Collaborate Disseminate
Grayfly campaigns have launched the novel malware against businesses in Taiwan, Vietnam, the US and Mexico and are targeting Exchange and MySQL servers. Continue reading SideWalk Backdoor Linked to China-Linked Spy Group ‘Grayfly’
There are a lot of "tells" that the ransomware group doesn’t understand how negotiators work, despite threatening to dox data if victims call for help. Continue reading What Ragnar Locker Got Wrong About Ransomware Negotiators – Podcast
The attackers are indiscriminately striking thousands of victims worldwide with their new “Chimaera” campaign. Continue reading TeamTNT’s New Tools Target Multiple OS
Investigators/the FBI/ransomware negotiators just screw everything up, the ransomware gang said, threatening to publish files if victims look for help. Continue reading Ragnar Locker Gang Warns Victims Not to Call the FBI
The privacy-touting, end-to-end encrypted email provider erased its site’s “we don’t log your IP” boast after France sicced Swiss cops on it. Continue reading ProtonMail Forced to Log IP Address of French Activist
Verizon DBIR is already funny, useful & well-written, and it just got better with mapping to MITRE ATT&CK TTPs. The marriage could finally bring answers to “What are we doing right?” instead of the constant reminders of what’s not working in fe… Continue reading Holy Grail of Security: Answers to ‘Did XYZ Work?’ – Podcast
The FTC’s first spyware ban nixes a company whose “slipshod” security practices led to exposure of thousands of victims’ illegally collected personal data.
Continue reading SpyFone & CEO Banned From Stalkerware Biz
There’s proof-of-concept code out for the near-maximum critical – rated at 9.8 – authentication bypass bug, but Cisco hasn’t seen any malicious exploit yet. Continue reading Cisco Patches Critical Authentication Bug With Public Exploit
The ransomware gang claims to have pulled off successful attacks against two airlines and one airport with help from its Accenture attack. Continue reading LockBit Jumps Its Own Countdown, Publishes Bangkok Air Files
Cybercrooks are posting help-wanted ads on dark web forums, promising to do the technical work of compromising email accounts but looking for native English speakers to carry out the social-engineering part of these lucrative scams. Continue reading BEC Scammers Seek Native English Speakers on Underground