Security News

Researchers reveal the latest lateral phishing tactics
2019-08-16 05:15

Emails coming from legitimate, compromised accounts are difficult to spot, both for existing email protection systems and the recipients themselves. Lateral phishing tactics Researchers from...

Anomali discovers phishing campaign targeting Chinese government agencies
2019-08-12 15:14

Anomali, a leader in intelligence-driven cybersecurity solutions, published at Black Hat USA 2019 its latest research report: Suspected BITTER APT Continues Targeting Government of China and...

iNSYNQ Ransom Attack Began With Phishing Email
2019-08-09 18:18

A ransomware outbreak that hit QuickBooks cloud hosting firm iNSYNQ in mid-July appears to have started with an email phishing attack that snared an employee working in sales for the company,...

The Threat in the Cloud: Phishing Abuses Amazon AWS S3 Buckets
2019-08-08 14:00

An ongoing campaign is hosting its phishing landing pages on enterprise-class public cloud storage services -- a nascent trend meant to throw defenders off.

Russian phishing campaign using AWS to host landing pages designed to avoid detection
2019-08-08 14:00

Assets used as part of phishing campaigns are being hosted on AWS, with heavy XOR obfuscation to limit detection, according to a Proofpoint report.

US utilities targeted with spear-phishing emails impersonating engineering licensing board
2019-08-02 09:58

If you worked in a US company in the utilities sector and received an email notification telling you that you’ve failed your “Fundamentals of Engineering” NCEES exam, would you download the...

Assessing the efficiency of phishing filters employed by email service providers
2019-07-31 05:00

Technology companies could be doing much more to protect individuals and organizations from the threats posed by phishing, according to research by the University of Plymouth. However, users also...

Campaign Leverages RFI Attacks to Deploy Phishing Kits
2019-07-30 10:45

A recently detected series of targeted attacks is attempting to exploit Remote File Inclusion (RFI) vulnerabilities to deploy phishing kits, Akamai has discovered.  read more

Dear hackers: If you try to pwn a website for phishing, make sure it's not the personal domain of a senior Akamai security researcher
2019-07-29 12:00

Crooks fail to hijack infosec bloke's site to dress it up as a legit Euro bank login page Think you have bad luck? Imagine being the script kiddie who inadvertently tried and failed to pwn an...

Week in review: Crafty Office 365 phishing, how DNS firewalls can burn security teams
2019-07-28 15:00

Here’s an overview of some of last week’s most interesting news and articles: Phishers targeting Office 365 admins have a new trick up their sleeve Phishers targeting Office 365 admins have a new...