Phishing Campaign Used Subpoena-Themed Email to Deliver Infostealer

Digital fraudsters launched a new phishing campaign that used subpoena-themed emails to deliver information-stealing malware. Detected by Cofense, the campaign targeted employees of insurance and retail companies with phishing emails informing them tha… Continue reading Phishing Campaign Used Subpoena-Themed Email to Deliver Infostealer

BEC Scam Swindled Media Conglomerate Nikkei out of $29 Million

Nikkei Inc. recently fell victim to a business email compromise (BEC) scam that cost the Japanese media conglomerate $29 million. In a statement released on October 30, the company revealed that an employee at Nikkei America based in New York City fell… Continue reading BEC Scam Swindled Media Conglomerate Nikkei out of $29 Million

Man Admits Role in Identity Theft Plot that Targeted U.S. Military Persons

A man has pleaded guilty to participating in an identity theft and fraud scheme that targeted U.S. servicemembers and veterans. On October 29, Fredrick Brown, 38, of Las Vegas, Nevada pleaded guilty to one count of conspiracy to commit wire fraud and o… Continue reading Man Admits Role in Identity Theft Plot that Targeted U.S. Military Persons

Fancy Bear Targeting Anti-Doping Organizations Ahead of 2020 Olympic Games

Fancy Bear has begun targeting anti-doping authorities and sporting organizations ahead of the 2020 Summer Olympic Games. On October 28, the Microsoft Threat Intelligence Center revealed that it had identified at least 16 national and international org… Continue reading Fancy Bear Targeting Anti-Doping Organizations Ahead of 2020 Olympic Games

Court Cases Affected by TrialWorks Ransomware Incident

A ransomware incident at TrialWorks forced at least two law firms to request deadline extensions for some of their court cases. JML Law, APLC requested an extension of 18 days to submit documents pertaining to one of its cases. According to court files… Continue reading Court Cases Affected by TrialWorks Ransomware Incident

Scammer Stole $500K from Ocala, FL in Spear Phishing Attack

A scammer stole a little more than $500,000 from the City of Ocala, Florida as the result of a successful spear phishing attack. According to Ocala.com, an Ocala employee fell for a spear-phishing attack, one of the most common variants of phishing cam… Continue reading Scammer Stole $500K from Ocala, FL in Spear Phishing Attack

Jackson Health System Fined $2.15M for HIPAA Violations

Jackson Health System (JHS) paid a civil money penalty of $2.15 million after having violated some of HIPAA’s provisions. The case dates back to August 2013 when JHS submitted a breach report to the Office for Civil Rights (OCR) at the U.S. Depar… Continue reading Jackson Health System Fined $2.15M for HIPAA Violations

Malspam Campaign Targeted German Organizations with Buran Ransomware

Researchers spotted a malspam campaign that targeted German organizations with samples of the Buran crypto-ransomware family. In early October, Bromium observed a malspam campaign whose emails impersonated online fax service eFax. The emails contained … Continue reading Malspam Campaign Targeted German Organizations with Buran Ransomware

Graboid Cryptojacking Worm Has Struck Over 2K Unsecured Docker Hosts

Researchers discovered a new cryptojacking worm called “Graboid” that has spread to more than 2,000 unsecured Docker hosts. In its research, Palo Alto Networks’ Unit 42 team noted that it’s the first time it’s discovered a… Continue reading Graboid Cryptojacking Worm Has Struck Over 2K Unsecured Docker Hosts

Critical Security Vulnerability Disclosed in iTerm2 App

A critical vulnerability has been discovered in the popular iTerm2 application, an open source terminal emulator program designed to replace the default Apple Terminal in macOS. iTerm2 often finds its way into lists of some of the best software to inst… Continue reading Critical Security Vulnerability Disclosed in iTerm2 App