New Threat Actor Impersonates the Red Cross to Deliver Malware
Researchers at NSFOCUS are tracking a phishing campaign by a new threat actor called “AtlasCross” that’s impersonating the Red Cross in order to deliver malware.
phishing
The hidden costs of neglecting cybersecurity for small businesses
In this Help Net Security interview, Raffaele Mautone, CEO of Judy Security, talks about the cybersecurity problems that small businesses face and the need for prioritization to save businesses from potential fines and damage to their brand reputation….
New twist on ZeroFont phishing technique spotted in the wild
Cybercriminals are leveraging the ZeroFont technique to trick users into trusting phishing emails, SANS ISC handler Jan Kopriva has warned. The ZeroFont phishing attack Documented and named by Avanan in 2018, the ZeroFont technique involves using text …
Ukrainian Military Targeted in Sophisticated Phishing Attack Using Drone Manuals
Securonix is tracking a phishing campaign that’s targeting the Ukrainian military with malware-laden attachments posing as drone instruction manuals. The threat actor is using Microsoft help files (.chm) to deliver the malware.
QR codes in email phishing
Scammers are camouflaging phishing links with QR codes and distributing them through email.
Xenomorph Android Banking Trojan Targeting Users in US, Canada
The Xenomorph Android banking trojan can now mimic financial institutions in the US and Canada and is also targeting crypto wallets.
The post Xenomorph Android Banking Trojan Targeting Users in US, Canada appeared first on SecurityWeek.
New Wave of Hospitality Phishing Attacks: Compromise User Credentials, Then Go Phish
The hospitality sector is seeing a new wave of phishing attacks.
These new attacks are more plausible because they begin with compromised credentials and move to fraudulent emails sent from within a trusted network. The compromised systems ar…
[NEW RELEASE]: Unleash the Power of Cybersecurity Education with KnowBe4’s ‘Hack-A-Cat’ on Roblox
What do cheese, fish and cybersecurity training have in common? Each of these comes together to help keep kids informed about cyber threats and cybersecurity best practices with KnowBe4’s first ever entry into the Roblox gaming platform…
Cybercriminals Use Google Looker Studio to Host Crypto Scam to Steal Money and Credentials
Security researchers at Check Point have discovered yet another attack that leverages legitimate web applications to host attacks in order to bypass security scanners.
MFA Defenses Fall Victim to New Phishing-As-A-Service Offerings
ZeroFox warns that phishing-as-a-service (PhaaS) offerings are increasingly including features to bypass multi-factor authentication.