eSecurity Planet

AUGUST 16, 2021

A phishing campaign that Microsoft security researchers have been tracking for about a year highlights not only the ongoing success of social engineering efforts by hackers to compromise systems, but also the extent to which the bad actors will go to cover their tracks while stealing user credentials. Whitelisting vs. Blacklisting.

Phishing 109

Phishing Passwords Encryption Cloud 109

Security Affairs

MAY 10, 2022

“Frappo” acts as a Phishing-as-a-Service and enables cybercriminals the ability to host and generate high-quality phishing pages which impersonate major online banking, e-commerce, popular retailers, and online-services to steal customer data. The last update of the service was registered May 1, 2022.

Phishing 71

Phishing Retail Financial Services Data breaches 71

Security Affairs

JANUARY 5, 2020

DeathRansom was considered fake ransomware due to the fact that it did not implement an effective encryption process, but now things are changing. DeathRansom is a ransomware family that was initially classified as a joke because it did not implement an effective encryption scheme. ” continues the report. Pierluigi Paganini.

Encryption 63

Encryption Ransomware IT Phishing 63

Security Affairs

MARCH 25, 2024

The infection chain was continuously updated, current StrelaStealer version is distributed via spear phishing emails containing a ZIP file attachment. “The JScript file then drops a Base64-encrypted file and a batch file. Upon downloading and opening the archive, a JScript file is dropped onto the system.

Encryption 95

Encryption Manufacturing Archiving Phishing 95

Security Affairs

APRIL 9, 2024

Fortinet researchers observed a threat actor sending out a phishing email containing malicious Scalable Vector Graphics (SVG) files. The developers used AES encryption and implemented techniques to bypass the anti-malware scan interface (AMSI). ” concludes the report that also includes indicators of compromise (IoCs).

Phishing 88

Phishing Sales Encryption Cybersecurity 88

Security Affairs

NOVEMBER 18, 2020

” reads the analysis published by Cybereason. The kill chain starts with phishing messages that use a.docx file that once is opened triggers a template injection attack. Experts observed several variants over the recent months, it authors have improved encryption and implemented new functionality of the final Node.js

Phishing 110

Phishing Mining Libraries Encryption 110

The Last Watchdog

FEBRUARY 20, 2024

Health care relies on it for intelligent symptom analysis and health information dissemination. Malicious intent or manipulation: AI chatbots can be exploited to spread misinformation, execute social engineering attacks or launch phishing. Customer support experiences a boost with its ability to understand complex queries.

Cybersecurity 218

Cybersecurity Authentication Communications Privacy 218

Security Affairs

MARCH 9, 2023

In an attack observed by the experts, the ransomware successfully encrypted a CentOS host running a vulnerable version of IBM Aspera Faspex file server software. The ransomware encrypts files and appends the “.ifire” IceFire doesn’t encrypt the files with “.sh” IceFire doesn’t encrypt the files with “.sh”

Ransomware 89

Ransomware Encryption Phishing IT 89

Security Affairs

JULY 8, 2019

Experts observed an increase of the malware spreading using less-known archive types as dropper,in particular ISO image.Delphi wrapper makes analysis harder. Technical Analysis. Phishing email content. As expected, the malicious payload is stored in the resource section in encrypted way (probably using a simple XOR-encryption).

File names 66

File names Encryption Archiving Phishing 66

Security Affairs

OCTOBER 20, 2021

A Cookie Theft malware was employed in phishing attacks against YouTube creators, Google’s Threat Analysis Group (TAG) warns. Financially motivated threat actors are using Cookie Theft malware in phishing attacks against YouTube creators since late 2019. ” reads the analysis published by Google TAG.

Phishing 121

Phishing Archiving Encryption Authentication 121

Security Affairs

OCTOBER 20, 2022

The experts believe the backdoor is distributed as a part of a spear phishing campaign conducted by a sophisticated threat actor. ” reads the analysis published by SafeBreach. The command is encrypted using AES-256 CBC. The analysis of the ID count revealed that the attackers C2 have compromised a total of 70 computers.

Encryption 138

Encryption Cybersecurity Phishing IT 138

eSecurity Planet

JUNE 16, 2022

Cyber criminals may damage, destroy, steal, encrypt, expose, or leak data as well as cause harm to a system. Encrypted threats spiked 167%, ransomware increased 105%, and 5.4 In May, cybersecurity researchers revealed that ransomware attacks are increasing their aggressive approach by destroying data instead of encrypting it.

