Collaborate Disseminate
A new phishing campaign is targeting members of Financial Industry Regulatory Authority (FINRA), with emails purporting to be from FINRA officers. The goal is to obtain the members’ user names and passwords for Microsoft Office or SharePoint. Hac… Continue reading Phishing Campaign Targets FINRA in Search for Microsoft Office or SharePoint Credentials
Investment brokers are the target of a new wave of socially engineered phishing attacks, warns FINRA. Continue reading Attackers Claim Identity of Financial NGO to Steal Sharepoint, Office Credentials
The DHS is urging users to secure Office 365 accounts after reporting security weaknesses in Microsoft’s online productivity service. Continue reading COVID-19 prompts DHS warning to review Office 365 security
The “PerSwaysion” attackers have leveraged a plethora of Microsoft services to compromise at least 150 executives in a highly targeted phishing campaign. Continue reading Microsoft Sway Abused in Office 365 Phishing Attack
Microsoft today announced a slew of updates to various parts of its Microsoft 365 ecosystem. A lot of these aren’t all that exciting (though that obviously depends on your level of enthusiasm for products like Microsoft Endpoint Manager), but the overall thrust behind this update is to make life easier for the IT admins that […] Continue reading Microsoft makes it easier to get started with Windows Virtual Desktops
You might not have heard of FBX files… but the latest Office versions support them, so don’t neglect this patch! Continue reading Patch now! Microsoft issues unexpected Office fix
The flaws exist in Autodesk’s FBX library, integrated in Microsoft’s Office, Office 365 ProPlus and Paint 3D applications. Continue reading Microsoft Issues Out-Of-Band Security Update For Office, Paint 3D
XLS files sent via emails appear password protected but aren’t, opening automatically to install malware from compromised macros, according to researchers. Continue reading Hackers Update Age-Old Excel 4.0 Macro Attack
An old RAT learns an old trick. Continue reading 8-Year-Old VelvetSweatshop Bug Resurrected in LimeRAT Campaign
The renewed Zeus Sphinx activity that IBM X-Force is seeing features a modified variant targeting online banking users in North America and Australia through the use of maldocs themed around COVID-19.
The post Zeus Sphinx Trojan Awakens Amidst Coronavirus Spam Frenzy appeared first on Security Intelligence.
Continue reading Zeus Sphinx Trojan Awakens Amidst Coronavirus Spam Frenzy