Compromises at Least 500 WordPress and Joomla Websites

2 min read - Security researchers discovered a hidden HTTP directory that is allowing threat actors to install Shade ransomware on WordPress and Joomla websites.

April 3, 2019

New XLoader Variant Masquerades as Android Security Apps, iOS Configuration Profile

2 min read - Security researchers observed a new variant of XLoader masquerading as Android security apps and an iOS configuration profile to target mobile users.

April 3, 2019

Magento Flaw Lets Cybercriminals Access E-Commerce Sites Without Authentication

2 min read - Security researchers discovered a Magento flaw that could enable cybercriminals to penetrate and control features within the popular e-commerce site without authentication.

April 2, 2019

New Gustuff Android Trojan Capable of Targeting More Than 100 Banking Apps

2 min read - Researchers detected a new Android Trojan called Gustuff that is capable of targeting more than 100 mobile banking apps.

April 2, 2019

Unnam3d Ransomware Moves Files Into Protected RAR Archives, Demands Amazon Gift Card

2 min read - Security researchers discovered a new ransomware family called Unnam3d that moves targeted files into protected RAR archives and demands an Amazon gift card as ransom.