Risk Management October 1, 2024

Spooky action: Phantom domains create hijackable hyperlinks

4 min read - According to a recent paper published at the 2024 Web Conference, so-called “phantom domains” make it possible for malicious actors to hijack hyperlinks and exploit users’ trust in familiar websites. The research defines phantom domains as active links to dot-com domains…

Risk Management January 10, 2023

RomCom RAT attack analysis: Fake it to make it

4 min read - The RomCom RAT has been making the rounds — first in Ukraine as it went after military installations, and now in certain English-speaking countries such as the United Kingdom. Initially a spear-phishing campaign, the RomCom attack has evolved to include…

Threat Hunting January 11, 2021

What is STRIDE and how does it anticipate cyberattacks?

2 min read - STRIDE threat modeling is an important tool in a security expert’s arsenal. Threat modeling provides security teams with a practical framework for dealing with a threat. For example, the STRIDE model offers a proven methodology of next steps. It can…

May 20, 2020

New Microsoft Azure AD Sign-In Page Spoofed in Numerous Phishing Campaigns

2 min read - Microsoft discovered numerous phishing campaigns in which malicious actors attempted to spoof its new Azure AD sign-in page.

Malware April 30, 2020

TrickBot Campaigns Targeting Users via Department of Labor FMLA Spam

4 min read - Recent analysis from IBM X-Force spam traps uncovered a new Trickbot campaign that currently targets email recipients with fake messages purporting to come from the U.S. Department of Labor.

Government April 27, 2020

SBA Spoofed in COVID-19 Spam to Deliver Remcos RAT

5 min read - As the ongoing COVID-19 pandemic impacts small businesses in the U.S., cybercriminals are trusting that people will be more likely to open unsolicited emails purporting to come from relevant entities.

February 3, 2020

Weekly Security News Roundup: Citrix ADC Servers Targeted by Ragnarok Ransomware

3 min read - Researchers observed samples of the Ragnarok ransomware family targeting Citrix ADC servers and attempting to disable Windows Defender. Read on to learn what else happened last week in security news.

December 11, 2019

Fake Payroll Emails Used by Phishing Campaign to Deliver TrickBot

2 min read - A phishing campaign is using payroll-themed emails to trick users into inadvertently infecting their machines with TrickBot.

December 11, 2019

HawkEye Keylogger Acts as First-Stage Loader for Cryptocurrency Miner

2 min read - Researchers observed the HawkEye keylogger acting as the first-stage downloader for a cryptocurrency miner in a new phishing campaign.

December 9, 2019

Weekly Security News Roundup: Buer Loader Distributed by Malvertising Campaigns

3 min read - Security researchers revealed that a new loader named Buer relies on exploit kits, malicious emails and other malware for distribution. Read to learn what else happened last week in security news.