Discovering and Hacking IoT Devices Using Web-Based Attacks

DNS rebinding attacks have been the topic of ongoing discussion for twenty years. Despite their efforts, browser vendors still can’t find a stable defence against these attacks. They were reported to have been be fixed eight years ago. However, t… Continue reading Discovering and Hacking IoT Devices Using Web-Based Attacks

Basic phishing emails are so effective that most hackers don’t use exploit kits anymore

Hackers overwhelmingly prefer to target email accounts as their entry point into organizations now, and it’s causing a massive drop in exploit kit usage, according to new research conducted by Symantec. The findings underscore a significant and recent transformation in the way that attackers generally seek to compromise systems; a trend that’s greatly accelerated over the last 12 months, Symantec found. “Malicious activity from exploit kits dropped by 60 percent in 2016, with our research indicating that attackers are now favoring email as a primary infection vector,” Symantec’s 2017 Internet Security Threat Report reads. “[Conversely,] email malware rates increased in 2016, from 1 in 220 emails to 1 in 131 emails” — a statistic largely driven by bot nets dispensing ransomware, said Bill Wright, director of government affairs for Symantec. The change has resulted in a reliance on what Symantec calls “living off the land” tactics. This translates into hackers […]

The post Basic phishing emails are so effective that most hackers don’t use exploit kits anymore appeared first on Cyberscoop.

Continue reading Basic phishing emails are so effective that most hackers don’t use exploit kits anymore