The Hacker News

FEBRUARY 6, 2025

The North Korea-linked nation-state hacking group known as Kimsuky has been observed conducting spear-phishing attacks to deliver an information stealer malware named forceCopy, according to new findings from the AhnLab Security Intelligence Center (ASEC).

Malware 107

Malware Phishing Security Intelligence Hacking 107

Security Affairs

APRIL 18, 2020

TrickBot is the malware that most of all is involved in COVID-19-themed attacks, Microsoft’s Office 365 Advanced Threat Protection (ATP) data reveals. Based on Office 365 ATP data, Trickbot is the most prolific malware operation using COVID-19 themed lures. This means we’re seeing a changing of lures, not a surge in attacks.”

Malware 144

Malware Advertising Security Intelligence Phishing 144

Security Affairs

FEBRUARY 2, 2020

An ongoing phishing campaign launched by TA505 is using attachments featuring HTML redirectors for delivering malicious Excel docs. In contrast, past Dudear email campaigns carried the malware as attachment or used malicious URLs. pic.twitter.com/mcRyEBUmQH — Microsoft Security Intelligence (@MsftSecIntel) January 30, 2020.

Malware 112

Malware Security Intelligence Banking Phishing 112

Krebs on Security

MARCH 2, 2020

A large number of French critical infrastructure firms were hacked as part of an extended malware campaign that appears to have been orchestrated by at least one attacker based in Morocco, KrebsOnSecurity has learned.

DNS 323

DNS Penetration Testing Malware Hacking 323

eSecurity Planet

OCTOBER 4, 2021

percent of all malware detected on networks of WatchGuard Technologies customers in the second quarter came over encrypted connections, raising the security risk for the 80 percent of such organizations that lack processes for decrypting and scanning HTTPS traffic for threats. Malware in Encrypted Traffic. A surprising 91.5

Encryption 145

Encryption Malware Ransomware Firewall 145

Security Affairs

MAY 13, 2021

Microsoft warns of a malware-based campaign that targeted organizations in the aerospace and travel sectors in the past months. Microsoft researchers revealed that organizations in the aerospace and travel sectors have been targeted in the past months in a malware-based campaign. com or similar sites.

Security Intelligence 132

Security Intelligence Phishing Malware Hacking 132

Security Affairs

SEPTEMBER 18, 2021

Security researchers from the Cisco Talos team uncovered a spear-phishing campaign targeting the aviation industry for two years avoiding detection. Security researchers from Cisco Talos uncovered a spear-phishing campaign targeting, dubbed Operation Layover, that targeted the aviation industry for two years without being detected.

Malware 135

Malware Phishing DNS Cybercrime 135

Security Affairs

MAY 13, 2020

Microsoft discovered a new phishing campaign using COVID-19 lures to target businesses with the infamous LokiBot information-stealer. Microsoft has discovered a new COVID-19 themed phishing campaign targeting businesses with the LokiBot Trojan.

Phishing 135

Phishing Advertising Banking Security Intelligence 135

Malwarebytes

AUGUST 16, 2021

The post A week in security (August 9 – August 15) appeared first on Malwarebytes Labs. Stay safe, everyone!

Social Engineering 110

Social Engineering Scams VPN Phishing 110

Security Affairs

MAY 22, 2020

Experts from the Microsoft Security Intelligence team provided some details on a new “massive campaign” using COVID-19 themed emails. Researchers from the Microsoft Security Intelligence team provided some details on a new massive phishing campaign using COVID-19 themed emails. In April, these Excel 4.0

Security Intelligence 132

Security Intelligence Advertising Phishing Malware 132

Penetration Testing

JUNE 27, 2024

AhnLab Security Intelligence Center (ASEC) has issued a warning regarding the re-emergence of the DBatLoader malware, a notorious downloader known for its historical involvement in phishing campaigns.

Malware 49

Malware Security Intelligence Phishing Cybersecurity 49

Security Affairs

OCTOBER 6, 2020

In the middle-August, the malware was employed in fresh COVID19-themed spam campaign. Emotet is a modular malware, its operators could develop new Dynamic Link Libraries to update its capabilities. ” According to CISA, the surge in the attacks has rendered this malware one of the most prevalent ongoing threats. .

