October 15, 2021
Senior officials from 31 countries and the European Union said that their governments would take action to disrupt the cryptocurrency payment channels used by ransomware gangs to finance their operations. The joint statement was issued following the virtual Counter-Ransomware Initiative meetings facilitated this week by the White House National Security Council in response to ongoing attacks that revealed significant vulnerabilities across critical worldwide infrastructure. Read more >>>
October 15, 2021
While previously reported phishing campaigns have often involved threat actors impersonating high-ranking employees, such as CEOs and CFOs, a new study by Avanan researchers found that half of all phishing emails they analyzed impersonated non-executives. 77% of those emails targeted employees on the same level as the impersonated employee. Read more >>>
October 4, 2021
The Flubot malware has switched to a new and likely more effective lure to compromise Android devices via security updates. Flubot will effectively take over the infected devices, gaining access to the victims’ payment and banking information in the process via a downloaded webview phishing page overlayed on top of legitimate mobile banking and cryptocurrency applications’ interfaces. Read more >>>
September 20, 2021
Ransomware is one of the fastest-growing cybersecurity attacks. One of the factors that make these threats especially intimidating is that the costs can be far-reaching. An August 2021 report from security consultancy NCC Group shows that the number of worldwide ransomware attacks analyzed by the firm’s Research Intelligence and Fusion Team increased by 288% between the first and second quarters of this year. Read more >>>
September 2, 2021
The FBI and CISA urged organizations not to let down their defenses against ransomware attacks during weekends or holidays in a joint cybersecurity advisory issued earlier today. The two federal agencies said they "observed an increase in highly impactful ransomware attacks occurring on holidays and weekends—when offices are normally closed—in the United States, as recently as the Fourth of July holiday in 2021." Read more >>>
September 2, 2021
A former remote employee of NY Credit Union was able to access the shared servers using her old credentials which were not removed and delete roughly about 21GB of data from the shared drives as revenge for being fired. WESTprotect recommends that you remove any credentials that are no longer required as soon as possible. Read more >>>