Security News

European companies hit with effective DocuSign-themed phishing emails
2024-12-18 11:54

A threat actor looking to take over the Microsoft Azure cloud infrastructure of European companies has successfully compromised accounts of multiple victims in different firms, according to Palo...

New fake Ledger data breach emails try to steal crypto wallets
2024-12-17 22:04

A new Ledger phishing campaign is underway that pretends to be a data breach notification asking you to verify your recovery phrase, which is then stolen and used to steal your cryptocurrency. [...]

Black Basta Ransomware Evolves with Email Bombing, QR Codes, and Social Engineering
2024-12-09 17:44

The threat actors linked to the Black Basta ransomware have been observed switching up their social engineering tactics, distributing a different set of payloads such as Zbot and DarkGate since...

Microsoft dangles $10K for hackers to hijack LLM email service
2024-12-09 11:05

Outsmart an AI, win a little Christmas cash Microsoft and friends have challenged AI hackers to break a simulated LLM-integrated email client with a prompt injection attack – and the winning teams...

Businesses plagued by constant stream of malicious emails
2024-12-09 04:00

36.9% of all emails received by businesses (20.5 billion) in 2024 were unwanted, according to Hornetsecurity’s analysis of 55.6+ billion emails processed through their security services between...

Hackers Use Corrupted ZIPs and Office Docs to Evade Antivirus and Email Defenses
2024-12-04 04:48

Cybersecurity researchers have called attention to a novel phishing campaign that leverages corrupted Microsoft Office documents and ZIP archives as a way to bypass email defenses. "The ongoing...

Phishers send corrupted documents to bypass email security
2024-12-03 12:04

Phishers have come up with a new trick for bypassing email security systems: corrupted MS Office documents. The spam campaign Malware hunting service Any.Run has warned last week about email...

North Korean Kimsuky Hackers Use Russian Email Addresses for Credential Theft Attacks
2024-12-03 09:51

The North Korea-aligned threat actor known as Kimsuky has been linked to a series of phishing attacks that involve sending email messages that originate from Russian sender addresses to ultimately...

Horns&Hooves Campaign Delivers RATs via Fake Emails and JavaScript Payloads
2024-12-03 05:23

A newly discovered malware campaign has been found to target private users, retailers, and service businesses mainly located in Russia to deliver NetSupport RAT and BurnsRAT. The campaign, dubbed...

Why AI alone can’t protect you from sophisticated email threats
2024-11-19 05:00

In this Help Net Security interview, Riaz Lakhani, CISO at Barracuda Networks, discusses the effectiveness of AI-based behavioural analysis in combating sophisticated email threats like BEC and...