Fraud Protection November 21, 2018

Easy Does It! A Timely Look Into Fraud TTPs in the Brazilian Financial Cybercrime Landscape

8 min read - In this first article of a two-part series, IBM X-Force exposes some of its research on the typical malware and tactics, techniques and procedures (TTPs) used in Brazilian financial cybercrime.

November 2, 2018

DemonBot Targeting Hadoop Clusters to Perform DDoS Attacks

2 min read - Security researchers reported that a new bot called DemonBot is targeting Hadoop clusters to execute distributed denial-of-service (DDoS) attacks.

October 30, 2018

Cybercriminals Distribute TimpDoor Malware to Turn Android Devices Into Network Proxies

2 min read - The TimpDoor malware family enables cybercriminals to turn infected Android devices into network proxies without users' knowledge.

October 29, 2018

Chalubo Bot Family Launches Distributed Denial-of-Service Attacks Against Linux Systems

2 min read - Researchers discovered a family of bots dubbed Chalubo launching distributed denial-of-service (DDoS) attacks to brute-force Linux-based systems running internet-facing SSH servers.

Software Vulnerabilities October 10, 2018

Threat Actors Prey on Drupalgeddon Vulnerability to Mass-Compromise Websites and Underlying Servers

4 min read - X-Force observed attackers using known Drupal vulnerabilities, including Drupalgeddon, to target websites and the underlying infrastructure that hosts them, leveraging Shellbot to open backdoors.

Data Protection September 11, 2018

How Can Media Companies Be More Confident in Their Cybersecurity Strategy and Policy?

4 min read - According to recent research, only 1 percent of media companies are very confident in their cybersecurity strategy and policy.

Endpoint September 6, 2018

4 New Smart Office Security Risks and How to Mitigate Them

4 min read - The smart office market is forecast to double by 2023. But while IoT devices promise to bring a bevy of benefits, they also introduce entirely new categories of cyber risk.

Risk Management August 15, 2018

Global Perspectives on Cyber Resilience From Marsh & McLennan’s 2018 Cyber Handbook

4 min read - Given the increasingly sophisticated and interconnected nature of the cyberthreat landscape, organizations must collaborate across sectors to improve cyber resilience around the world.

August 1, 2018

Unknown Actor Leaks Android Malware Exobot Source Code

2 min read - An unknown threat actor leaked the source code for the Android malware Exobot, leading to fears of an impending attack similar to the massive DDoS incident that hit domain name provider Dyn in 2016.

July 16, 2018

New Protocol Promises to Improve Wi-Fi Security — Eventually

3 min read - WPA3, which was released in June 2018, promises to improve Wi-Fi security — but the changes will be gradual because the Wi-Fi Alliance will need to certify routers to work with the new protocol.