FreshRSS

🔒
△ 🔃
☐ ☆ ✇ The first stop for security news | Threatpost

Threat Actors Pivot Around Microsoft’s Macro-Blocking in Office

By Elizabeth Montalbano — July 28th 2022 at 17:24
Cybercriminals turn to container files and other tactics to get around the company’s attempt to thwart a popular way to deliver malicious phishing payloads.
☐ ☆ ✇ The first stop for security news | Threatpost

Messaging Apps Tapped as Platform for Cybercriminal Activity

By Elizabeth Montalbano — July 27th 2022 at 16:57
Built-in Telegram and Discord services are fertile ground for storing stolen data, hosting malware and using bots for nefarious purposes.
☐ ☆ ✇ The first stop for security news | Threatpost

Novel Malware Hijacks Facebook Business Accounts

By Elizabeth Montalbano — July 26th 2022 at 18:15
Newly discovered malware linked to Vietnamese threat actors targets users through a LinkedIn phishing campaign to steal data and admin privileges for financial gain.
☐ ☆ ✇ The first stop for security news | Threatpost

Conti’s Reign of Chaos: Costa Rica in the Crosshairs

By Aamir Lakhani — July 20th 2022 at 12:35
Aamir Lakhani, with FortiGuard Labs, answers the question; Why is the Conti ransomware gang targeting people and businesses in Costa Rica?
☐ ☆ ✇ The first stop for security news | Threatpost

Magecart Serves Up Card Skimmers on Restaurant-Ordering Systems

By Elizabeth Montalbano — July 20th 2022 at 12:14
300 restaurants and at least 50,000 payment cards compromised by two separate campaigns against MenuDrive, Harbortouch and InTouchPOS services.
☐ ☆ ✇ The first stop for security news | Threatpost

Google Boots Multiple Malware-laced Android Apps from Marketplace

By Elizabeth Montalbano — July 18th 2022 at 12:32
Google removed eight Android apps, with 3M cumulative downloads, from its marketplace for being infected with a Joker spyware variant.
☐ ☆ ✇ The first stop for security news | Threatpost

Emerging H0lyGh0st Ransomware Tied to North Korea

By Elizabeth Montalbano — July 15th 2022 at 16:26
Microsoft has linked a threat that emerged in June 2021 and targets small-to-mid-sized businesses to state-sponsored actors tracked as DEV-0530.
☐ ☆ ✇ The first stop for security news | Threatpost

Journalists Emerge as Favored Attack Target for APTs

By Elizabeth Montalbano — July 14th 2022 at 15:08
Since 2021, various state-aligned threat groups have turned up their targeting of journalists to siphon data and credentials and also track them.
☐ ☆ ✇ The first stop for security news | Threatpost

‘Callback’ Phishing Campaign Impersonates Security Firms

By Elizabeth Montalbano — July 12th 2022 at 11:43
Victims instructed to make a phone call that will direct them to a link for downloading malware.
☐ ☆ ✇ The first stop for security news | Threatpost

Sneaky Orbit Malware Backdoors Linux Devices

By Elizabeth Montalbano — July 8th 2022 at 14:45
The novel threat steals data and can affect all processes running on the OS, stealing information from different commands and utilities and then storing it on the affected machine.
☐ ☆ ✇ The first stop for security news | Threatpost

U.S. Healthcare Orgs Targeted with Maui Ransomware

By Elizabeth Montalbano — July 8th 2022 at 10:46
State-sponsored actors are deploying the unique malware--which targets specific files and leaves no ransomware note--in ongoing attacks.
☐ ☆ ✇ The first stop for security news | Threatpost

Latest Cyberattack Against Iran Part of Ongoing Campaign

By Nate Nelson — July 5th 2022 at 12:35
Iran's steel manufacturing industry is victim to ongoing cyberattacks that previously impacted the country's rail system.
☐ ☆ ✇ The first stop for security news | Threatpost

ZuoRAT Can Take Over Widely Used SOHO Routers

By Elizabeth Montalbano — June 30th 2022 at 17:20
Devices from Cisco, Netgear and others at risk from the multi-stage malware, which has been active since April 2020 and shows the work of a sophisticated threat actor.
☐ ☆ ✇ The first stop for security news | Threatpost

A Guide to Surviving a Ransomware Attack

By Oliver Tavakoli — June 30th 2022 at 11:59
Oliver Tavakoli, CTO at Vectra AI, gives us hope that surviving a ransomware attack is possible, so long as we apply preparation and intentionality to our defense posture.
❌