Why Every Employee in Your Organization Should Learn Social Engineering Vocabulary
When it comes to social engineering training, make sure every employee learns the names of specific attacks.
Fraudsters Abuse Smartphone Google Calendar Feature to Push Through Scam Offers
Fraudsters are abusing a Google Calendar feature that's commonly enabled on smartphones to target unsuspecting users with scam offers.
Phishing Campaign Delivers Multi-Feature, Open-Source Babylon RAT
Researchers spotted a phishing campaign delivering a multi-feature, open-source remote administration tool known as Babylon RAT.
Attackers Use EternalBlue and PowerShell Scripts to Spread Cryptomining Malware Across Asia
A cryptomining malware campaign originally discovered in January is now using the EternalBlue exploit to target users in Asia, according to security researchers.
Dark Web TLS/SSL Certificates Highlight Need for Shift to Zero Trust Security
Some of the latest website security threats originate from thriving dark web marketplaces for TLS/SSL certificates, which often come packaged with other cybercrime services.
Phishing Campaign Makes Use of SingleFile Browser Extension Tool to Obfuscate Malicious Activity
In a recent phishing campaign, fraudsters used a legitimate browser extension tool called SingleFile to obfuscate their attacks and remain undetected.
Shade Ransomware Campaign Compromises at Least 500 WordPress and Joomla Websites
Security researchers discovered a hidden HTTP directory that is allowing threat actors to install Shade ransomware on WordPress and Joomla websites.
New Gustuff Android Trojan Capable of Targeting More Than 100 Banking Apps
Researchers detected a new Android Trojan called Gustuff that is capable of targeting more than 100 mobile banking apps.
Brute-Force Attack Wave Uses Legacy Protocols, Credential Dumps to Compromise Cloud Accounts
A massive brute-force attack campaign used both legacy protocols and credential dumps to compromise cloud user accounts, according to security researchers.
Threat Actors Use Fake Copyright Infringement Notifications in Instagram Hacking Campaign
Security researchers discovered that attackers are using fake copyright infringement notifications as part of a recent Instagram hacking campaign.