Nobelium Phishing Campaign Poses as USAID
Microsoft uncovered the SolarWinds crooks using mass-mail service Constant Contact and posing as a U.S.-based development organization to deliver malicious URLs to more than 150 organizations.
Read More
Malware
Building Multilayered Security for Modern Threats
Justin Jett, director of audit and compliance for Plixer, discusses the elements of a successful advanced security posture.
Read MoreBiden’s Cybersecurity Executive Order Puts Emphasis on the Wrong Issues
David Wolpoff, CTO at Randori, argues that the call for rapid cloud transition Is a dangerous proposition: “Mistakes will be made, creating opportunities for our adversaries.
Read MoreBazaLoader Masquerades as Movie-Streaming Service
The website for “BravoMovies” features fake movie posters and a FAQ with a rigged Excel spreadsheet for “cancelling” the service, but all it downloads is malware.
Read MoreA Peek Inside the Underground Ransomware Economy
Threat hunters weigh in on how the business of ransomware, the complex relationships between cybercriminals, and how they work together and hawk their wares on the Dark Web.
Read MoreThreat Actor ‘Agrius’ Emerges to Launch Wiper Attacks Against Israeli Targets
The group is using ransomware intended to make its espionage and destruction efforts appear financially motivated.
Read MoreBose Admits Ransomware Hit: Employee Data Accessed
The consumer-electronics stalwart was able to recover without paying a ransom, it said.
Read MoreApple Patches Zero-Day Flaw in MacOS that Allows for Sneaky Screenshots
Security researchers at Jamf discovered the XCSSET malware exploiting the vulnerability, patched in Big Sur 11.4, to take photos of people’s computer screens without their knowing.
Read MoreDarkSide Getting Taken to ‘Hackers’ Court’ For Not Paying Affiliates
A shadow court system for hackers shows how professional ransomware gangs have become.
Read MoreEmail Campaign Spreads StrRAT Fake-Ransomware RAT
Microsoft Security discovered malicious PDFs that download Java-based StrRAT, which can steal credentials and change file names but doesn’t actually encrypt.
Read More