A recent study presented at the USENIX SOUPS security conference has confirmed what many security experts have suspected for years: phishing awareness training wears off quickly. Academics from multiple German universities leveraged laws mandating phishing awareness training to study how effective that training truly is. The researchers tested a group of public sector employees at […]
Earlier this month, Microsoft met backlash for adding a new “-DownloadFile” command line option to Windows Defender, enabling anyone with some level of access to the system to download files using a trusted application to potentially evade detection. Almost as quickly as it appeared without warning, as of version 4.18.2009.2-0 this feature has been quietly […]
The team at Avast has recently discovered a new campaign that infects a victim’s computer with a crypto miner after downloading an illegitimate version of the popular Malwarebytes anti-malware program. The cybercriminals behind this attack have repackaged the fake installer to include a backdoor that includes the Monero Miner and remains open to the attackers […]
Hackers have been increasingly sending emails that instruct readers to install urgent Windows OS updates. The emails trick readers into installing the “latest” Windows updates, which are actually ransomware ‘.exe’ files in disguise. The ransomware contained in these emails is known as “Cyborg”. It encrypts all of your files and programs and demands a ransom payment to un-encrypt the […]
Lazarus Group: The North Korean Hacking Bureau 121 division, commonly known as the Lazarus Group or the Bluenoroff Group, has recently targeted a cryptocurrency exchange according to researchers at F-Secure. The name of the targeted exchange was not released. Lazarus used the human element in their most recent attack by sending a malicious document to […]
Ransomware is malware which encrypts your files until you pay a ransom to the hackers. “Clop” is one of the latest and most dangerous ransomware threats. It’s a variant of the well-known CryptoMix ransomware, which frequently targets Windows users. Before beginning the encryption process, the Clop ransomware blocks over 600 Windows processes and disables multiple Windows 10 applications, including Windows […]
The University of Utah released a notification yesterday that they were the victim of a data breach and ransomware attack on July 19th, 2020. In the notification, they stated that the university’s College of Social and Behavioral Science (CSBS) was the victim of an attack that took their systems offline. As part of the attack, […]
Bleeping Computer publicly reported details of a limited-distribution advisory from last week by the FBI and the Cybersecurity and Infrastructure Security Agency (CISA). The agencies released an advisory to companies across numerous industries about a voice phishing (sometimes called “vishing”) campaign targeting remote workers in the United States. Voice phishing is an attack that utilizes […]
Facebook users are once again in danger of getting their computers compromised as a new spamming campaign urging them to update their account agreement is currently under way. Panda Labs has already received 16,000 emails since yesterday, and that is probably just the tip of the iceberg. This is what the e-mail looks like: It […]
