Dussman Group Subsidiary Struck by Ransomware that Leaked Its Data

A subsidiary of the Dussman Group suffered a ransomware infection in which malicious actors stole and publicly leaked its data. As reported by Bleeping Computer, the operators of Nefilim ransomware made good on a promise made back in March to begin pub… Continue reading Dussman Group Subsidiary Struck by Ransomware that Leaked Its Data

Phishers Using Fake Sharepoint Messages to Target Office 365 Details

Phishers leveraged fake automated messages from collaborative platform Sharepoint as a means to target users’ Office 365 credentials. Abnormal Security found that the phishing campaign began with an attack email that appeared to be an automated m… Continue reading Phishers Using Fake Sharepoint Messages to Target Office 365 Details

CISA, NSA Lay Out Recommendations for Protecting OT Assets

The Cybersecurity & Infrastructure Security Agency (CISA) and the National Security Agency (NSA) laid out a series of recommendations for critical infrastructure owners and operators to protect their operational technology (OT) assets. In an alert … Continue reading CISA, NSA Lay Out Recommendations for Protecting OT Assets

Multi-Platform Malware Framework ‘MATA’ Claimed Victims Worldwide

Security researchers discovered a multi-platform malware framework called “MATA” that had succeeded in targeting victims worldwide. On Securelist, Kaspersky Lab revealed that it had shared its discovery of MATA with its Threat Intelligence … Continue reading Multi-Platform Malware Framework ‘MATA’ Claimed Victims Worldwide

Assisted Living Services Provider Discloses Data Security Incident

An assisted living services provider in Maryland revealed a data security incident in which attackers encrypted some of its information. In an update posted to its website, Lorien Health Services revealed that the security incident had occurred back on… Continue reading Assisted Living Services Provider Discloses Data Security Incident

Cloud Services Abused by Clever Phishing Campaign

Security researchers detected a clever new phishing campaign that abused three enterprise cloud services in an attempt to steal victims’ credentials. On July 18, Bleeping Computer revealed that the phishing campaign’s attack emails claimed … Continue reading Cloud Services Abused by Clever Phishing Campaign

Los Angeles Man Arrested, Charged with PPP Loan Fraud

U.S. law enforcement arrested and charged a man with fraudulently obtaining loans via the Paycheck Protection Program (PPP). On July 16, Acting Assistant Attorney General Brian C. Rabbitt of the Justice Department’s Criminal Division and U.S. Att… Continue reading Los Angeles Man Arrested, Charged with PPP Loan Fraud

BlackRock Android Banking Malware Targeting 337 Mobile Apps

Security researchers discovered a new Android banking malware family called “BlackRock” that targets 337 mobile applications. ThreatFabric found that BlackRock hid its icon when it first launched itself on a mobile device. It then posed as … Continue reading BlackRock Android Banking Malware Targeting 337 Mobile Apps

Man Gets Prison Time for Identity Theft Scheme Targeting Veterans

A man received prison time for helping to conduct an identity theft and fraud scheme that targeted thousands of veterans and U.S. service members. On July 9, the Office of Public Affairs at the U.S. Department of Justice announced that Chief U.S. Distr… Continue reading Man Gets Prison Time for Identity Theft Scheme Targeting Veterans

5 Risks You Need to Remember When Securing Your Containers

Containers are on the rise. As reported by GlobalNewswire, Allied Market Research estimated that the application market would grow from its 2016 value of $698 million to $8.20 by 2025. With a compound annual growth rate of 31.8% between 2018 and 2025, … Continue reading 5 Risks You Need to Remember When Securing Your Containers