The Last Watchdog

MAY 2, 2024

Early adoption by Fortune 100 companies worldwide, LayerX already secures more users than any other browser security solution and enables unmatched security, performance and experience Today’s modern enterprise employees rely heavily on browser-based services and SaaS applications.

Marketing 130

Marketing Technology Phishing Risk 130

Security Affairs

NOVEMBER 3, 2023

Iran-linked cyberespionage group MuddyWater is targeting Israeli entities in a new spear-phishing campaign. Iran-linked APT group MuddyWater (aka SeedWorm , TEMP.Zagros , and Static Kitten ) is targeting Israeli entities in a new spear-phishing campaign, Deep Instinct’s Threat Research team reported.

Telecommunications 102

Telecommunications Phishing Government Hacking 102

Security Affairs

JANUARY 7, 2023

Cyber researchers warn of a modified Zoom app that was used by threat actors in a phishing campaign to deliver the IcedID Malware. Cyble researchers recently uncovered a phishing campaign targeting users of the popular video conferencing and online meeting platform Zoom to deliver the IcedID malware. ” concludes the report.

Malware 86

Malware Phishing Banking Hacking 86

NopSec

FEBRUARY 9, 2017

The year 2016 will be remembered for some big moments in the world of cybersecurity: the largest known distributed denial of service (DDoS) attack, a phishing attack on a United States presidential candidate’s campaign, and ransomware attacks on major healthcare organizations are just a few. 2017 will see major advancements in technology.

Cybersecurity 40

Cybersecurity DDOS IoT Social Engineering 40

Security Affairs

AUGUST 6, 2023

The APT group has been active since at least 2017, its campaigns involve persistent phishing and credential theft campaigns leading to intrusions and data theft. Recently, Recorded Future Insikt Group observed BlueCharlie building a new infrastructure to launch phishing campaigns and/or credential harvesting.

Phishing 77

Phishing Social Engineering Authentication Cryptocurrency 77

Security Affairs

NOVEMBER 24, 2023

FortiGuard Labs researchers observed the North Korea-linked Konni APT group using a weaponized Russian-language Word document in an ongoing phishing campaign. The KONNI RAT was first spotted by Cisco Talos researchers in 2017, it has been undetected since 2014 and was employed in highly targeted attacks.

Encryption 103

Encryption Malware Phishing Hacking 103

Security Affairs

JANUARY 6, 2022

Security researchers at Cluster25 uncovered a recent campaign carried out by the North Korea-linked Konni APT group aimed at Russian diplomatic entities that used new versions of malware implants. The APT group carried out spear-phishing attacks using New Year’s Eve festivities as a lure.

Phishing 132

Phishing Malware Hacking Accountability 132

Krebs on Security

APRIL 15, 2020

The Coronavirus has prompted thousands of information security professionals to volunteer their skills in upstart collaborative efforts aimed at frustrating cybercriminals who are seeking to exploit the crisis for financial gain. “I’ve never seen this volume of phishing,” Rogers told Reuters. “I

Cybersecurity 309

Cybersecurity Cyber threats Government Phishing 309

Security Affairs

AUGUST 9, 2022

The threat actors launched spear-phishing campaigns against the victims, in some cases, the messages contained information related to the victims which were not publicly available. The emails used weaponized Microsoft Word documents exploiting the CVE-2017-11882 vulnerability.

Encryption 95

Encryption Antivirus Malware Hacking 95

Security Affairs

MAY 27, 2022

Crooks obtain the information by conducting spear-phishing and ransomware attacks, or other means. In 2017, crooks launched a phishing campaign against universities to compromise.edu accounts. The attackers set up fake university login pages and embedded a credential harvester link in phishing emails.

Cybercrime 128

Cybercrime Education Accountability Phishing 128

Security Affairs

APRIL 20, 2023

The researchers from Google TAG are warning of Russia-linked threat actors targeting Ukraine with phishing campaigns. Russia-linked threat actors launched large-volume phishing campaigns against hundreds of users in Ukraine to gather intelligence and aimed at spreading disinformation, states Google’s Threat Analysis Group (TAG).

Phishing 86

Phishing Education Accountability Telecommunications 86

Security Affairs

APRIL 30, 2021

The state-sponsored hackers sent spear-phishing messages to a general director working at the Rubin Design Bureau , in Saint Petersburg, which is one of three main Russian centers of submarine design. The spear-phishing messages used a malicious Rich Text File (RTF) document that included descriptions of an autonomous underwater vehicle.

Phishing 127

Phishing Malware Antivirus Encryption 127

Security Affairs

DECEMBER 29, 2021

The attack chain starts with phishing messages that were crafted for the target organization. The phishing messages are disguised as an e-mail with a target’s business partner. The spear-phishing messages use a password-protected ZIP or RAR attachment and the password is included in the content of the email. .