Government 144

Government Banking Advertising Malware 144

Malwarebytes

JULY 5, 2021

Researchers explore the insecure world of the subdomain (Source: Can i take your subdomain) Cyber insurance model is broken, consider banning ransomware payments (Source: The Register) How facial recognition solutions can safeguard the hybrid workplace (Source: Help Net Security) Capital One hacker faces fresh charges for 2019 hacking spree (Source: (..)

Cyber Insurance 110

Cyber Insurance Social Engineering Scams Insurance 110

Security Affairs

OCTOBER 25, 2021

The NOBELIUM APT ( APT29 , Cozy Bear , and The Dukes) is the threat actor that conducted supply chain attack against SolarWinds, which involved multiple families of implants, including the SUNBURST backdoor , TEARDROP malware , GoldMax malware , Sibot , and GoldFinder backdoors.

Telecommunications 138

Telecommunications Technology Hacking Malware 138

Webroot

JANUARY 7, 2022

Below, our security experts forecast where the main areas of concern lie in the year ahead. Malware made leaps and bounds in 2021. Last year, we forecasted phishing would continue to remain a prevailing method of attack , as unsuspecting individuals and businesses would fall victim to tailored assaults. Ransomware.

Cybercrime 116

Cybercrime Ransomware Phishing Cryptocurrency 116

Security Affairs

JULY 9, 2019

Microsoft Defender ATP Research Team discovered a fileless malware campaign that was spreading the information stealing Astaroth Trojan. Experts at the Microsoft Defender ATP Research Team discovered a fileless malware campaign that is delivering the information stealing Astaroth Trojan.

Antivirus 108

Antivirus Malware Advertising Security Intelligence 108

SC Magazine

MAY 14, 2021

Microsoft Security Intelligence earlier this week tweeted out that it has been tracking a campaign of remote access trojans (RATs) targeting the aerospace and travel industries with spear-phishing emails that distribute an actively developed loader, which then delivers RevengeRAT or AysncRAT. Photo by Joe Raedle/Getty Images).

Phishing 126

Phishing Scams Security Awareness Security Intelligence 126

Penetration Testing

JUNE 5, 2024

AhnLab SEcurity Intelligence Center (ASEC) has recently identified a phishing campaign leveraging HTML files distributed via email to execute malicious commands on targeted systems.

Phishing 53

Phishing Security Intelligence Cybersecurity Malware 53

Security Affairs

DECEMBER 1, 2020

Learn how the group tried to stay under the radar using threats perceived to be less alarming: [link] — Microsoft Security Intelligence (@MsftSecIntel) November 30, 2020. New blog: The threat actor BISMUTH, which has been running increasingly complex targeted attacks, deployed coin miners in campaigns from July to August 2020.

Cryptocurrency 139

Cryptocurrency Antivirus Manufacturing Government 139

Threatpost

AUGUST 13, 2018

Mike Murray, vice president of security intelligence at Lookout, discusses how mobile is redefining phishing, taking it out of the traditional inbox and into SMS and Facebook messages.

Mobile 44

Mobile Phishing Security Intelligence Government 44

Webroot

JUNE 2, 2022

MDR services offer threat detection and response capabilities by augmenting cybersecurity tools with human security intelligence. Leveraging this human security expertise, MDR integrates, synthesizes and contextualizes security and other event information to hunt for, understand and respond to security incidents.

Threat Detection 116

Threat Detection Cyber Insurance Small Business Insurance 116

Heimadal Security

MAY 13, 2021

The tech giant has warned that the aviation and travel industry is seeing a notable increase in RAT (Remote Access Trojan) cyberattack efforts through phishing emails. A thread of information was posted by the Microsoft Security Intelligence team on their official Twitter page.

Security Intelligence 75

Security Intelligence Phishing Malware Cybersecurity 75

The Last Watchdog

JULY 30, 2018

More than 230,000 new malware samples are launched every day. The painful impact of cyber attacks on businesses is worsening despite advances in technology aimed at protecting enterprises from malicious network traffic, insider threats, malware, denial of service attacks and phishing campaigns. Categorizing solutions.

CISO 140

CISO Cyber Attacks Data collection Cybersecurity 140

Webroot

DECEMBER 11, 2020

Social engineering and business email compromise (BEC) are two related cyberattack vectors that rely on human error to bypass the technology defenses businesses deploy to deter malware. After clicking the link and entering the info, your security is compromised. Social Engineering. Business Email Compromise. Perfecting Your Posture.

