Duo's Security Blog

FEBRUARY 16, 2022

With growing concerns around security, ransomware and retail breaches, there are a few key considerations that retailers should keep in mind when it comes to protecting their organizations. Retail’s great “digital transformation” sped up, as did the number of data breaches impacting retail. Data breach costs rose from $3.86

Retail 87

Retail Cybersecurity Data breaches Passwords 87

Security Affairs

NOVEMBER 17, 2022

A China-based financially motivated group, tracked as Fangxiao, is behind a large-scale phishing campaign dating back as far as 2019. Researchers from Cyjax reported that a China-based financially motivated group, dubbed Fangxiao, orchestrated a large-scale phishing campaign since 2017. SecurityAffairs – hacking, phishing).

Phishing 106

Phishing Adware Retail Malware 106

SecureWorld News

NOVEMBER 29, 2021

At the same time you may have been browsing through assorted home items, an internal cyber attack plagued the retail company's security team. Malicious hackers used hijacked reply-chain emails to cause disruption through a phishing attack, according to a story broke by Bleeping Computer. This is what is known so far.

Phishing 86

Phishing Retail Cyber Attacks Ransomware 86

Security Boulevard

APRIL 25, 2024

Cybercriminals target sensitive customer data held by retail banks and credit unions, exploiting vulnerabilities in digital systems to steal valuable information such as personally identifiable information (PII), account details, and payment card data.

Retail 69

Retail Banking Accountability Phishing 69

Identity IQ

AUGUST 31, 2023

How to Identify and Avoid Holiday Phishing Scams IdentityIQ The holiday season brings joy, celebrations, and… a surge in online scams. Holiday phishing scams are an ongoing issue that ramps up when folks are feeling the most festive. What Is a Phishing Scam? How Does Phishing Work? What Are the Types of Phishing Attacks?

Scams 98

Scams Phishing Identity Theft Banking 98

eSecurity Planet

MARCH 31, 2022

The overwhelming majority of malware attacks now come from email — as high as 89 percent , according to HP Wolf Security research. Approximately 83 percent of organizations said they faced a successful phishing attempt in 2021, up from 57 percent in 2020. What is Phishing? Types of Phishing Attacks & Their Defenses.

Phishing 130

Phishing Banking Social Engineering Scams 130

SecureList

FEBRUARY 16, 2023

Short-lived phishing sites often offered to see the premieres before the eagerly awaited movie or television show was scheduled to hit the screen. At the beginning of that year, we still observed phishing attacks that used the themes of infection and prevention as the bait.

Phishing 97

Phishing Scams Accountability Energy and Utilities 97

SecureList

NOVEMBER 20, 2023

In 2022, global e-commerce retail revenue was estimated to reach $5.7 Methodology In this research, we examine various types of threats, such as financial malware and phishing pages that imitate the world’s largest retail platforms, banks and payment systems. In the screenshot below, a phishing site mimics Chanel.

Phishing 119

Phishing Banking Retail Scams 119

Security Affairs

APRIL 21, 2024

carmaker with phishing attacks Law enforcement operation dismantled phishing-as-a-service platform LabHost Previously unknown Kapeka backdoor linked to Russian Sandworm APT Cisco warns of a command injection escalation flaw in its IMC. Automotive Industry Chinese Organized Crime’s Latest U.S.

Data breaches 96

Data breaches Phishing Ransomware Malware 96

Hot for Security

JANUARY 29, 2021

The company believes the incident occurred on January 4, 2021, after threat actors managed to trick employees into accessing and downloading malicious software on some retail-store computers. “A few employees in retail stores were successfully scammed by unauthorized individuals and downloaded software onto a store computer.”

Data breaches 133

Data breaches Wireless Retail Malware 133

Thales Cloud Protection & Licensing

OCTOBER 23, 2018

So before the shopping frenzy begins, we thought this would be an opportune time to outline some best practices that both retailers and consumers should follow in order to protect consumer data. As convenience technologies evolve, look for more risks to consumers and retailers. Protecting Consumer Data is Priority #1. Back to basics.

Retail 70

Retail Data breaches Mobile Threat Reports 70

Identity IQ

NOVEMBER 28, 2023

In this type of scam, fraudsters send deceptive emails or text messages claiming to be legitimate shipping notifications from reputable carriers or retailers such as FedEx, UPS, and the U.S. Or scammers are looking to infect victims’ devices with malware. What Is a Phishing Scam? Postal Service.

Scams 68

Scams Identity Theft Retail Phishing 68

SiteLock

AUGUST 27, 2021

Phishing emails are well-crafted emails that trick the user into clicking on links or attachments that collect personal and financial information or contain malware. Signs of a Phishing Email. A cybercriminal may disguise themselves as Amazon and send you a phishing email targeting your login information.

