Collaborate Disseminate
A pair of recent campaigns aim to lift credentials and other personal information under the guise of Amazon package-delivery notices. Continue reading Amazon-Themed Phishing Campaigns Swim Past Security Checks
Four sophisticated malware families are ramping up their techniques and actively spreading to new countries, including the U.S. Continue reading Brazil’s Banking Trojans Go Global
The software giant released patches for four critical vulnerabilities and five different platforms. Continue reading Adobe Discloses Critical Code-Execution Bugs in July Update
As colleges and universities prepare for the fall semester, email protections against surging threats like BEC and phishing are lagging. Continue reading DMARC Adoption Spikes, Higher Ed Remains Behind
Exploitation of the bug can allow an attacker to lift sensitive information, delete files, execute code, carry out sabotage and more. Continue reading Critical SAP Bug Allows Full Enterprise System Takeover
A data-stealing module in a recent sandboxed sample triggers browser-based fraud alerts for Trickbot victims — and shows something of the inner working of the malware’s operators. Continue reading TrickBot Sample Accidentally Warns Victims They’re Infected
A data-stealing module in a recent sandboxed sample triggers browser-based fraud alerts for Trickbot victims — and shows something of the inner working of the malware’s operators. Continue reading TrickBot Sample Accidentally Warns Victims They’re Infected
Traditional financial crime and cyberattacks are converging, requiring new skills and approaches to the problem, officials said. Continue reading Secret Service Creates Cyber Fraud Task Forces
Application-based attacks that use the passwordless “log in with…” feature common to cloud services are on the rise. Continue reading Microsoft Warns on OAuth Attacks Against Cloud App Users
Researchers said that the issue is only exploitable on Windows 7 and earlier. Continue reading Zoom Zero-Day Allows RCE, Patch on the Way