Malware 114

Malware Phishing Passwords Media 114

Security Affairs

APRIL 16, 2022

Threat actors are targeting Ukrainian government agencies with phishing attacks delivering the IcedID malware. The Ukrainian Computer Emergency Response Team (CERT-UA) uncovered new phishing campaigns aimed at infecting systems of Ukrainian government agencies with the IcedID malware. ” reads the analysis published by CERT-UA.

Malware 80

Malware Phishing Banking Government 80

Security Affairs

JUNE 28, 2020

In many cases, attackers targeted unpatched versions of Telerik user interface (UI) by exploiting CVE-2019-18935 , CVE-2017-9248 , CVE-2017-11317 , CVE-2017-11357 vulnerabilities. “The ACSC has identified instances where users have executed malware embedded in email attachments.

Malware 112

Malware Advertising Government Cyber Attacks 112

Security Affairs

MAY 26, 2022

phishing scam on its Messenger service that had been doing the rounds since at least 2017. Upon further examination, it turned out that thousands of these phishing links had been distributed, through a devious network sprawling across the back channels of the social media platform.

Scams 117

Scams Phishing Media Passwords 117

Security Affairs

APRIL 30, 2023

CERT-UA warns of a spear-phishing campaign conducted by APT28 group targeting Ukrainian government bodies with fake ‘Windows Update’ guides. Most of the APT28s’ campaigns leveraged spear-phishing and malware-based attacks.

System Administration 90

System Administration Government Phishing Malware 90

Security Affairs

MARCH 28, 2022

Ukraine CERT-UA uncovered a spear-phishing campaign conducted by Belarus-linked GhostWriter APT group targeting Ukrainian state entities with Cobalt Strike Beacon. The phishing messages use a RAR-archive named “Saboteurs.rar”, which contains RAR-archive “Saboteurs 21.03.rar.”

Phishing 91

Phishing Government Hacking Accountability 91

Security Affairs

NOVEMBER 28, 2021

North Korea-linked threat actors posed as Samsung recruiters in a spear-phishing campaign aimed at employees at South Korean security firms. According to the Google Threat Horizons report, the state-sponsored hackers sent fake job offers to employees at the security companies. . ” reads the Google Threat Horizons report.

Malware 121

Malware Phishing Antivirus Hacking 121

Security Affairs

JULY 9, 2019

Last week the United States Cyber Command (USCYBERCOM) uploaded to VirusTotal a malware used by Iran-linked APT33 group in attacks in Dec 2016 and Jan 2017. USCYBERCOM has discovered active malicious use of CVE-2017-11774 and recommends immediate #patching. ” reads a report published by Kaspersky. ” reads the report.

Malware 72

Malware InfoSec Advertising Government 72

Security Affairs

MARCH 8, 2020

The emails provide updates on the Coronavirus outbreak, it includes stats on the epidemic and contains an email of corona-virus@caramail.com that is likely used for phishing purposes. The final payload is the FormBook information-stealing Trojan, a malware that was first spotted by researchers at FireEye in October 2017.

Malware 120

Malware Scams Social Engineering Phishing 120

Troy Hunt

DECEMBER 4, 2017

— Nadine Dorries (@NadineDorries) December 2, 2017. link] — Troy Hunt (@troyhunt) December 2, 2017. — Nick Boles MP (@NickBoles) December 3, 2017. Seems slightly unfair to vilify @NadineDorries for what is common practice — JamesClayton (@JamesClayton5) December 3, 2017. No one else has access.

Passwords 204

Passwords Accountability Technology InfoSec 204

eSecurity Planet

DECEMBER 3, 2021

Here are the top Twitter accounts to follow for the latest commentary, research, and much-needed humor in the ever-evolving information security space. ICYMI, Equifax forced to pull offline a huge database of consumer data guarded only by credentials "admin/admin" [link] — briankrebs (@briankrebs) September 13, 2017.

Accountability 139

Accountability Cybersecurity Penetration Testing InfoSec 139

Security Affairs

SEPTEMBER 11, 2022

APT42 focuses on highly targeted spear-phishing and social engineering techniques, its operations broadly fall into three categories, credential harvesting, surveillance operations, and malware deployment. They have also previously targeted human rights activists, the media sector, and interfered with the US presidential elections.

Surveillance 94

Surveillance Social Engineering Phishing Government 94

Security Affairs

JANUARY 25, 2023

According to Proofpoint the group is targeting cryptocurrencies since at least 2017. APT38 appears to be a North Korea-linked group separate from the infamous Lazarus group, it has been active since at least 2014 and it has been observed targeting over 16 organizations across 11 countries.

