The use of employees as insider accomplices potentially changes how social engineering is being used in exchange for a direct request for internal assistance. Security researchers at Abnormal Security have identified a recent set of emails soliciting employees of a…
In what appears to be a phishing attack that includes a mix of emails and phone calls, Microsoft reminds us to be wary of only opening emails and attachments from known contacts. Perhaps taking a page from the recent Amazon-themed…
A researcher has disclosed details of a clever UPS phishing campaign which utilised an XSS vulnerability in UPS.com to push fake and malicious 'Invoice' Word documents. The threat actor has used the XSS vulnerability in UPS.com to modify the site's…
Cybercriminals appear to be more aggressive with their idealistic ransom demands as some gangs continue to evolve, using new “quadruple extortion” tactics to ensure payment. In security vendor Palo Alto Network’s recent Unit 42 Ransomware Threat Report, 1H 2021 Update,…
With no slowdown of cyber attacks in sight, global incident volumes continue to trend upward, according to new data from Accenture’s Cyber Investigations, Forensics and Response team. The pandemic created the perfect storm for cybercriminals – shifts to remote working,…
Anyone can create a job listing on the leading recruitment platform LinkedIn on behalf of just about any employer—no verification needed. And worse, the employer cannot easily take these down. Now, that might be nothing new, but the feature and lax…
