Digital Shadows

NOVEMBER 10, 2022

The level of sophistication used by attackers to mimic the original domains varied greatly, ranging from low quality, obvious phishing pages to more refined efforts mimicking animations and logos. pro is flagged as a phishing domain by multiple security providers. Among these pages, a notable example was the qatar2022[.]pro

Cyber threats 52

Cyber threats Media Social Engineering Mobile 52

Spinone

DECEMBER 17, 2019

Let’s take a phishing email that one of our colleagues got some time ago as an example to illustrate the most common signs: 1. This might be your boss, or somebody from HR, IT, or accounting departments. One of the worst consequences that can happen via phishing emails is lateral movement. What is Lateral Movement?

Ransomware 83

Ransomware Passwords Encryption Phishing 83

SecureList

NOVEMBER 23, 2021

Data from the Brazilian Federation of Banks registered a considerable increase in crime (such as explosions at bank branches to steal money) and cybercrime (increased phishing and social-engineering attacks) against banking customers and banking infrastructure. Of course, this is the result of economic problems caused by the pandemic.

Cryptocurrency 104

Cryptocurrency Banking Cybercrime Ransomware 104

Malwarebytes

MAY 10, 2023

Just check out the following stats from last year: 18 percent of clicked phishing emails in 2022 came from a mobile device. This could be any other type of malware, such as HiddenAds or Adware to generate money by ads-per-click. ” The number of phishing sites targeting mobile has shot up by 50 percent from 2019 to 2021. .

Mobile 65

Mobile Malware Phishing Spyware 65

SecureList

NOVEMBER 10, 2021

With millions of new users on streaming platforms, cyberattackers have recognized this heightened demand and seek to take advantage of it by distributing streaming phishing scams and spreading malware under the guise of users’ favorite shows. An example of a phishing page offering to stream Money Heist. Methodology.

Phishing 93

Phishing Accountability Malware Adware 93

SecureList

MAY 31, 2021

Lazarus made use of COVID-19 themes in its spear-phishing emails, embellishing them with personal information gathered using publicly available sources. A41APT is a long-running campaign, active from March 2019 to the end of December 2020, that has targeted multiple industries, including Japanese manufacturing and its overseas bases.

Malware 94

Malware Adware Encryption Architecture 94

SecureList

APRIL 10, 2023

It is especially important to analyze how this threat originates, because many cybercriminals work in teams, buying and selling Google Play accounts, malware, advertising services, and more. The price depends on the account features, such as the number of already published apps, number of their downloads, etc.

Malware 98

Malware Encryption Mobile Accountability 98

SecureList

NOVEMBER 18, 2022

First, the threat actor sends a spear-phishing email to the potential victim with a lure to download additional documents. The attackers gained access to the enterprise network using carefully crafted phishing emails. The Trojan, once installed, steals account passwords, credit card details, session cookies and more.

Malware 100

Malware Computers and Electronics Adware Cryptocurrency 100

SecureList

AUGUST 12, 2021

All of these documents were blank, suggesting the existence of precursor documents – possibly delivered by means of spear-phishing or a previous infection – that trigger the download of the RTF files. Black Kingdom first appeared in 2019; in 2020 the group was observed exploiting vulnerabilities (such as CVE-2019-11510) in its attacks.

Ransomware 133

Ransomware Malware Banking Encryption 133

SecureList

DECEMBER 10, 2020

Some employees are not strictly using their business accounts for work-related purposes. For example, 42% of workers say they are using personal email accounts for work and nearly half (49%) have admitted to increasing how often they do this. RDP attacks dynamics, January – November 2019 and 2020 ( download ).

Scams 57

Scams Passwords Phishing Internet 57