Ransomware 140

Ransomware Cybersecurity Phishing Encryption 140

eSecurity Planet

OCTOBER 3, 2022

The spear phishing campaigns have targeted engineers and technical support operators, and the cybercriminals have pretended to be IT recruiters. Then they moved the conversation away from the platform to encrypted messaging apps like WhatsApp. They used LinkedIn to connect with the victims and gain their trust.

IT 116

IT Phishing Encryption Archiving 116

Security Affairs

MARCH 13, 2023

The KamiKakaBot malware spreads via phishing emails that contain a malicious ISO file as an attachment. “The ISO file also contains a decoy Word document that has an XOR-encrypted section. ” reads the analysis published by EclecticIQ. dll), and a decoy Microsoft Word document. . ” concludes the report.

Phishing 75

Phishing Encryption Military Government 75

Security Affairs

APRIL 30, 2021

The state-sponsored hackers sent spear-phishing messages to a general director working at the Rubin Design Bureau , in Saint Petersburg, which is one of three main Russian centers of submarine design. The spear-phishing messages used a malicious Rich Text File (RTF) document that included descriptions of an autonomous underwater vehicle. .

Phishing 125

Phishing Encryption Security IT 125

Security Affairs

OCTOBER 13, 2023

The threat actors leverage spear-phishing emails to deliver archive files utilizing DLL side-loading schemes. ” reads the analysis published by Checkpoint. shell – Sends the computer name in a JSON format encrypted with simple XOR encryption and base64 encoded to the C2.

Government 97

Government IT Encryption Libraries 97

Security Affairs

JUNE 4, 2023

Xplain hack impacted the Swiss cantonal police and Fedpol Zyxel published guidance for protecting devices from ongoing attacks Kimsuky APT poses as journalists and broadcast writers in its attacks New Linux Ransomware BlackSuit is similar to Royal ransomware CISA adds Progress MOVEit Transfer zero-day to its Known Exploited Vulnerabilities catalog (..)

Security 86

Security Ransomware Phishing Authentication 86

IT Governance

AUGUST 17, 2018

In this blog, we’ll consider situational analysis, how to assess what’s happening in the school and how to support staff to protect the data in their care. Situational analysis – understand what’s happening now. Introduce device encryption. Training also teaches staff to identify common threats such as phishing emails.

GDPR 56

GDPR Encryption Data breaches Compliance 56

Threatpost

OCTOBER 19, 2020

Researchers said the group was able to move from initial phish to full domain-wide encryption in just five hours.

Phishing 115

Phishing Encryption Ransomware Security 115

Security Affairs

JULY 11, 2022

A large-scale phishing campaign leveraging the Anubis Network is targeting Brazil and Portugal since March 2022. A large-scale phishing campaign is targeting Internet-end users in Brazil and Portugal since March 2022. Figure 1: High-level diagram of the ANUBIS phishing network and its components (2020). The Phishing template.

Phishing 99

Phishing Access Information Security Encryption 99

eSecurity Planet

APRIL 12, 2024

Conduct content analysis to improve safety measures. Customize training materials to address these specific concerns, including data handling protocols, password management , and phishing attempt identification. Encrypt data at rest with encryption algorithms and secure storage techniques.

Encryption 92

Encryption Risk Data breaches Access 92

Security Affairs

MAY 29, 2020

Hackers targeted suppliers of equipment and software for industrial enterprises with spear-phishing messages using malicious Microsoft Office documents. Attackers used PowerShell scripts, as well as various techniques to evade the detection and avoid the analysis of the malware. ” continues the analysis.

Phishing 132

Phishing Encryption Authentication IT 132

Security Affairs

MARCH 21, 2020

Day after day the number of Coronavirus-themed attacks increases, fraudsters have launched a phishing campaign to deliver keyloggers on users’ PC. Experts from IBM X-Force have uncovered a new Coronavirus-themed phishing campaign aimed at delivering keyloggers on users’ PC. ” continues the analysis.

Phishing 105

Phishing Archiving Encryption IT 105

Security Affairs

MAY 15, 2023

” reads the analysis published by Symantec. The instances of the Merdoor backdoor analyzed by the researchers only differ for the embedded and encrypted configuration, which includes C2 communication method, service details, and the installation directory. pak) containing final payload (Merdoor backdoor).

Encryption 82

Encryption Phishing Communications Education 82

Security Affairs

APRIL 14, 2020

PaloAlto Networks experts warn of malicious Coronavirus themed phishing campaigns targeting government and medical organizations. The attacks against the Canadian healthcare organizations were discovered between March 24 and March 26, they started with coronavirus -themed phishing campaigns that were carried out in the last months.

