Cyber News

A spike in recent phishing and business email compromise (BEC) attacks can be traced back to criminals learning how to exploit Google Services. Social distancing has driven entire businesses into the arms of the Google ecosystem looking for a reliable, simple way to digitize the traditional office. Google services are being used by malicious actors to give their spoofing attempts a false veneer of legitimacy, both to security filters and victims. Their target is your password. Read more >>>

Adobe and Microsoft each issued a bevy of updates today to plug critical security holes in their software. Microsoft’s release includes fixes for 112 separate flaws, including one zero-day vulnerability that is already being exploited to attack Windows users. Microsoft also is taking flak for changing its security advisories and limiting the amount of information disclosed about each bug. Read more >>>

A threat actor specializing in business email compromise (BEC) attacks has been observed exploiting a vulnerability to spoof Rackspace customers' domains as part of its operations. An analysis of the attack revealed that the hackers had sent out phishing emails by leveraging a flaw related to how Rackspace SMTP servers hosted at emailsrvr.com authorize users. Read more >>>

Ransomware gangs are increasingly failing to keep their promise to delete stolen data after a victim pays a ransom. In 2019, the Maze ransomware group introduced a new tactic known as double-extortion, which is when attackers steal unencrypted files and then threaten to release them publicly if a ransom is not paid. Now, victims are being extorted through the encryption of their files and the risk of their data being published and causing a data breach. Read more >>>