April 3, 2019

Shade Ransomware Campaign Compromises at Least 500 WordPress and Joomla Websites

2 min read - Security researchers discovered a hidden HTTP directory that is allowing threat actors to install Shade ransomware on WordPress and Joomla websites.

April 3, 2019

New XLoader Variant Masquerades as Android Security Apps, iOS Configuration Profile

2 min read - Security researchers observed a new variant of XLoader masquerading as Android security apps and an iOS configuration profile to target mobile users.

March 25, 2019

TrickBot Creators Collaborate With BokBot to Conduct Man-in-the-Middle Attacks

2 min read - Security researchers warn that the cybercriminals behind the TrickBot and BokBot banking Trojans are now collaborating to perform man-in-the-middle (MitM) attacks.

March 20, 2019

Brute-Force Attack Wave Uses Legacy Protocols, Credential Dumps to Compromise Cloud Accounts

2 min read - A massive brute-force attack campaign used both legacy protocols and credential dumps to compromise cloud user accounts, according to security researchers.

March 19, 2019

Threat Actors Use Fake Copyright Infringement Notifications in Instagram Hacking Campaign

2 min read - Security researchers discovered that attackers are using fake copyright infringement notifications as part of a recent Instagram hacking campaign.

March 6, 2019

Attack Campaign Using Fake Browser Updates to Deliver Ransomware and Banking Malware

2 min read - Researchers observed an attack campaign distributing fake browser updates to infect website visitors with ransomware and banking malware.

March 5, 2019

Instagram Hack Fools Social Media Influencers With Phony ‘Verified’ Badges

2 min read - Security researchers observed a Turkish-speaking group of cybercriminals using an Instagram hack to extort money, nude photos and other information from social media influencers.

February 27, 2019

Threat Actor Using Fake LinkedIn Job Offers to Deliver More_eggs Backdoor

2 min read - Security researchers discovered that a threat actor is targeting LinkedIn users with fake job offers to deliver the More_eggs backdoor.

February 26, 2019

Phishing Campaign Uses Fake Google reCAPTCHA to Distribute Malware

2 min read - A recent phishing campaign used a fake Google reCAPTCHA as part of its efforts to target Polish bank employees with malware.

Data Protection February 26, 2019

When Combating Emerging Social Media Attacks, Don’t Try to Swim Against the Current

4 min read - The lure of social media is too much to fight against. Instead of pushing back, we need to work with what we've got and do our best to educate employees about potential social media attacks.