Fraud Protection November 16, 2018

How to Stay One Step Ahead of Phishing Websites — Literally

3 min read - Ahead-of-threat detection enables security professionals and consumers to identify potential phishing websites faster than traditional browser protection apps can blacklist active cyberthreats.

November 15, 2018

Threat Actors Exploit Equation Editor to Distribute Hawkeye Keylogger

2 min read - A recent Hawkeye keylogger campaign leveraged an old Microsoft Office Equation Editor vulnerability to steal user credentials, passwords and clipboard content.

November 12, 2018

New Cobalt Gang PDF Attack Avoids Traditional Static Analysis Tools

2 min read - A PDF attack campaign conducted by the Cobalt Gang used a specially crafted document to evade dection by static analysis tools.

Fraud Protection November 8, 2018

How Tomer Agayev Fights Financial Fraud With Curiosity and Suspicion

3 min read - As threat research team lead at Trusteer, Tomer guards the gateway to both known and unknown threats and passes along his insights to help banking customers protect themselves from social engineering.

November 7, 2018

NARWHAL SPIDER Uses Steganography to Deliver URLZone Malware in Cutwail Spam Campaign

2 min read - A new Cutwail spam campaign is leveraging steganography — hiding data within images — to compromise devices and download URLZone.

Incident Response November 6, 2018

A Fun and Educational Answer to the Security Awareness Problem: The Security Escape Room

3 min read - A security escape room can be a fun and interactive way to train employees on various security concepts they might otherwise ignore.

November 5, 2018

Threat Actors Combine Windows Utilities in Malware Campaign Targeting Users in Brazil

2 min read - Researchers observed threat actors impersonating the Brazilian postal service in a malware campaign that combines legitimate Windows files such as WMI and CertUtil to steal banking data.

November 1, 2018

Lock and sLoad: PowerShell Malware Downloader Geofences Attacks for Maximum Impact

2 min read - A PowerShell malware downloader known as sLoad uses geofencing, customized emails and device reconnaissance to identify high-value Trojan targets.

October 30, 2018

Cybercriminals Distribute TimpDoor Malware to Turn Android Devices Into Network Proxies

2 min read - The TimpDoor malware family enables cybercriminals to turn infected Android devices into network proxies without users' knowledge.

October 30, 2018

Fraudsters Abuse Trusted Web Services to Conduct Phishing Attacks

2 min read - Researchers reported that threat actors are using web services such as Google Drive, SharePoint and Dropbox to host files containing malicious links as part of phishing campaigns.