Phishing 52

Phishing Scams Retail Education 52

Security Affairs

MAY 5, 2021

A new cybercrime gang, tracked as UNC2529 , has targeted many organizations in the US and other countries using new sophisticated malware. A new financially motivated threat actor, tracked by FireEye Experts as UNC2529, has targeted many organizations in the United States and other countries using several new pieces of malware.

Cybercrime 99

Cybercrime Malware Manufacturing Retail 99

SecureWorld News

AUGUST 25, 2023

While it is a time of celebration, the weekend also marks an uptick in online scams and phishing attacks. Common Labor Day scams to watch out for Fake Retail Promotions: Cybercriminals create counterfeit websites or email campaigns that mimic legitimate retailers offering massive discounts on popular products.

Scams 94

Scams Retail Phishing Authentication 94

Adam Levin

NOVEMBER 17, 2020

It’s worth noting that there’s no reason a legitimate retailer would need that last one — the skeleton key to your identity — to process a purchase.). Protect yourself from malware by purchasing, updating, and upgrading antivirus software. Shop at reputable and recognizable retailers. Lock your devices. Do your research.

Scams 243

Scams Retail Banking Passwords 243

Security Affairs

MAY 12, 2024

Most of the victims are in the manufacturing, engineering and construction, and retail sectors. Some of the victims’ ransom payments were sent by both Conti and Black Basta groups to the gang behind the Qakbot malware. 61,9% of the victims are in the US, 15.8% in Germany, and 5.9%

Ransomware 112

Ransomware Hacking Healthcare Retail 112

Adam Levin

NOVEMBER 25, 2020

Additionally, the political season gave rise to phishing campaigns, a phenomenon that is likely to continue through the end of the year. The incidence of ransomware attacks has continued to climb, over 700% by some estimates in 2020 in comparison to 2019, with phishing emails being the primary vector.

Cybersecurity 191

Cybersecurity Retail Scams Phishing 191

SC Magazine

JUNE 24, 2021

A recently reported phishing and vishing campaign was designed to impersonate Geek Squad. A new blog post report has shone a light on the malicious practice known as voice phishing or vishing – a social engineering tactic that some cyber experts say has only grown in prominence since COVID-19 forced employees to work from home.

Phishing 81

Phishing Social Engineering Scams Engineering 81

Joseph Steinberg

JUNE 1, 2021

While some meal-kit-service-scam messages contain spelling and grammatical errors, the smishing message (smishing is phishing via text message) that I received did not suffer from such deficiencies; it appeared as well written as typical businesses correspondence. rate of growth experienced the year prior.

Artificial Intelligence 292

Artificial Intelligence Scams Retail Phishing 292

Security Affairs

OCTOBER 3, 2021

TA544 is a financially motivated threat actor that is active at least since 2017, it focuses on attacks on banking users, it leverages banking malware and other payloads to target organizations worldwide, mainly in Italy and Japan. Upon enabling the macro, the infection process will start. ” reads the analysis published by Proofpoint.

Malware 83

Malware Banking Social Engineering Retail 83

SecureList

NOVEMBER 22, 2021

Fact 2: the retail sector, particularly e-commerce, has always been popular with cybercriminals. In Q3 2021 , online stores were in second place by share of recorded phishing attacks (20.63%). Amazon was consistently the most popular lure used by cybercriminals to launch phishing attacks. Phishing Threats by the Numbers.

Scams 100

Scams Banking Phishing Retail 100

CyberSecurity Insiders

OCTOBER 27, 2022

Meaning the said malware is acting as an access point to hackers spreading the said version of file encrypting malware. In a press release by Ukraine CERT, some phishing emails were doing rounds on their network claiming to be from Armed Forces of Ukraine and cover a subject-line as confidential and important.

Ransomware 109

Ransomware Manufacturing Retail Encryption 109

CyberSecurity Insiders

OCTOBER 26, 2022

Microsoft Threat Intelligence Team has made it official that Vice Society, a hacking group, is behind multiple ransomware attacks that were being targeted at education, government and retail sectors.

Ransomware 119

Ransomware Education Retail Cyber Attacks 119

SecureList

NOVEMBER 23, 2022

Today, e-commerce sales make up 21% of global retail sales, which is a 50% increase on the pre-pandemic levels. In this research, we analyze various types of threats, such as financial malware and phishing pages mimicking the world’s biggest retail platforms, banking and payment systems, and discuss recent trends.

