Blog - Cyber Security Informer

The Rise of AI Social Engineering Scams

Identity IQ

JUNE 1, 2023

The Rise of AI Social Engineering Scams IdentityIQ In today’s digital age, social engineering scams have become an increasingly prevalent threat. Social engineering scams leverage psychological manipulation to deceive individuals and exploit the victims’ trust. Phishing attacks.

Social Engineering

Social Engineering Scams Engineering Identity Theft

Using a WordPress flaw to leverage Zerologon vulnerability and attack companies’ Domain Controllers

Security Affairs

OCTOBER 6, 2020

Using a WordPress flaw (File-Manager plugin–CVE-2020-25213) to leverage Zerologon (CVE-2020-1472) and attack companies’ Domain Controllers. According to WordFence , on September 4th, 2020, were recorded attacks on over 1.7 million sites, and by today, September 10, 2020, the total number of sites attacked has increased to over 2.6

Social Engineering

Social Engineering Passwords Advertising Accountability

3 Steps to Prevent a Case of Compromised Credentials

Duo's Security Blog

MAY 23, 2023

Compromised or stolen credentials is the second most common type of cybersecurity incident accounting for 27% of reported breaches, according to the Office of the Australian Information Commissioner (OAIC). If not properly prevented or even detected, losing the “keys to your kingdom” can unlock even more doors for attackers.

Authentication

Authentication Passwords Data breaches Phishing

Identifying Common Types of Cyberattacks

SiteLock

AUGUST 27, 2021

These are just a few visible signs that many different types of cyberattacks cause that your site might be experiencing. In fact, it’s possible for attacks and infections on your website to go undetected for years. This comes as no surprise considering that the average website experiences 44 attacks per day on average.

Small Business

Small Business DDOS Malware Phishing

Website Popularity Can Result In More Cyberattacks

SiteLock

AUGUST 27, 2021

However, only 6 percent of website owners use proactive website monitoring for suspicious activity, while 84 percent don’t find out about cyberattacks until after they’ve been compromised. In this blog we compare celebrities to websites to help illustrate the correlation between website popularity and an increased likelihood of cyberattacks.

Accountability

Accountability Malware Phishing Media

New spear phishing campaign targets Russian dissidents

Malwarebytes

MARCH 29, 2022

This blog post was authored by Hossein Jazi. Several threat actors have taken advantage of the war in Ukraine to launch a number of cyber attacks. Also the actor leveraged a new variant of this exploit called CABLESS in this attack. — Updated to clarify the two different campaigns (Cobalt Strike and Rat).

Phishing

Phishing Education Telecommunications Technology

Crimea “manifesto” deploys VBA Rat using double attack vectors

Malwarebytes

JULY 29, 2021

This blog post was authored by Hossein Jazi. The attackers may have wanted to combine a social engineering technique with a known exploit to maximize their chances of infecting targets. > <Relationships xmlns="[link] Id="rId1" Type="[link] Target="HtTpS:cloud-documents.com/doc/t.php?action=show_content"

Architecture

Architecture Social Engineering Cyber Attacks Engineering

The Phight Against Phishing

Digital Shadows

AUGUST 17, 2021

We’re talking about the email attack variety. According to this year’s research—and this should be no surprise to the Verizon fans like us—it’s still the top method of attack for external threat actors. Unfortunately, aspects of really good social engineering prey on one or more of these human traits (or faults).

Phishing

Phishing Accountability Social Engineering Mobile

Cooking Intelligent Detections from Threat Intelligence (Part 6)

Anton on Security

DECEMBER 1, 2023

This blog series was written jointly with Amine Besson, Principal Cyber Engineer, Behemoth CyberDefence and one more anonymous collaborator. TI serves as a key input for detection engineering (DE), the team that directly benefits from its findings. OK, What does DE expect from Intel?

Engineering

Engineering Unstructured Data Cybersecurity Architecture

Salt Labs exposes a new vulnerability in popular OAuth framework, used in hundreds of online services

Security Boulevard

MAY 24, 2023

Our first blog post in this series presented how we could have exploited several OAuth vulnerabilities in Booking.com (a company with $16 billion in annual revenue) to take over accounts. One of the included services is OAuth, which lets developers easily integrate a social sign-in component into their website.

Mobile

Mobile Accountability Authentication Media

Cooking Intelligent Detections from Threat Intelligence (Part 6)

Security Boulevard

DECEMBER 1, 2023

This blog series was written jointly with Amine Besson, Principal Cyber Engineer, Behemoth CyberDefence and one more anonymous collaborator. TI serves as a key input for detection engineering (DE), the team that directly benefits from its findings. OK, What does DE expect from Intel?

Engineering

Engineering Unstructured Data Cybersecurity Architecture

Beyond Passwords: 2FA, U2F and Google Advanced Protection

Troy Hunt

NOVEMBER 14, 2018

The former is a physical device, for example I had one of these old RSA tokens more than a decade ago back in corporate land: When I logged onto the work VPN, I needed to enter not just my Active Directory credentials but also the 6-digit number shown in the token above known as a time-based one-time password (TOTP).

Passwords

Passwords Authentication Accountability Mobile

Inside Mirai the infamous IoT Botnet: A Retrospective Analysis

Elie

DECEMBER 2, 2017

distributed Denial of service attacks (DDoS). reported that these attacks exceeded 1Tbps—the largest on public record. What’s remarkable about these record-breaking attacks is they were carried out via small, innocuous Internet-of-Things (IoT) devices like home routers, air-quality monitors, and personal surveillance cameras.

IoT

IoT DDOS Internet Internet

2023 Cyber Threat Predictions

Digital Shadows

NOVEMBER 1, 2022

All of these events have had a major effect on cyber threats, which continues to see malicious attackers giving network defenders plenty to think about. Many groups that have faced law enforcement attention often follow an impactful attack being made against a sensitive target.

Cyber threats

Cyber threats Ransomware Media Data breaches

Cyber Security Informer

The Rise of AI Social Engineering Scams

Using a WordPress flaw to leverage Zerologon vulnerability and attack companies’ Domain Controllers

Trending Sources

3 Steps to Prevent a Case of Compromised Credentials

Identifying Common Types of Cyberattacks

Website Popularity Can Result In More Cyberattacks

New spear phishing campaign targets Russian dissidents

Crimea “manifesto” deploys VBA Rat using double attack vectors

The Phight Against Phishing

Cooking Intelligent Detections from Threat Intelligence (Part 6)

Salt Labs exposes a new vulnerability in popular OAuth framework, used in hundreds of online services

Cooking Intelligent Detections from Threat Intelligence (Part 6)

Beyond Passwords: 2FA, U2F and Google Advanced Protection

Inside Mirai the infamous IoT Botnet: A Retrospective Analysis

2023 Cyber Threat Predictions

Stay Connected