article thumbnail

New DDoS extortion attacks detected as Fancy Lazarus group returns

CSO Magazine

Security researchers are tracking new DDoS extortion activity by threat actor group Fancy Lazarus. The attacks have been primarily targeting US and global organizations from a range of sectors including energy, financial, insurance, manufacturing, public utilities and retail. Sign up for CSO newsletters. ].

DDOS 128
article thumbnail

Online retailers should prepare for a holiday season spike in bot-operated attacks

CSO Magazine

With the holiday shopping season in full swing, retail websites can expect a spike in account takeover fraud, DDoS, and other attacks, including attacks via APIs, which now represent almost half of e-commerce traffic.

Retail 79
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Online retailers should prepare for a holiday season spike in bot-operated attacks

Security Boulevard

Online retailers should prepare for a holiday season spike in bot-operated attacks. With the holiday shopping season in full swing, retail websites can expect a spike in account takeover fraud, DDoS, and other attacks, including attacks via APIs, which now represent almost half of e-commerce traffic. Leer más CSO Online.

Retail 52
article thumbnail

BrandPost: TCP Floods Are Again the Leading DDoS Attack Vector

CSO Magazine

This passion to improve how things are done more efficiently is not isolated to individuals; it spills over into all aspects of our community, including government, retail, service organizations, and the like. Life hacks are supposed to make tasks easier or more efficient to accomplish but, in many cases are simply more complicated.

DDOS 102
article thumbnail

What does the Colonial Pipeline attack tell us about security today?

IT Security Guru

The first relates to reports that there was no Chief Security Officer (CSO) in place. Fast forward to today and its rare not to have a CSO for very obvious reasons. The fact that 55% of organisations experience a DDoS attack against their APIs at least monthly is a prime example of the threats being entertained.