February 8, 2021
Microsoft has warned of an increasing number of consent phishing (aka OAuth phishing) attacks targeting remote workers during recent months, BleepingComputer has learned. These attacks were part of two campaigns that ran between September and December 2020, targeting victims in multiple recurring waves. Read more >>>
February 8, 2021
A new targeted phishing campaign includes the novel obfuscation technique of using Morse code to hide malicious URLs in an email attachment. Read more >>>
February 3, 2021
The threat of scam text messages may now seem distant, even quaint. With the new, exotic and sophisticated attacks that have arisen in the past decade, surely text message attacks are low on the list. But they can still be a big problem. Short message service (SMS) scams are social engineering attacks that work like email phishing attacks. Called ‘smishing’ (a mashup of SMS and phishing), the attacks aim to trick the victim into providing info or access that benefits the attacker. Read more >>>
January 20, 2021
Ransomware attacks took a heavy toll on the United States last year with more than 2,000 victims in government, education and health care, security researchers say in a new report. Read more >>>
January 7, 2021
It's a new year, and with it comes a new ransomware called Babuk Locker that targets corporate victims in human-operated attacks. Babuk Locker is a new ransomware operation that launched at the beginning of 2021 and has since amassed a small list of victims from around the world. Read more >>>
November 24, 2020
"The FBI first observed Ragnar Locker1ransomwarein April 2020, when unknown actors used it to encrypt a large corporation’s files for an approximately $11 million ransom and threatened to release 10 TB of sensitive company data," the FBI says in the TLP:WHITE flash alert. "Since then, Ragnar Locker has been deployed against an increasing list of victims, including cloud service providers, communication, construction, travel, and enterprise software companies." Read more >>>