The vulnerability allowed the threat actor to distribute a malicious document through a remote Cloudflare worker but make it look like it was being downloaded directly from UPS.com. click here to read full Article...
The Microsoft 365 Defender Threat Intelligence Team posted an article stating that they have been tracking a widespread credential phishing campaign using open redirector links. click here to read full Article Read more on...
A new DirtyMoe botnet variant was discovered with major modifications in the form of anti-forensic, anti-debugging, and anti-tracking capabilities. The attackers use VMProtect and their own encryption algorithm to evade detection. Besides vulnerability management solutions,...
Vzwpix allows Verizon customers to send texts as emails to recipients instead of phone messages. Threat actors can utilize these services to mass deliver texts that do not show the name of the sender....
Cybercriminals are increasingly deploying CAPTCHA-protected malicious URLs to bypass security walls while adding counterfeit login for lottery and survey pages. Targeted victims are baited into revealing their information, such as addresses, date of births,...
The video game industry is soaring, not in the least thanks to the lockdowns, which forced people to look for new ways to entertain themselves and socialize. Even with things going back to normal,...
Along with this increased volume of online shopping, a new trend of phishing attacks is doing rounds where cybercriminals impersonate parcel delivery companies in an attempt to steal financial details from their victims. click...
A Nigerian threat actor was found trying to recruit employees by offering them to pay $1 million in bitcoins to deploy Black Kingdom ransomware on companies’ networks. When multiple messages were sent to inboxes...
In research presented at the Defcon security conference this month, a researcher found workarounds that attackers could potentially use to get past Google’s enhanced Workspace protections. click here to read full Article Read more...
The email subject, “Supreme Court: Contract Agreement,” may cause the recipient to further open the attachment. When the recipient opens the attachment, they will see a standard calendar invite. click here to read full...
Research shows that the cost of phishing attacks has nearly quadrupled over the past six years: Large U.S. companies are now losing, on average, $14.8 million annually, or $1,500 per employee. click here to...
FINRA reported that threat actors behind the campaign are using multiple domains (i.e., finrar-reporting[.]org, finpro-finrar[.]org, gateway2-finra[.]org) impersonating the legitimate websites. click here to read full Article Read more on computer hacking news
This week, the U.K. NCSC has published a guide on how IT administrators can add the new button to Outlook on Microsoft Office 365 suites across their organizations to report phishing emails. click here...
Microsoft revealed about a phishing attack group’s new techniques in which a ‘jigsaw puzzle’ technique plus unusual features like Morse code dashes and dots were used to hide its attacks. The group uses invoices...
The ongoing phishing campaign lures targets into handing over their Office 365 credentials using invoice-themed XLS.HTML attachments and various information about the potential victims. click here to read full Article Read more on computer...
Microsoft has disclosed details of an evasive year-long social engineering campaign wherein the operators kept changing their obfuscation and encryption mechanisms every 37 days on average, including relying on Morse code, in an attempt...
