Author Archives: David Bisson

Shadow Brokers’ Swan Song: A Sale of Hacking Tools for Windows

Posted on by

The digital world is riddled with threat actors of which we know very little. Some of these mysterious agents launch one or two modest attacks and peter out soon after crawling their way into existence. Others last a bit longer, raising hubbub and gaining notoriety in the process. Not a lot of actors make it […]… Read More

The post Shadow Brokers’ Swan Song: A Sale of Hacking Tools for Windows appeared first on The State of Security.

Continue reading Shadow Brokers’ Swan Song: A Sale of Hacking Tools for Windows→

Email Campaign Uses Fake Silverlight Update to Install Keylogger

Posted on by

A targeted email campaign used a fake Microsoft Silverlight update to trick users into installing a keylogger onto their computers. Overall, the attack campaign consisted of only a few malicious emails sent to employees at a major financial services provider. Each email bore a Microsoft Office document as an attachment–an attack vector seen in other […]… Read More

The post Email Campaign Uses Fake Silverlight Update to Install Keylogger appeared first on The State of Security.

Continue reading Email Campaign Uses Fake Silverlight Update to Install Keylogger→

Second Wave of Shamoon 2: Disttrack Can Now Wipe Organizations’ VDI Snapshots

Posted on by

On November 17, 2016, the security community witnessed the resurgence of a familiar enemy. That’s the day when Shamoon 2, the successor of an attack campaign which first emerged in 2012, delivered Disttrack wiper malware to an organization based in Saudi Arabia. True to its design, Disttrack spread through the company’s network and overwrote the […]… Read More

The post Second Wave of Shamoon 2: Disttrack Can Now Wipe Organizations’ VDI Snapshots appeared first on The State of Security.

Continue reading Second Wave of Shamoon 2: Disttrack Can Now Wipe Organizations’ VDI Snapshots→

Amazon Scammers Using Fake Payment Sites to Steal Buyers’ Money

Posted on by

Scammers are using fake Amazon payment sites to steal money from customers lured in by unbeatable deals. Comparitech, a website which offers consumer advice on topics relating to technology and information security, recently investigated one such fraudster. The fake seller goes by the name Sc-Elegance. They have a reputation for selling expensive televisions and cameras […]… Read More

The post Amazon Scammers Using Fake Payment Sites to Steal Buyers’ Money appeared first on The State of Security.

Continue reading Amazon Scammers Using Fake Payment Sites to Steal Buyers’ Money→

Spora Ransomware Equipped with Sophisticated Encryption, Payment Site

Posted on by

A new ransomware family called Spora comes outfitted with a sophisticated encryption scheme and a professionally designed payment portal. Spora, which is Russian for the word “spore,” relies on fake invoice emails for distribution. The emails bear ZIP files containing HTML Application (HTA) files as attachments. But users might not realize it. That’s because the […]… Read More

The post Spora Ransomware Equipped with Sophisticated Encryption, Payment Site appeared first on The State of Security.

Continue reading Spora Ransomware Equipped with Sophisticated Encryption, Payment Site→

The Top 13 Information Security Conferences of 2017

Posted on by

2017 is finally here. You know what that means: another information security conference season is upon us. We couldn’t be more excited! Just like we did last year, we at The State of Security have assembled a list of the top 13 conferences in information security for 2017. We hope you’ll have the chance to […]… Read More

The post The Top 13 Information Security Conferences of 2017 appeared first on The State of Security.

Continue reading The Top 13 Information Security Conferences of 2017→