Google PPC Ads Used to Deliver Infostealers
The crooks pay top dollar for Google search results for the popular AnyDesk, Dropbox & Telegram apps that lead to a malicious, infostealer-packed website.
Researchers have tracked down the origins...
Banking Attacks Surge Along with Post-COVID Economy
FinTech fraud spikes 159 percent in Q1 2021 along with stimulus spending.
For many, COVID-19 has been a crushing catastrophe. But for bank scammers, it’s shaped up to be...
Podcast: The State of Ransomware
In this Threatpost podcast, Fortinet’s top researcher sketches out the ransom landscape, with takeaways from the DarkSide attack on Colonial Pipeline.
Last month, ransomware group DarkSide targeted operator Colonial Pipeline...
Where Bug Bounty Programs Fall Flat
Some criminals package exploits into bundles to sell on cybercriminal forums years after they were zero days, while others say bounties aren’t enough .
Eavesdropping on the chatter of 600+...
Cyber-Insurance Fuels Ransomware Payment Surge
Companies relying on their cyber-insurance policies to pay off ransomware criminals are being blamed for a recent uptick in ransomware attacks.
Ransomware victims are increasingly falling back on their...
Hackers Exploit Post-COVID Return to Offices
Spoofed CIO ‘pandemic guideline’ emails being used to steal credentials.
With COVID-19 restrictions lifting and workers trickling back to offices, threat actors are sharpening their spear phishing ploys. The...
On the Taxonomy and Evolution of Ransomware
Not all ransomware is the same! Oliver Tavakoli, CTO at Vectra AI, discusses the different species of this growing scourge.
Given the frequency with which “ransomware” appears in news articles,...
Nobelium Phishing Campaign Poses as USAID
Microsoft uncovered the SolarWinds crooks using mass-mail service Constant Contact and posing as a U.S.-based development organization to deliver malicious URLs to more than 150 organizations.
The cybercriminal group behind...
BazaLoader Masquerades as Movie-Streaming Service
The website for “BravoMovies” features fake movie posters and a FAQ with a rigged Excel spreadsheet for “cancelling” the service, but all it downloads is malware.
There’s a new, fake...
Biden’s Cybersecurity Executive Order Puts Emphasis on the Wrong Issues
David Wolpoff, CTO at Randori, argues that the call for rapid cloud transition Is a dangerous proposition: “Mistakes will be made, creating opportunities for our adversaries.
It’s no secret that...
