Advanced Threats October 6, 2021

Phishing Attacks Are Top Cyber Crime Threat, Easier Than Ever to Create and Deploy

4 min read - Why is one of cyber crime’s oldest threats still going strong? The Anti-Phishing Working Group (APWG) reports that January 2021 marked an unprecedented high in the APWG’s records, with over 245,771 phishing attacks in one month. IBM X-Force’s 2021 Threat…

Security Services September 17, 2021

How to protect against deepfake attacks and extortion

2 min read - Cybersecurity professionals are already losing sleep over data breaches and how to best protect their employers from attacks. Now they have another nightmare to stress over — how to spot a deepfake. Deepfakes are different because attackers can easily use…

Application Security August 31, 2021

Cyberattacks Use Office 365 to Target Supply Chain

2 min read - Malicious actors have a history of trying to compromise users’ Office 365 accounts. By doing so, they can tunnel into a network and use their access to steal sensitive information. But they need not stop there. They can also single…

Mobile Security August 17, 2021

How to Avoid Smishing Attacks Targeting Subscription Service Users

3 min read - If you’re anything like me, you used delivery more during the pandemic than before. Both getting food brought to my door and meal kit boxes mean people don’t have to mask up and go out to the grocery store. But…

News June 21, 2021

New Buer Malware Loader Spread Through DHL Scam Email

2 min read - Digital attackers are using fake DHL shipping emails to trick recipients into opening a malicious Microsoft Office document. According to Proofpoint, the DHL scam email leads to an infection of ‘RustyBuer,’ a new variant of the Buer Loader malware family…

Incident Response June 16, 2021

Why a Phishing Attack Is Still Profitable — And How To Stop One

4 min read - As the business world continues to grapple with an expanding definition of new normal, the phishing attack remains a common tactic for attackers. Why are phishing attacks still happening? How can we prevent them? We spoke to a threat analyst…

Data Protection June 11, 2021

Educating the Educators: Protecting Student Data

5 min read - I found my 17-year-old son happily playing video games last year when he was supposed to be in virtual school. But after a few questions, I learned he wasn’t skipping school. His class had been canceled after his teacher fell…

Threat Intelligence May 28, 2021

Attackers launch cyberattack via U.S. aid agency email accounts

2 min read - Microsoft announced a Russian threat group (ITG11, aka Nobelium, APT29) also thought to be behind the SolarWinds attack conducted an email campaign masquerading as the U.S. Agency for International Development. Microsoft reports that while organizations in the United States received…

Threat Intelligence April 14, 2021

An update: The COVID-19 vaccine’s global cold chain continues to be a target

5 min read - In December 2020, IBM Security X-Force released a research blog disclosing that the COVID-19 cold chain — an integral part of delivering and storing COVID-19 vaccines at safe temperatures — was targeted by cyber adversaries. After that first report, we…

September 23, 2020

4 Phishing Attacks Making Waves Targeting VPNs and Brokers

3 min read - Threat actors have no want of creativity when it comes to phishing scams. They look for new lures, new subjects and new targets as a means of preying upon organizations and users. Fortunately, researchers are well aware of this stream…