Black Basta Ransomware Evolves with Email Bombing, QR Codes, and Social Engineering The threat actors linked to the Black Basta ransomware have been observed switching up their social engineering tactics, distributing a different set of payloads such as Zbot and DarkGate since early October 2024. “Users within the target environment Read more…
Hackers Use Corrupted ZIPs and Office Docs to Evade Antivirus and Email Defenses Cybersecurity researchers have called attention to a novel phishing campaign that leverages corrupted Microsoft Office documents and ZIP archives as a way to bypass email defenses. “The ongoing attack evades #antivirus software, prevents uploads to sandboxes, and Read more…
North Korean Kimsuky Hackers Use Russian Email Addresses for Credential Theft Attacks The North Korea-aligned threat actor known as Kimsuky has been linked to a series of phishing attacks that involve sending email messages that originate from Russian sender addresses to ultimately conduct credential theft. “Phishing emails were sent mainly Read more…
New Phishing Tool GoIssue Targets GitHub Developers in Bulk Email Campaigns Cybersecurity researchers are calling attention to a new sophisticated tool called GoIssue that can be used to send phishing messages at scale targeting GitHub users. The program, first marketed by a threat actor named cyberdluffy (aka Cyber D’ Luffy) Read more…
Microsoft Detects Growing Use of File Hosting Services in Business Email Compromise Attacks Oct 09, 2024Ravie LakshmananEnterprise Security / Identity Theft Microsoft is warning of cyber attack campaigns that abuse legitimate file hosting services such as SharePoint, OneDrive, and Dropbox that are widely used in enterprise environments as a defense Read more…
Dancho Danchev’s Blog – Mind Streams of Information Security Knowledge: Personally Identifiable Email Address Accounts Known to Have Been Involved in Cybercrime Campaigns in 2009 The following is a list of personally identifiable email address accounts that are known to have been involved in cybercrime campaigns in 2009. Read more…
U.S. Sentences 31-Year-Old to 10 Years for Laundering $4.5M in Email Scams The U.S. Department of Justice (DoJ) has sentenced a 31-year-old to 10 years in prison for laundering more than $4.5 million through business email compromise (BEC) schemes and romance scams. Malachi Mullings, 31, of Sandy Springs, Georgia pleaded Read more…
Ukraine Arrests Trio for Hijacking Over 100 Million Email and Instagram Accounts The Cyber Police of Ukraine has arrested three individuals on suspicion of hijacking more than 100 million emails and Instagram accounts from users across the world. The suspects, aged between 20 and 40, are said to be part of an Read more…
Alert: CISA Warns of Active 'Roundcube' Email Attacks – Patch Now The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a medium-severity security flaw impacting Roundcube email software to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The issue, tracked as CVE-2023-43770 (CVSS score: 6.1), relates to a Read more…
New Agent Tesla Malware Variant Using ZPAQ Compression in Email Attacks Nov 21, 2023NewsroomMalware Threat / Data Privacy A new variant of the Agent Tesla malware has been observed delivered via a lure file with the ZPAQ compression format to harvest data from several email clients and nearly 40 web Read more…