SecureWorld News
FEBRUARY 5, 2025
Ransomware and state-sponsored attacks continue to escalate Canada's critical sectorsincluding healthcare, energy, education, and retailhave become prime targets for cybercriminals. Sector-specific challenges Energy & Utilities: Legacy OT systems and third-party risks expose critical infrastructure to ransomware.
Security Affairs
AUGUST 16, 2023
A phishing campaign employing QR codes targeted a leading energy company in the US, cybersecurity firm Cofense reported. “Beginning in May 2023, Cofense has observed a large phishing campaign utilizing QR codes targeting the Microsoft credentials of users from a wide array of industries.” ” continues the report.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
SecureList
NOVEMBER 29, 2024
The malware utilizes cloud resources for its C2 (command and control) servers, which it accesses via APIs using authentication tokens. Interestingly, Twelve shares infrastructure, utilities and TTPs (Tactics, Techniques and Procedures) with the DARKSTAR ransomware group (formerly known as Shadow or COMET).
SecureList
MAY 28, 2025
The threat actors behind Zanubis continue to refine its code adding features, switching between encryption algorithms, shifting targets, and tweaking social engineering techniques to accelerate infection rates. To retrieve the APK, the dropper leverages the PackageInstaller class. This technique is employed to evade detection.
The Last Watchdog
JULY 13, 2023
Bantick “As the MOVEit hack has proved, the bad actors are always looking for new ways to attack with tactics ranging from third party supplier attacks to more sophisticated social engineering and phishing attack techniques.
NopSec
OCTOBER 19, 2016
The first thing that all organizations need to understand is why social engineering works. In its simplest form, social engineering is an attack that focuses on the human element in the security context. There are a few inherently human qualities that social engineers leverage as part of their attack.
The Last Watchdog
MARCH 4, 2019
In fact, memory attacks have quietly emerged as a powerful and versatile new class of hacking technique that threat actors in the vanguard are utilizing to subvert conventional IT security systems. One tried-and-true incursion method pivots off social engineering. A network breach begins, of course, with an incursion.
Expert insights. Personalized for you.
77 
Let's personalize your content