Ransomware 112

Ransomware Phishing File names Encryption 112

Security Affairs

DECEMBER 25, 2021

The attack chain starts with phishing messages, experts also reported attacks leveraging third-party framework, such as Cobalt Strike, to drop the malware. Upon execution, the Rook ransomware attempts to terminate processes related to security software or other application that could interfere with the encryption process.

Ransomware 111

Ransomware Encryption Phishing Security 111

eSecurity Planet

NOVEMBER 10, 2023

To help clarify DNSSEC, we will explore both the DNSSEC features and benefits and compare it against DNS Security, DNS Crypt, and Encrypted DNS. DNSSEC adds data origin authentication and data integrity protection through the publishing of public encryption keys along with the IP address and URL directory.

Security 92

Security Encryption Authentication Communications 92

Security Affairs

APRIL 2, 2019

Hacked websites were used for several malicious purposes, experts observed compromised WordPress and Joomla websites serving Shade /Troldesh ransomware, coin miners, backdoors, and some times were involved in phishing campaigns. ” reads the analysis from Zscaler. WordPress sites compromised by hackers were running versions 4.8.9

CMS 106

CMS Phishing Ransomware File names 106

Security Affairs

MARCH 14, 2022

Although there are no significant differences and sophistication in contrast to other well-known trojans such as Maxtrilha , URSA , and Javali , an analysis of the artifacts and IOCs obtained from this campaign is presented below. The trojan has been disseminated via phishing templates impersonating Tax services in Portugal.

Encryption 85

Encryption Phishing Communications IT 85

Security Affairs

MARCH 18, 2023

Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the Multi-State Information Sharing & Analysis Center (MS-ISAC) released a joint advisory that provides indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) associated with the notorious LockBit 3.0

Ransomware 80

Ransomware Encryption Passwords Cybersecurity 80

Security Affairs

SEPTEMBER 12, 2021

A new banking trojan dubbed maxtrilha (due to its encryption key) has been discovered in the last few days and targeting customers of European and South American banks. The campaign has been leveraged by Brazilian criminals’ gangue, who use customized phishing templates to spread the trojan maxtrilha according to the target country.

Communications 118

Communications Phishing Encryption Access 118

Security Affairs

SEPTEMBER 15, 2019

Researchers at Cofense have uncovered a phishing campaign targeting Brazilian citizens with the Astaroth Trojan that uses Facebook and YouTube in the infection process. The attach chain appears to be very complex and starts with phishing messages that come with an.htm file attached. ” reads the analysis published by Cofense.”

Phishing 81

Phishing Encryption Archiving Security 81

Security Affairs

JULY 8, 2023

The spear-phishing message appears as a benign conversation lure masquerading as a senior fellow with the Royal United Services Institute (RUSI) to the public media contact for a nuclear security expert at a US-based think tank focused on foreign affairs. ” reads the analysis published by Proofpoint.

Archiving 92

Archiving Cloud File names Metadata 92

Security Affairs

AUGUST 31, 2022

The phishing emails contain a Microsoft Office attachment that includes an external reference in its metadata which downloads a malicious template file. ” reads the analysis published by the experts. The binary employs multiple obfuscation techniques to avoid detection and make analysis hard. ” continues the report.

Metadata 81

Metadata Phishing Encryption IT 81

eSecurity Planet

AUGUST 8, 2022

Without the more restrictive enforcement policy, organizations place an unnecessary burden on email security applications and increase the likelihood of a phishing attack successfully impersonating a brand. Barracuda notes that attackers use brand impersonation in more than 80% of spear-phishing attacks. What is DMARC? What is SPF?

IT 109

IT Phishing Authentication Encryption 109

eSecurity Planet

AUGUST 9, 2022

M]uch of InfoSec management falls back on employee training and avoiding employee error – particularly with respect to phishing , spear phishing, and encryption lapses.”. A] lot of companies [still] do the compliance auditing and analysis piece manually,” said Luria. The result is arguably a perverse jumble of priorities.

Data Privacy 141

Data Privacy Compliance Privacy Security 141

Security Affairs

SEPTEMBER 23, 2020

The operators use a suite of custom tools with the ultimate goal of encrypting files in the infected system and holding it for a ransom of about $50,000. As the initial vector of their attacks, OldGremlin use spear phishing emails, to which the group adopted creative approach. Up-to-date phishing. Unsought invoice.

Ransomware 96

Ransomware Phishing Encryption Authentication 96