Recently, Microsoft issued an alert, warning users about a remote access tool called RevengeRAT, also known as AsyncRAT. It is being used to target travel and aerospace companies with spear-phishing emails. The emails use social engineering tricks to prompt employees at these types of firms to open a poisoned Adobe …
Global Scale Phishing Attack Brings New Malware
There’s an ongoing, global scale phishing attack you should be aware of, even if your firm isn’t currently being targeted by it. The attack is being tracked by Mandiant, who recently published a report about it. According to that report, the attack was planned in waves, hitting more than 50 …
Watch Out For Vaccine Survey Phishing Emails
Scammers have found a new way to take advantage of people, so be on your guard. The U.S. Department of Justice has recently issued an alert warning people of fake emails sent out asking recipients to take advantage of a post vaccination survey. Naturally, as part of taking the survey, …
What Businesses Can Do To Minimize Phishing Emails
If you had to guess, worldwide, how many phishing emails would you estimate are sent out every day, what would you say? If you guessed anything less than three billion, you’d be incorrect. Three billion a day, on average. That’s both terrifying and depressing. On hearing that grim statistic, it’s …
Hacker Uses Zoom Invites To Steal Credentials Through Sendgrid
There’s a mix of bad news and good in the ongoing war against the hackers of the world. For the bad news, security professionals have recently detected a sophisticated phishing campaign that makes use of SendGrid and convincing replicas of Outlook on the Web and Office 365 logins to harvest …
Email Phishers Going After Online Shoppers This Holiday Season
Black Friday wasn’t as big of a shopping day as it could have been this year, and we have the pandemic to thank for that. In response to that, retailers have extended the holiday shopping season by starting earlier and offering more deals online, and holiday shoppers have responded to …
New Phishing Attack Uses Unique Method To Avoid Security
Hackers are always looking for a new angle, and recently, they’ve found a particularly good one. Image recognition software is becoming increasingly sophisticated. So if hackers are interested in building a fake landing and login page designed to spoof some other company, they have to get it exactly right, including …
The anatomy of a $15 million cyber heist on a US company
By Ionut Ilascu of Bleeping Computer Experienced fraudsters made off with $15 million from a U.S. company after carefully running an email compromise that took about two months to complete. The cybercriminal executed their plan with surgical precision after gaining access to email conversations about a commercial transaction. They inserted …
New Damaging Phishing Attacks Are Targeting Pandemic SBA Loans
The CISA (Cybersecurity & Infrastructure Security Agency) has recently published an advisory, warning of a new phishing campaign that specifically targets business owners who have received pandemic relief in the form of loans from the Small Business Administration. Apparently, according to the advisory, the campaign was launched toward the end …
New Netflix Payment Phishing Emails Appear Legitimate
Do you have a Netflix account? If so, you’re certainly not alone. Since the start of the pandemic, the company has experienced unprecedented growth, and is now the video streaming service of choice for tens of millions. If you’re one of those, be aware that an as yet unknown group …