November 5, 2018

Threat Actors Combine Windows Utilities in Malware Campaign Targeting Users in Brazil

2 min read - Researchers observed threat actors impersonating the Brazilian postal service in a malware campaign that combines legitimate Windows files such as WMI and CertUtil to steal banking data.

November 1, 2018

Lock and sLoad: PowerShell Malware Downloader Geofences Attacks for Maximum Impact

2 min read - A PowerShell malware downloader known as sLoad uses geofencing, customized emails and device reconnaissance to identify high-value Trojan targets.

October 30, 2018

Fraudsters Abuse Trusted Web Services to Conduct Phishing Attacks

2 min read - Researchers reported that threat actors are using web services such as Google Drive, SharePoint and Dropbox to host files containing malicious links as part of phishing campaigns.

Incident Response October 17, 2018

Why You Should Practice and Drill to Prepare for a Cyber Emergency

6 min read - The U.S. Fire Administration's five key components of a fire safety education program serve as a useful framework for CISOs looking to boost their company's ability to respond to a cyber emergency.

August 13, 2018

Malicious Email Payloads Increased in Volume and Diversity in Q2 2018

2 min read - A quarterly threat report revealed that malicious email attacks increased by 36 percent and delivered more diverse payloads in Q2 2018.

August 6, 2018

Phishing Campaign Uses FTP Links to Deliver DanaBot Banking Trojan

< 1 min read - Australian businesses have been targeted in a phishing campaign that uses FTP links to deliver the DanaBot banking Trojan, which is designed to steal financial information and other private data.

July 16, 2018

Human Error Strains Security Teams: How Can Companies Nip Employee Negligence in the Bud?

2 min read - New data reveals that security professionals are increasingly concerned about employee negligence because it forces them to respond to preventable data breaches.

July 5, 2018

Recent Extortion Scam Highlights the Need to Address Lingering WannaCry Risks

2 min read - Researchers uncovered a spam campaign that threatened to unleash the devastating WannaCry ransomware on unsuspecting victims who failed to pay a fee of roughly $650 by June 22, 2018.

CISO July 3, 2018

June’s Cybersecurity Recap: The Evolving Cybersecurity Career Pathway

4 min read - In June's security news, IT experts and educators around the world worked to create a new cybersecurity career pathway through initiatives designed to alleviate the industrywide skills shortage.

Malware June 28, 2018

Goal! Spam Campaigns Capitalize on the World Cup Craze

6 min read - IBM X-Force researchers observed several ongoing spam campaigns tied to the World Cup — many of which used the official branding of tournament sponsors to lure victims.