Collaborate Disseminate
A new business email attack threat actor is using a stealth tactic to avoid giveaways of typical social engineering attacks. Learn the best defense for protecting your company.
The post New cybersecurity BEC attack mimics vendors appeared first on Tech… Continue reading New cybersecurity BEC attack mimics vendors
Just in time for the Christmas holiday, Emotet is sending the gift of Trickbot. Continue reading Emotet Returns to Hit 100K Mailboxes Per Day
Attackers are targeting Microsoft Office 365 users with a Coinbase-themed attack, aiming to take control of their inboxes via OAuth. Continue reading Office 365 OAuth Attack Targets Coinbase Users
Attackers check the victims’ Office 365 credentials in real time as they are typed into the phishing landing page, by using authentication APIs. Continue reading Office 365 Phishing Attack Leverages Real-Time Active Directory Validation
Researchers warn that Cosmic Lynx targets firms that don’t use DMARC and uses a “mergers and acquisitions” pretext that can lead to large sums of money being stolen. Continue reading First-Ever Russian BEC Gang, Cosmic Lynx, Uncovered
US states are being flooded by fraudulent unemployment applications in a scam run by a sophisticated cybergang. Continue reading Scammers target COVID-19 CARES Act relief scheme
Cybercriminals are hunting out victims’ Office 365 credentials — by dishing out Supreme court “summons” in a phishing attack. Continue reading Supreme Court Phish Targets Office 365 Credentials
BEC gangs like “Exaggerated Lion” are using tricky tactics – like exploiting G Suite – to scam companies out of millions. Continue reading BEC Gang Exploits G Suite, Long Domain Names in Cyberattacks
A recent phishing campaign used OneNote to distribute the Agent Tesla keylogger. Continue reading Microsoft OneNote Used To Sidestep Phishing Detection
Researchers warn XML macros embedded in SYLK files can sidestep Microsoft Office for Mac protections. Continue reading Office for Mac Users Warned of Malicious SYLK Files