News January 19, 2021

Drivers Beware: Text Phishing Disguised as New York State DMV Messages

3 min read - Text phishing scammers are targeting New York state drivers with messages asking them to update their driver’s licenses. Using the ongoing adoption of the REAL ID Act of 2005 in an attempt to make the scam sound legitimate, the attackers…

Fraud Protection January 13, 2021

Social Engineering And Social Media: How to Stop Oversharing

3 min read - You’ve done your due diligence, practice good security hygiene and have the best security tools available. Now, your security posture is strong. But, your plan is only as good as your employees, and they may be letting you down when…

X-Force December 3, 2020

IBM Uncovers Global Phishing Campaign Targeting the COVID-19 Vaccine Cold Chain

6 min read - At the onset of the COVID-19 pandemic, IBM Security X-Force created a threat intelligence task force dedicated to tracking down COVID-19 cyber threats against organizations that are keeping the vaccine supply chain moving. As part of these efforts, our team recently…

September 23, 2020

4 Phishing Attacks Making Waves Targeting VPNs and Brokers

3 min read - Threat actors have no want of creativity when it comes to phishing scams. They look for new lures, new subjects and new targets as a means of preying upon organizations and users. Fortunately, researchers are well aware of this stream…

August 18, 2020

Phishers Grab Microsoft Credentials With Fake SharePoint Emails

3 min read - A new phishing attack begins with a scam email disguised as an automated message from Microsoft SharePoint, Abnormal Security observed on Monday, July 27. Those responsible for the attack do not address the email to any specific employee within the…

Network August 4, 2020

6 Ransomware Trends You Should Watch for in 2020

7 min read - A ransomware infection can have a significant financial impact on an organization. American digital security and data backup firm Datto found that ransomware is costing businesses more than $75 billion a year. Part of that financial impact results from downtime…

Incident Response July 14, 2020

Securing Your Environment While Working Remotely

4 min read - Before the coronavirus pandemic hit, working from home used to be a novelty for many employees. According to a June 2020 IBM Security and Morning Consult “Work From Home Survey,” 80% of respondents say they worked from home either rarely…

July 14, 2020

Fake DNS Security Upgrade Scam Compromises WordPress Websites

3 min read - In late June, Naked Security received a scam email that pretended to originate from WordPress.com. It leveraged this cover to inform the recipient that their website was eligible to receive security upgrades under the Domain Name System Security Extensions (DNSSEC). The message…

X-Force July 7, 2020

COVID-19 Cybercrime Capitalizing on Brazil’s Government Assistance Program

6 min read - IBM X-Force Incident Response and Intelligence Services (IRIS) has been tracking cybercrime capitalizing on the coronavirus pandemic since January, and has observed the geographical areas of this activity shift over time. In February, cybercriminals were focusing on Asia, and we…

News July 6, 2020

.CRIMSON Ransomware Module Shipped With Java STRRAT

2 min read - In recent malware news, security researchers discovered a malware strain called “STRRAT” that shipped with the .CRIMSON ransomware module. STRRAT wasn’t the only new malware threat making headlines. Security researchers also uncovered a new threat that modified the Discord client…