Hacking 70

Hacking Social Engineering Engineering Phishing 70

Security Affairs

OCTOBER 29, 2020

.” Microsoft Threat Intelligence Information Center (MSTIC) has uncovered activity by the threat actor PHOSPHOROUS, which has been masquerading as conference organizers and sending spoofed invitations by email to high-profile individuals. Get details here: [link] — Microsoft Security Intelligence (@MsftSecIntel) October 28, 2020.

Hacking 95

Hacking Security Intelligence Advertising Accountability 95

eSecurity Planet

APRIL 29, 2022

Standalone cybersecurity tools are not enough to maintain the security posture of an entire organization. Between malware , phishing attacks , zero-day threats , advanced persistent threats , reconnaissance, and brute force attacks, hackers are looking for any and every avenue into a network. SIEM Benefits. Types Of Threats.

Software 123

Software Cybersecurity Firewall Antivirus 123

Penetration Testing

APRIL 24, 2025

A recent report by the AhnLab Security intelligence Center (ASEC) has uncovered the latest tactics employed by the The post Kimsuky’s PebbleDash Campaign: PowerShell Attacks & RDP Bypass Tactics appeared first on Daily CyberSecurity.

Security Intelligence 67

Security Intelligence Cybersecurity Phishing Malware 67

Lenny Zeltser

MAY 3, 2019

Modern applications support features that attackers can abuse to install malware on your system. Enable as many OS and app security features as practical. Use modern, reputable anti-malware software. Wondering what tactics attackers used against political campaigns and how you can resist them? government.

Cybersecurity 111

Cybersecurity Social Engineering Authentication Software 111

CyberSecurity Insiders

JANUARY 25, 2022

. ” The report’s findings are gathered using CSC’s newly launched DomainSec SM platform , which makes the connections between newly registered, dropped, and existing domain names, online brands, and fraud (phishing). At CSC, we believe domain security intelligence is power.

Artificial Intelligence 52

Artificial Intelligence Phishing Technology DNS 52

eSecurity Planet

SEPTEMBER 13, 2021

It boasts unlimited scalability and queries and offers intelligence on IP and URL reputation, web applications, malware , vulnerabilities and spam. Key Features: Human-generated threat intelligence data. Threat intelligence collaboration. Integration with third-party intelligence tools. CrowdStrike Falcon X.

Threat Detection 125

Threat Detection Risk Firewall Cybersecurity 125

Spinone

DECEMBER 21, 2018

Google describes Security Center as a security analytics and best practice recommendations utility that enables G Suite administrators to operate G Suite environments much more intelligently and with greater visibility. This helps administrators to take a more proactive approach to security intelligence.

Backups 65

Backups Encryption Ransomware Cybersecurity 65

Spinone

NOVEMBER 6, 2017

Risk Level Assessment It’s crucial for a business to contextualize internal cyber security intelligence with external threat data to determine real security risks and their impact on business. Data has to be continually analyzed and this is where modern technology and AI comes in.

Artificial Intelligence 40

Artificial Intelligence Cybersecurity Technology Big data 40

Spinone

DECEMBER 26, 2018

Social engineering attacks , including phishing, spam, and viruses introduced via clickable links within e-mail affected 80% of the banking institutions in 2016. VoIP phishing and impersonation also victimized millions of corporate employees across the world , contributing to an even greater cyber threat.

Security Awareness 40

Security Awareness Risk Cyber threats Cyber Risk 40

Webroot

APRIL 21, 2021

Although cybercriminal activity throughout 2020 was as innovative as ever, some of the most noteworthy threat activity we saw came from the old familiar players, namely ransomware, business email compromise (BEC) and phishing. COVID-19 definitely affected phishing in very visible ways. phishing URLs targeting Netflix jumped 646%.

Threat Reports 119

Threat Reports Phishing Ransomware Backups 119

Spinone

JULY 8, 2020

Email security and advanced protection – Email is often the gateway to security breaches or malware attacks. With automated intelligence, SpinOne protects your HIPAA PHI from ransomware and other dangerous threats with automated threat detection, visibility, and remediation.

Encryption 52

Encryption Backups Ransomware Accountability 52

eSecurity Planet

APRIL 23, 2021

Standalone security products are not enough to maintain the security posture of an entire organization. Between malware , phishing attacks , zero-day threats, advanced persistent threats , reconnaissance and brute force attacks, hackers are looking for any and every avenue into a network. EDR benefits.

Cybersecurity 104

Cybersecurity Antivirus Artificial Intelligence Firewall 104