New IceID Phishing Attack Targets Website Owners Using Image Copyright Infringement as The Hook

May 6, 2021 9:00:16 AM By Stu Sjouwerman

Spotted by the Microsoft 365 Defender Threat Intelligence Team, this new phishing attack threatens legal action to trick victims into installing information-stealing malware.

[HEADS UP] New Malware Families Found in Phishing Campaign

May 5, 2021 1:36:54 PM By Stu Sjouwerman

Researchers from FireEye's security team found new malware families in a financial phishing campaign. The Malware strains are dubbed Doubledrag, Doubledrop, and Doubleback and have been ...

APT Group Use Voice-Changing Software to Impersonate Women as Part of Espionage Attacks

Apr 9, 2021 8:34:02 AM By Stu Sjouwerman

The middle eastern threat group known as APT-C-23 are targeting male soldiers in the Israel Defense Forces in an attempt to get their victims to download and install malware.

Why Should You Be Using DMARC? 3 Billion Spoofed Emails are Being Sent Everyday

Mar 23, 2021 12:51:07 PM By Stu Sjouwerman

In a recent report from TechRadar, email is still the most popular form of malware distribution. Billions of emails that are spoofed are being sent everyday.

Credential Harvesting Attacks Targeting the U.S. Federal Government Nearly Double as Malware Declines

Mar 11, 2021 9:07:03 AM By Stu Sjouwerman

Shifts to a remote workforce in 2020 gave cybercriminals an opportunity to change tactics, focusing on credentialed access to systems accessed from outside government networks.

Trickbot is Targeting the Legal Sector

Feb 1, 2021 8:24:13 AM By Stu Sjouwerman

Researchers at Menlo Security warn of an ongoing Trickbot campaign targeting the legal and insurance industries. Trickbot is a notorious remote access Trojan that was in the crosshairs of ...

Fake Scandal Video Serves Malware

Jan 7, 2021 12:03:54 PM By Stu Sjouwerman

Researchers at Trustwave warn that a phishing campaign is attempting to deliver malware via a file for a fake scandal video with 'Trump' included in the title. The file is a Java Archive ...

[HEADS UP] Australian Cyber Security Centre is Being Used in Malware Campaign

Jan 6, 2021 9:50:02 AM By Stu Sjouwerman

A warning was recently issued by the Australian Government of cybercriminals impersonating the Australian Cyber Security Centre (ACSC) to infect with malware.

Why Use Malware When Cybercriminals Can Use Social Engineering?

Nov 17, 2020 8:23:55 AM By Stu Sjouwerman

Researchers at Malwarebytes warn that a malvertising campaign they call “malsmoke” has stopped deploying exploit kits and is now using social engineering attacks to trick users into ...

Threat Actors Use Fake Sites for Espionage

Nov 10, 2020 8:21:20 AM By Stu Sjouwerman

Researchers at Volexity report that the Vietnamese threat actor OceanLotus has been using phony news and bogus activist websites to track users, or to trick them into downloading malware. ...

New Qbot Phishing Attack Pretends to be Windows Defender to Trick Its Victims

Oct 28, 2020 8:24:39 AM By Stu Sjouwerman

One of the most dangerous pieces of malware is back with a new campaign that takes advantage of social engineering techniques to look convincing enough to fool your users.

Members of the Cybercrime Group Responsible for NotPetya Indicted by U.S. Government

Oct 23, 2020 5:18:05 PM By Stu Sjouwerman

Six members of the Russian hacker group known as Sandworm who have carried out some of the most well-known cyberattacks in the last 6 years appear to have been brought to justice.

Trends in Malicious Attachments Used in Phishing Emails

Oct 14, 2020 8:26:32 AM By Stu Sjouwerman

People need to be familiar with the types of malicious attachments used in phishing emails, according to Lawrence Abrams at BleepingComputer. One of the most common methods of installing ...

The Most Dangerous Celebrity of 2020...

Oct 7, 2020 8:22:09 AM By Stu Sjouwerman

...Is Anna Kendrick, according to researchers at McAfee. The researchers analyzed Internet search results for celebrities and found that Kendrick’s search results (through no fault of her ...

Scammers are using Black Lives Matter as Phishbait

Oct 6, 2020 8:25:16 AM By Stu Sjouwerman

A phishing campaign is using Black Lives Matter-themed phishing lures to trick people into installing malware, Yahoo reports. Adam Levin from Cyberscout told Yahoo that the phishing ...

Spike in Emotet Attacks Against Government Agencies Seen Around the Globe in September

Sep 29, 2020 11:13:01 AM By Stu Sjouwerman

Attacks involving what is arguably the world’s most dangerous malware are on the rise, with reports from the cybersecurity agencies in Japan, New Zealand, and France.

Legitimate Services, but still Hook, Line, and Sinker

Sep 8, 2020 7:03:00 AM By Stu Sjouwerman

A malware distribution campaign is abusing organizations’ contact forms to send malicious emails designed to catch the attention of companies’ customer support personnel. The attackers ...

Organizations Aren’t Prepared to Recover from Cyberattacks on Active Directory

Sep 2, 2020 8:26:55 AM By Stu Sjouwerman

Cybercriminals are increasingly leveraging Active Directory to spread malware and even hold the organization for ransom. New data suggests you’re nowhere near ready for it.

QBot is Back With New Phishing Tricks

Aug 31, 2020 8:22:24 AM By Stu Sjouwerman

Researchers at Check Point warn that the QBot banking Trojan now has the ability to hijack email threads on infected devices and send malicious emails to the victim’s contacts. The ...

Watch Out! Cybersecurity and Infrastructure Security Agency Warn of New VBA Attack Designed to Deploy KONNI Remote Administration Tool

Aug 25, 2020 10:42:10 AM By Stu Sjouwerman

A new alert from CISA outlines just how dangerous and intrusive the KONNI malware is in organizations that fall for phishing attacks using Word attachments with malicious VBA code.