Heimadal Security

OCTOBER 13, 2022

Recent attacks use phishing emails to impersonate the U.S. Small Business Administration (SBA) and rely on Google Forms to host phishing pages that steal the personal details of business owners. COVID-19-themed phishing campaigns are not unheard of in the U.S.,

Phishing 98

Phishing Small Business Cybersecurity 98

SC Magazine

MAY 5, 2021

In a blog post, the Proofpoint researchers said that while OAuth apps add business features and user interface enhancements to major cloud platforms such as Microsoft 365 and Google Workspace, they’re also a threat because bad actors now use malicious OAuth 2.0

Malware 113

Malware Engineering Social Engineering Phishing 113

Security Affairs

MAY 12, 2020

The malware was observed last days with a new obfuscation layer, new C2, and distributed inside an MSI file. Trojan Lampion is a malware observed at the end of the year 2019 impacting Portuguese users using template emails from the Portuguese Government Finance & Tax and EDP. PORTUGUESE GOVERNAMENT TEMPLATE / COVID-19.

Banking 123

Banking Malware Government Advertising 123

SecureList

FEBRUARY 16, 2023

The bait included the most awaited and talked-about releases: the new season of Stranger Things, the new Batman movie, and the Oscar nominees. Short-lived phishing sites often offered to see the premieres before the eagerly awaited movie or television show was scheduled to hit the screen.

Phishing 100

Phishing Scams Accountability Energy and Utilities 100

SecureList

APRIL 27, 2022

Disclaimer: when referring to APT groups as Russian-speaking, Chinese-speaking or other-“speaking” languages, we refer to various artefacts used by the groups (such as malware debugging strings, comments found in scripts, etc.) On February 23, ESET published a tweet announcing new wiper malware targeting Ukraine.

Malware 135

Malware Firmware Government Phishing 135

Security Affairs

JULY 7, 2020

Expert spotted a new release of the Lampion trojan banker that was launched with fresh improvements in the way the malware loader operated. A new release of the Lampion trojan banker was launched with fresh improvements in the way the malware loader – the initial VBS file – is operating.

Malware 112

Malware Banking Phishing Internet 112