eSecurity Planet

FEBRUARY 22, 2022

There is no need for social engineering , as the program can implant backdoors directly without forced consent. Standard approaches such as endpoint protection , aggressive patch management, and zero-trust architectures are effective ways to mitigate zero-click threats. Zero-click attacks remove this hurdle.

Spyware 124

Spyware Software Government Social Engineering 124

SecureList

NOVEMBER 17, 2021

This year, the use of surveillance software developed by private vendors has come under the spotlight, as discussed above. This includes the use of social engineering to obtain credentials and brute-force attacks on corporate services, in the hope of finding poorly protected servers. And now, we turn our attention to the future.

Mobile 131

Mobile Surveillance Ransomware Government 131

Joseph Steinberg

JULY 13, 2022

Additionally, keep in mind that while Lockdown Mode may make it more difficult for attackers to exploit social engineering in order to compromise devices, until Apple more strictly controls what apps it allows in its app store , potential government spying remains a major problem. Is that really true?

Cybersecurity 249

Cybersecurity Artificial Intelligence Government Social Engineering 249

eSecurity Planet

DECEMBER 19, 2023

Ricardo Villadiego, founder & CEO of Lumu , expects “a significant shift towards adopting models based on passwordless architectures like Google Passkeys as the dominant authentication method to combat phishing and scam campaigns.

Cybersecurity 140

Cybersecurity CISO Government Technology 140

eSecurity Planet

APRIL 9, 2024

Security infrastructure and redundancy: Check the vendor’s data centers, network architecture, backup and disaster recovery plans, and uptime assurances. Assess the physical security measures: Evaluate access controls, surveillance systems, and environmental controls.

Risk 98

Risk Threat Detection Data breaches Encryption 98

SecureList

APRIL 27, 2022

While we were unable to obtain the same results by analyzing the CERT-UA samples, we subsequently identified a different WhiteBlackCrypt sample matching the WhisperKill architecture and sharing similar code. On February 23, ESET published a tweet announcing new wiper malware targeting Ukraine. Final thoughts.

Malware 134

Malware Firmware Government Phishing 134

SecureList

OCTOBER 17, 2023

This strategic shift signals its intent to intensify its surveillance capabilities and expand its range of targets. In its most recent wave of attacks, BlindEagle has once again adapted, embracing yet another open-source RAT, Agent Tesla.

Government 105

Government Malware VPN Manufacturing 105