Spear Phishing Report Card: Perfect Scores in School Security Pen Testing
According to a new U.K.-based study, 100 percent of test spear phishing attacks gained access to sensitive university data in less than two hours.
Phishing Campaign Makes Use of SingleFile Browser Extension Tool to Obfuscate Malicious Activity
In a recent phishing campaign, fraudsters used a legitimate browser extension tool called SingleFile to obfuscate their attacks and remain undetected.
Fraudsters Seize on March Madness Fervor With Phishing Attacks, Streaming Scams
Online fraudsters are exploiting users' excitement for March Madness by targeting them with phishing attacks and streaming scams.
Missed DNS Flag Day? It’s Not Too Late to Upgrade Your Domain Security
Whether or not you plan on using DNS cookies or DNSSEC, foreseeing an upgrade plan for your software to the latest version made available as part of DNS Flag Day is highly advised.
Threat Actor Using Fake LinkedIn Job Offers to Deliver More_eggs Backdoor
Security researchers discovered that a threat actor is targeting LinkedIn users with fake job offers to deliver the More_eggs backdoor.
Razy Trojan Installs Malicious Browser Extensions to Steal Cryptocurrency
Security researchers observed the Razy Trojan installing malicious extensions across multiple web browsers to steal cryptocurrency.
BBC Email Scam Spoofs Broadcaster’s Site to Generate Bitcoin
Researchers identified a new email scam using seemingly legitimate BBC News webpages to reroute user clicks and generate bitcoin.
Security Flaw Spawns 10 New Kinds of 4G LTE Attacks, Researchers Report
A group of researchers discovered a flaw in the protocol used in telecommunications networks that could enable fraudsters to pursue at least 10 different types of 4G LTE attacks.
DMARC Your Calendar: Google, Yahoo Send Spam Packing
Email services such as Google and Yahoo are joining the DMARC movement in order to cut down on the sophisticated spam that continues to plague users.
Using Natural Language Processing to Identify Malicious Domains
Cybercriminals using similar lexical styles when establishing domains to phish from allow analysts to spot them via natural language processing techniques.