Phishing 105

Phishing Banking Scams Retail 105

SecureList

FEBRUARY 23, 2022

SpyEye, developed in 2009 and described as a “bank Trojan with a form grabbing capability”, surged from the eighth most common banking malware tool with a 3.4% Emotet (9.3%), described by Europol as “the world’s most dangerous malware”, underwent a drop of five percentage points between 2020 and 2021.This

Banking 101

Banking Phishing Cryptocurrency Malware 101

Security Affairs

JULY 7, 2019

Croatia government agencies have been targeted by unknown hackers with a new piece of malware tracked as SilentTrinity. A mysterious group of hackers carried out a series of cyber attacks against Croatian government agencies, infecting employees with a new piece of malware tracked as SilentTrinity. ” reads one of the alerts.

Government 80

Government Malware Computers and Electronics Advertising 80

SecureList

MARCH 29, 2023

However, traditional financial threats – such as banking malware and financial phishing, continue to take up a significant share of such financially-motivated cyberattacks. For instance, malicious spam campaigns targeting organizations grew 10-fold in April 2022, spreading Qbot and Emotet malware.

Banking 76

Banking Phishing Cryptocurrency Mobile 76

Security Affairs

FEBRUARY 2, 2020

An ongoing phishing campaign launched by TA505 is using attachments featuring HTML redirectors for delivering malicious Excel docs. In contrast, past Dudear email campaigns carried the malware as attachment or used malicious URLs. TA505 hacking group has been active since 2014 focusing on Retail and banking sectors.

Malware 76

Malware Security Intelligence Banking Phishing 76

Security Affairs

DECEMBER 11, 2020

Facebook has suspended some accounts linked to APT32 that were involved in cyber espionage campaigns to spread malware. Facebook has suspended several accounts linked to the APT32 cyberespionage that abused the platform to spread malware. APT32 also carried out watering hole attacks through compromised websites or their own sites.

Retail 126

Retail Malware Mobile Accountability 126

SiteLock

AUGUST 27, 2021

In fact, holiday shopping can account for up to 30 percent of annual sales for online retailers. In fact, the National Retail Federation (NRF) forecasts holiday sales will grow to between $727.9 With this continued uptick in predicted spend, ecommerce retailers need to place a stronger emphasis on cybersecurity than ever before.

Retail 98

Retail eCommerce Small Business Scams 98

Security Affairs

OCTOBER 18, 2020

Researchers from FireEye’s Mandiant observed FIN11 hackers using spear-phishing messages distributing a malware downloader dubbed FRIENDSPEAK. The macros download and execute the FRIENDSPEAK code, which in turn downloads the MIXLABEL malware. ” reads the analysis published by FireEye. ” reads the analysis.

Ransomware 131

Ransomware Malware Telecommunications Advertising 131

Security Boulevard

DECEMBER 6, 2021

The wily hackers that executed a successful email phishing campaign against IKEA using internal and compromised partner reply-chain emails show that corporations, particularly retailers hit hard and scrambling to recover after the pandemic, must continue to shore up their defenses and educate employees.

Retail 59

Retail Phishing Education Social Engineering 59

Security Through Education

MAY 21, 2024

Phishing Emails Offering Summer Deals: Another tactic employed by cybercriminals during summer break is phishing emails promising irresistible summer deals. These emails may appear to come from legitimate travel agencies, airlines, or online retailers, offering exclusive discounts or promotions.

Scams 52

Scams Identity Theft Advertising Phishing 52

Krebs on Security

DECEMBER 27, 2019

-based Synoptek is a managed service provider that maintains a variety of cloud-based services for more than 1,100 customers across a broad spectrum of industries , including state and local governments, financial services, healthcare, manufacturing, media, retail and software. A now-deleted Tweet from Synoptek on Dec.

Ransomware 182

Ransomware Media Financial Services Retail 182

Identity IQ

DECEMBER 6, 2023

Be wary of these common online shopping scams: Fake websites and online stores: Scammers often create fake websites that mimic legitimate retailers, hoping to trick unsuspecting shoppers into entering their personal and payment information. Common phishing red flags to look for include typos or low-resolution images.

Scams 52

Scams Identity Theft Retail Antivirus 52

Security Affairs

SEPTEMBER 3, 2023

Being Used to Phish So Many of Us? Hacks QakBot, Quietly Removes Botnet Infections Under Siege: Rapid7-Observed Exploitation of Cisco ASA SSL VPNs Why is.US This Is What Will Change When You Sign On Growing use of AI in cybersecurity reveals new possibilities Are Software Updates Useless Against Advanced Persistent Threats?

Social Engineering 105

Social Engineering Spyware Data breaches Surveillance 105