Intelligence & Analytics December 13, 2022

Cybersecurity Trends: IBM’s Predictions for 2023

4 min read - As with many other aspects of life and business, 2022 held fewer overall surprises in cybersecurity than in recent years — thank goodness. Instead, many trends brewing over the past few years began to take clearer form. Some were unexpected,…

News May 5, 2021

Personal Information Theft: Threat Actors Lurking in Car Insurance Quotes

2 min read - Threat actors are stealing information by taking advantage of the application design and code of websites that provide instant quotes for auto insurance rates, the New York Department of Financial Services (NYDFS) reported in March. This personal information theft was first…

May 21, 2020

Magento Plugin Flaw Leaves Online Shoppers Open to E-Skimming Attacks

2 min read - A Magento plugin vulnerability that dates back at least three years could allow e-skimming attacks on unsuspecting online shoppers, the FBI warns.

April 27, 2020

Weekly Security News Roundup: Vulnerability Lets Attackers Compromise Apple Devices via Email

3 min read - Researchers revealed their discovery of a vulnerability that enables bad actors to infect iPads and iPhones by sending a specially crafted email. Learn what else happened last week in security news.

Government April 27, 2020

SBA Spoofed in COVID-19 Spam to Deliver Remcos RAT

5 min read - As the ongoing COVID-19 pandemic impacts small businesses in the U.S., cybercriminals are trusting that people will be more likely to open unsolicited emails purporting to come from relevant entities.

Endpoint April 21, 2020

New Android Banking Trojan Targets Spanish, Portuguese Speaking Users

6 min read - IBM X-Force recently analyzed a new Android banking Trojan dubbed "Banker.BR" that appears to be targeting users in Spain, Portugal, Brazil and other parts of Latin America.

April 6, 2020

Weekly Security News Roundup: MS-SQL Servers Targeted by ‘Vollgar’ Campaign

2 min read - Researchers uncovered an attack campaign that spent the past two years targeting Windows machines running MS-SQL servers. Read on to learn what else happened last week in security news.

Malware March 30, 2020

Zeus Sphinx Trojan Awakens Amidst Coronavirus Spam Frenzy

7 min read - The renewed Zeus Sphinx activity that IBM X-Force is seeing features a modified variant targeting online banking users in North America and Australia through the use of maldocs themed around COVID-19.

Advanced Threats March 24, 2020

TrickBot Pushing a 2FA Bypass App to Bank Customers in Germany

13 min read - Our team is closely monitoring TrickBot's developing capabilities, including its new cross-channel attacks using the TrickMo component.

March 16, 2020

Cookiethief: Cookie-Stealing Trojan Targets Social Media Accounts

2 min read - Researchers spotted a new cookie-stealing Trojan called "Cookiethief" that is targeting users' social media accounts and browsers.