Reduce API Security Risk by Fixing Runtime Threats in Code Faster
Blog Blog https://www.akamai.com/blog CySecBot CySecBot
Day: January 16, 2024
Email Nightmare: 94% of Firms Hit by Phishing Attacks in 2023
In its latest Email Security Risk Report, Egress found that businesses were 10% more negatively affected by phishing attacks in 2023 than in 2022
Why SECDEF Austin’s Secret Hospitalization Really Mattered
Secretary of Defense Lloyd Austin’s recent hospitalization and revelations that key Pentagon and White House leaders, including President Biden, were unaware of his “incapacitation” for five days is concerning. The reason for such concern should transcend political criticism. Indeed, the real concern regarding the secretary’s uninformed absence relates to the negative impact on America’s nuclear […]
Why SECDEF Austin’s Secret Hospitalization Really Mattered was originally published on Global Security Review.
Hack The Box: Bumblebee Sherlock Challenge – Easy Difficulty
In this post, I would like to share some walkthroughs on the Sherlock Challenges such as Bumblebee which is considered an Easy difficulty Introduction of Bumblebee Challenge In this challenge, you will take on the role of a Digital Forensics and Incident Response (DFIR) specialist investigating a security breach involving an external contractor who accessed […]
The post Hack The Box: Bumblebee Sherlock Challenge – Easy Difficulty appeared first on Threatninja.net.
Crypto Heists Surge in 2023, $16.93m Already Stolen in 2024
Comparitech revealed crypto heists increased in volume by 42% last year
The 7 deadly cloud security sins – and how SMBs can do things better
By eliminating these mistakes and blind spots, your organization can take massive strides towards optimizing its use of cloud without exposing itself to cyber-risk
Ivanti Zero-Days Exploited By Multiple Actors Globally
Volexity detects 1700 compromised Ivanti VPN devices following publication of two zero-days last week
A lightweight method to detect potential iOS malware
Analyzing Shutdown.log file as a lightweight method to detect indicators of infection with sophisticated iOS malware such as Pegasus, Reign and Predator.
New Year, New Scams – Health product scam campaigns abusing cheap TLDs
In recent months, we’ve noticed an increased number of high-volume health product campaigns that exploit cheap top-level domains (TLDs), reaching up to 60% of a TLD’s daily domain registrations.
This blog looks at current trends around health product scams and examines some of the TLDs providing domain names for these large campaigns.
Dragons’ Dens and Shark Tanks
Health product scams frequently take the form of fake news articles, often impersonating specific newspapers and featuring celebrity endorsements from well-known media figures who have supposedly used the products that are targeted. In this sense, they are similar to the cryptocurrency investment scams we’ve blogged about previously.
Recent scams impersonate organizations such as Fox News, the Daily Mail, The Today Show, and the New York Times, with the latest campaign of health product scams centered around products backed by the judges from the popular TV series Shark Tank (in the US) or Dragons’ Den (in the UK).
These articles then use affiliate links to direct users to landing pages that sell products, especially weight loss gummies that purport to induce ketosis, but also other products such as skincare creams, erectile dysfunction supplements, and teeth whitening kits.
The products (and even the landing pages selling them) may be legal. Still, fake news articles that lure victims to these sites frequently misrepresent the product with false claims and often profit from affiliate marketing. In fact, in the US, the Federal Trade Commission released a consumer warning following the Shark Tank campaigns, which leads with the headline ‘Did your favorite Shark Tank celebrity really endorse THAT? Probably not.’
We often see these types of scams advertised on social media platforms such as Facebook, where accounts have been compromised using credentials captured by a phishing website, similar to how LinusTechTips was …
Inferno Drainer Spoofs Over 100 Crypto Brands to Steal $80m+
Group-IB report lifts the lid on infamous crypto-drainer malware Inferno Drainer