Cryptocurrency 73

Cryptocurrency Phishing Healthcare Malware 73

Krebs on Security

JULY 18, 2023

LeakedSource also tried to pass itself off as a legal, legitimate business that was marketing to security firms and professionals. The RCMP arrested Bloom in December 2017, and said he made approximately $250,000 selling hacked data, which included information on 37 million user accounts leaked in the 2015 Ashley Madison breach.

Hacking 200

Hacking Accountability Data breaches Marketing 200

Security Affairs

DECEMBER 24, 2023

LockBit ransomware gang claims to have breached accountancy firm Xeinadin Mobile virtual network operator Mint Mobile discloses a data breach Akira ransomware gang claims the theft of sensitive data from Nissan Australia Member of Lapsus$ gang sentenced to an indefinite hospital order Real estate agency exposes details of 690k customers ESET fixed (..)

Ransomware 98

Ransomware Mobile Malware Marketing 98

Security Affairs

OCTOBER 11, 2022

An unauthorized third party could have had access to the details of Toyota customers between December 2017 and September 15, 2022. Users of T-Connect who registered between July 2017 and September 2022 could be exposed to fraudulent activities, including scams. The source code was leaked by a development subcontractor.

Scams 82

Scams Phishing Hacking Risk 82

Security Affairs

APRIL 30, 2021

In the worst-case scenarios, users would end up on a malicious or a phishing website. Like phishing kits, scam kits are sets of tools that help create and design scam pages. Most domains with phishing and scam content use CDNs (Content Delivery Networks) to hide the IP address of the real servers. Twitter | LinkedIn.

Scams 96

Scams Phishing Risk Information Security 96

Security Affairs

SEPTEMBER 1, 2023

EternalBlue is a Windows exploit created by the US National Security Agency (NSA) and used in the 2017 WannaCry ransomware attack. Targeted Phishing and Social Engineering: In some cases, attackers may employ targeted phishing emails or social engineering techniques to gain initial access to a system within the target network.

Social Engineering 108

Social Engineering Penetration Testing Engineering Malware 108

Security Affairs

JUNE 7, 2019

In October 2017, the city of Fort Worth, Texas became the target of a phishing scam. According to the arrest warrant affidavit, he withdrew thousands of dollars between November 2017 and January 2018 from the new account with Chase Bank, severely compromising the cybersecurity of Fort Worth. The Importance of Transparency.

Cybersecurity 102

Cybersecurity Scams Banking Accountability 102

Security Affairs

MAY 19, 2022

A previously unknown Chinese cyberespionage group, tracked as ‘Space Pirates’, targets enterprises in the Russian aerospace industry with spear-phishing attacks. The group has been active since at least 2017, researchers believe it is linked with other China-linked APT groups, including APT41 (Winnti), Mustang Panda , and APT27.

Malware 124

Malware Phishing Government Hacking 124

Security Affairs

AUGUST 27, 2022

In June 2017, Montenegro was targeted by the Russia-linked hacker group APT28 after Montenegro officially joined NATO alliance despite the strong opposition from the Russian Government that threatened to retaliate. Abazovic said it was politically motivated following the fall of his government last week.” ” reported the Reuters.

Cyber Attacks 79

Cyber Attacks Government Telecommunications Malware 79

Security Affairs

JUNE 12, 2021

The company advised employees and franchisees to watch for phishing emails and to use discretion when asked for information.” ” McDonald’s said that it was able to quickly identify the security breach and mitigate the threat. . “The company said no customer data was breached in the U.S.,

Data breaches 127

Data breaches Cyber Attacks Marketing Phishing 127

The Last Watchdog

FEBRUARY 28, 2021

Regardless of how familiar you are with Information Security, you’ve probably come across the term ‘malware’ countless times. From accessing your business-critical resources and sensitive information to halting business operations and services, a malware infection can quickly become an organization’s worst nightmare come true.

Cyber threats 113

Cyber threats Computers and Electronics Adware Spyware 113

Security Affairs

MARCH 17, 2020

Security experts from FireEye published an interesting report on the Ransomware deployment trends, it revealed that most of the attacks (76%) against the enterprise sector occur outside working hours. FireEye compiled the report using data from dozens of ransomware infections that it has investigated from 2017 to 2019.

Ransomware 111

Ransomware Advertising Malware Cybercrime 111

Security Affairs

MARCH 25, 2022

“According to the indictment, between May and September 2017, the defendant and co-conspirators hacked the systems of a foreign refinery and installed malware, which cyber security researchers have referred to as “Triton” or “Trisis,” on a safety system produced by Schneider Electric, a multinational corporation. .”

Government 91

Government Energy and Utilities Malware Hacking 91