Clipper Malware Found Masquerading as Legitimate Service on Google Play Store
Security researchers discovered a sample of clipper malware that targeted Android users by lurking in the Google Play store.
Collection #1 Data Breach Exposes Nearly 733 Million Records, Highlighting Need for Multifactor Authentication
The Collection #1 data breach, which exposed nearly 733 million unique email messages and 21 million passwords, underscores the urgent need for enterprises to adopt multifactor authentication.
Government Cybersecurity Processes Must Change Drastically to Keep Up With Complex Attack Vectors
Since governments have so many potential attack vectors to manage, government cybersecurity professionals need clear processes, procedures and authority to harden vulnerable environments.
What Can Your Enterprise Learn From the Worst Passwords of 2018?
Splash Data released its list of the worst passwords of 2018. How does your enterprise stack up, and what advice can you give users to help improve their password security hygiene in the new year?
Magecart Group’s Use of Credit Card-Skimming JavaScript Attack on the Rise
An online retailer was hit by a JavaScript attack from a group associated with Magecart, a collective of cybercriminals that specializes in skimming credit card numbers from compromised websites.
Fraudsters Abuse Trusted Web Services to Conduct Phishing Attacks
Researchers reported that threat actors are using web services such as Google Drive, SharePoint and Dropbox to host files containing malicious links as part of phishing campaigns.
New Phishing Scheme Exploits Public Interest Around Hurricane Michael to Steal Email Credentials
Security researchers discovered a recent phishing scheme that took advantage of Hurricane Michael's impact to steal victims' email credentials across multiple services.
DanaBot’s Anti-VM Update Shows How Quickly Financial Cyberthreats Evolve
DanaBot, one of the most recent financial cyberthreats, has developed a way to avoid detection on virtual machines as it shifts focus from Australia to Poland.
60 Percent of Targeted Email Attacks Aimed at Contributors and Lower Management
A new report revealed that 60 percent of targeted email attacks were aimed at individual contributors and lower-level management between April and June 2018.
New WordPress Phishing Campaigns Target User Credentials
Newly discovered phishing campaigns are targeting WordPress users with malicious emails designed to steal user credentials.