New data highlights just how dangerous Business Email Compromise attacks are. Business Email Compromise (BEC) attacks often don’t get the press they require; these attacks utilize a heavy dose of social engineering to spoof company email accounts and impersonate individuals…
Coordinated efforts between law enforcement agencies across nine countries has resulted in a major disruption of a threat group’s malware and ransomware operations. Operation Endgame has been responsible for the takedown of those behind a massive Emotet cyber attack in…
More than a quarter (26%) of organizations around the world provide no security awareness training for their employees, according to a survey by Hornetsecurity. The researchers found that smaller companies in particular tend to lack security training programs. “This significant…
As email compromise attacks increase, analysis of tactics provides context on how organizations need to evolve their defenses. Kroll’s Q1 2024 Cyber Threat Landscape Report covers the analysis of a wide range of threats and data covering the last three quarters shows…
Researchers at Recorded Future warn that BlueDelta, a threat actor tied to Russia’s GRU, is launching spear phishing attacks against European defense and transportation entities. The threat actor is abusing legitimate services to avoid detection, and some of its phishing…
Threat actors are abusing cloud storage platforms to host phishing sites that can more easily evade detection by security scanners, according to researchers at Enea. Criminals are exploiting numerous cloud services, including Google Cloud, AWS, IBM Cloud, and others. “Cybercriminals…
