New XLoader Variant Masquerades as Android Security Apps, iOS Configuration Profile
Security researchers observed a new variant of XLoader masquerading as Android security apps and an iOS configuration profile to target mobile users.
Personal Health Details of More Than 350,000 Oregonians Potentially Exposed in HIPAA Breach
Unauthorized individuals compromised and potentially exposed more than 350,000 Oregonians' protected health information (PHI) in a HIPAA breach.
Brute-Force Attack Wave Uses Legacy Protocols, Credential Dumps to Compromise Cloud Accounts
A massive brute-force attack campaign used both legacy protocols and credential dumps to compromise cloud user accounts, according to security researchers.
Threat Actor Targets Japanese Users With New Ursnif Variant
Security researchers discovered an attack campaign targeting Japanese users with a new variant of Ursnif banking malware.
Instagram Hack Fools Social Media Influencers With Phony ‘Verified’ Badges
Security researchers observed a Turkish-speaking group of cybercriminals using an Instagram hack to extort money, nude photos and other information from social media influencers.
How Fraud Specialist Danna Pelleg Fights Bad Guys With the Best Team in the Business
Danna Pelleg's childhood curiosity, early technology education and compulsion to fight the bad guys led her to a career as a fraud specialist and security operations team lead at IBM Trusteer.
New Reverse Proxy Tool Can Bypass Two-Factor Authentication and Automate Phishing Attacks
A new reverse proxy tool called Modlishka can easily automate phishing attacks and bypass two-factor authentication (2FA) — and it's available for download on GitHub.
Phishing Kit Uses Custom Web Font to Impersonate Major US Bank
A new phishing kit uses a custom web font to implement a substitution cipher in its campaign to target customers of a major U.S. bank.
Phone-Based Phishing Scam Reveals the Growing Sophistication of Attacks Against Apple Users
A new phone-based phishing scam reveals how fraudsters are devising more sophisticated schemes to prey on Apple device users.
Threat Actors Utilize Spear Phishing Emails Impersonating US Department of State Employees
Microsoft Windows Defender Research discovered an attack campaign that utilized spear phishing emails impersonating U.S. Department of State employees to gain remote access to victims' machines.