August 5, 2020

Users Beware: Spotting a Microsoft Renewal Scam

3 min read - A novel scam began when a user received an email impersonating a notification from Microsoft, Abnormal Security observed on Friday, July 17. The scam arrived after Microsoft had recently taken several steps to deter scammers. Security professionals should be aware of…

May 28, 2020

PonyFinal Ransomware Leverages Brute-Force Attacks to Access Networks

2 min read - Security researchers observed PonyFinal ransomware using brute-force attacks to access targeted organizations' networks.

May 27, 2020

Office 365 Credentials Targeted by Fake Supreme Court Phishing Attacks

2 min read - Malicious actors leveraged phishing emails designed to look like they originated from the Supreme Court in order to steal victims' Office 365 credentials.

May 25, 2020

Weekly Security News Roundup: ‘Silent Night’ Malware Reminiscent of ZeuS

3 min read - Researchers observed digital criminals selling a new malware strain based on the ZeuS family called "Silent Night." Read on to learn what else happened last week in security news.

May 20, 2020

New Microsoft Azure AD Sign-In Page Spoofed in Numerous Phishing Campaigns

2 min read - Microsoft discovered numerous phishing campaigns in which malicious actors attempted to spoof its new Azure AD sign-in page.

May 12, 2020

Astaroth Trojan Employed YouTube Channels as C&C to Evade Detection

2 min read - A new variant of the Astaroth Trojan family employed YouTube channels for command-and-control (C&C) functionality in order to evade detection.

May 5, 2020

LockBit Ransomware Performs Targeted Attacks With Automated Distribution

2 min read - Security researchers observed the LockBit ransomware leveraging brute-force techniques and evasion-based tactics to perform targeted attacks.

April 8, 2020

Mshta Replaces PowerShell in New Ursnif Campaign

2 min read - Security researchers observed that a new attack campaign replaced PowerShell with mshta as a means to distribute Ursnif malware.

Data Protection March 23, 2020

Crypto-Risk: Your Data Security Blind Spot

4 min read - Start thinking about what your organization can do to manage crypto-risk before today's encryption and security measures fall prey to tomorrow's attackers and advanced computing tools.

March 16, 2020

Weekly Security News Roundup: njRat Spread by Trojanized Hacking Tools

3 min read - Researchers spotted a new campaign in which malicious actors leveraged trojanized versions of popular hacking tools to spread njRat. Read on to learn what else happened last week in security news.