OilRig Group Aims BONDUPDATER Trojan Malware at Middle Eastern Governments
The OilRig threat group recently targeted government offices in the Middle East with a spear phishing attack that involved the Trojan malware BONDUPDATER.
Here’s Why Business Email Compromise Is Still Driving Executive Identity Theft
Business email compromise scams are still surprisingly lucrative. In fact, the volume and frequency of BEC attacks have skyrocketed in recent years, according to FBI data.
60 Percent of Targeted Email Attacks Aimed at Contributors and Lower Management
A new report revealed that 60 percent of targeted email attacks were aimed at individual contributors and lower-level management between April and June 2018.
Threat Actors Peddling Weaponized IQY Files Via Necurs Botnet
Threat actors have taken a liking to IQY files, which are foreign to most users and appear benign to many spam filters.
Social Engineering: A Trick as Old as Time
Social engineering dates back to ancient times. Today, the most common forms of social trickery include baiting, vishing, phishing and other schemes designed to exploit human nature.
Nearly Half of Organizations Targeted Again Within a Year of Suffering a ‘Significant’ Cyberattack, Report Reveals
Nearly half of organizations that suffered a "significant" cyberattack fell victim to bad actors again within a year's time, a recent security trends report revealed.
February’s Top Cybersecurity News Stories: Nice Phish You Got There
Last month's cybersecurity news cycle featured a tricky cryptocurrency-stealing Trojan, targeted phishing attacks, interesting insights about millennials' identity protection habits and more.
An Interview With IBM Master Inventor James Kozloski on His New Security Patent: The Cognitive Honeypot
An innocent conversation with a colleague at the office printing station led IBM Master Inventor James Kozloski to land a security patent for the cognitive honeypot, a tool to combat spear phishing.
Canadian Business Banking Customers Hit With Targeted Phishing, Account Takeover Attacks
A targeted phishing campaign aimed at Canadian businesses prompts users with high levels of access to divulge login credentials and authentication codes.
Pick a Card, Any Card: Deception, the Human Mind and the Social Engineering Challenge
Social engineering schemes such as spear phishing rely on the human mind's inclination toward self-deception to motivate users to open malicious links.