article thumbnail

Voice Phishers Targeting Corporate VPNs

Krebs on Security

But one increasingly brazen group of crooks is taking your standard phishing attack to the next level, marketing a voice phishing service that uses a combination of one-on-one phone calls and custom phishing sites to steal VPN credentials from employees. The employee phishing page bofaticket[.]com. Image: urlscan.io. ” SPEAR VISHING.

Phishing 360
article thumbnail

Cyber Security Roundup for May 2021

Security Boulevard

The cryptocurrency sector that enables ransomware crime should be more closely regulated. Flexibility and Security, You Can Have it All! Adapting Security Awareness to the Post-Pandemic World. Important Strategies for Aligning Security With Business Objectives. Building a Security Conscious Workforce.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Ransomware Prevention, Detection, and Simulation

NetSpi Executives

Victims pay ransomware adversaries for decryption keys through cryptocurrency, such as Bitcoin. In general, the fewer assets you have exposed to the internet the better, so if it doesn’t need to be out there, remove it, and bring it inside your virtual private network (VPN). email, remote desktops, and Citrix—and secure them with MFA.

article thumbnail

Ransomware world in 2021: who, how and why

SecureList

Finally, negotiations with the victims may be handled by yet another team and when the ransom is paid out, a whole new set of skills is needed to launder the cryptocurrency obtained. They interact with each other through internet handles, paying for services with cryptocurrency. Monero (XMR) cryptocurrency is used for payment.

article thumbnail

The story of the year: ransomware in the headlines

SecureList

Treasury issued sanctions against the virtual cryptocurrency exchange Suex for their role in helping ransomware attackers get paid, and the pipeline attack proved to be DarkSide’s undoing: the group had attracted too much attention. In September 2021, the U.S. To protect the corporate environment, educate your employees.