Human nature is to seek simpler and convenient ways to do things. One example is the sometimes onerous task of typing a URL into a web browser’s address bar. Since users prefer short, easy-to-remember URLs, an internet trend is to use short domains for…
A New Skimmer Uses WebSockets and a Fake Credit Card Form to Steal Sensitive Data
A new skimmer attack was discovered this week, targeting various online e-commerce sites built with different frameworks. As I write this blog post, the attack is still active and exfiltrating data.
New Book! The Best of TaoSecurity Blog, Volume 3
Introduction I published a new book!The Best of TaoSecurity Blog, Volume 3: Current Events, Law, Wise People, History, and Appendices is the third title in the TaoSecurity Blog series. It’s in the Kindle Store, and if you have an Unlimi…
Discussing the Philippine Air Force’s Heavy Lift Helicopter Project as Russia wins with the Mil Mi-171 Hip
The Philippine Air Force (PAF) has embarked on the acquisition of Heavy Lift Helicopters as part of its 2nd List of Horizon 2 Phase projects. This project aims to provide the PAF with larger helicopters than what it currently has, to fit certain c…
My Path to Akamai
Three years ago, I graduated with a bachelor’s degree in Electronic Engineering (Mechatronic) from University Tun Hussein Onn Malaysia. I was to be an engineer in the oil and gas industry – but the universe had a better plan for me. Instead, I stepped …
Philippine Air Force to restart acquisition of Maritime Patrol Aircraft under the Long Range Patrol Aircraft Project
The Philippine Air Force (PAF) is preparing to re-introduce one of its long-forgotten projects, which it now plans to re-implement under Fiscal Year 2021.The PAF’s Long Range Patrol Aircraft (LRPA) Acquisition Project is originally a Horizon 1 phase pr…
Security and the One Percent: A Thought Exercise in Estimation and Consequences
There’s a good chance that if you’re reading this post, you’re the member of an exclusive club. I call it the security one percent, or the security 1% or #securityonepercent on Twitter. This is shorthand for the assortment of people and organizations w…
Phishing JavaScript Obfuscation Techniques Soars
In our previous blogs, first where we explained JavaScript Obfuscation techniques and introduced a detailed overview on how JavaScript is being used to obfuscate page content to make phishing attacks and other web scams as evasive as possible; followed…
Onboarding During A Pandemic: Can It Really Work? New Joiner, Lily Nguyen, Shares Her Experience.
I recently joined the Sales Development APAC team, looking after the Vietnam, Thailand and Hong Kong markets. I’d already had a great impression of Akamai’s culture from my interview rounds. But how would the onboarding work? I’d been looking forward t…
The Tale of Double JavaScript Obfuscated Scam
The phishing landscape is constantly evolving. Over the years, it has evolved into a more scalable threat, with an overwhelming amount of campaigns being launched daily. Phishing also changed when criminals started adding more capabilities and features…