Accessibility links

Charming Kitten APT Scrapes Email Accounts To Steal Data

Scams & Phishing

Charming Kitten APT Scrapes Email Accounts To Steal Data

Charming Kitten, an Iranian-backed APT (Advanced Persistent Threat) group, is once again making headlines. In 2021, Google’s Threat Analysis Group (TAG) discovered Charming Kitten’s new surveillance tool, naming it HYPERSCRAPE. The name reflects HYPERSCRAPE’s ability to extract or “scrape” user data from Gmail, Microsoft Outlook, and Yahoo! email accounts. These threat actors are also known to carry out ransomware attacks, linking their motives to financial theft in addition to espionage. READ FULL STORY

Your Security

Online Banking Risks – How Financial Institutions And Customers Partner For Better Security
By: Jim Stickley and Tina Davis
February 2, 2023

The financial services sector has gone through significant changes since horse-drawn wagons delivered money to banks. Long after that, in-person visits to your local branch gave way to online banking on devices. But the start of the pandemic in 2020, left its mark on financial services and their customers. The risks of e-banking have been a very real concern ever since bad actors switched from cracking bank safes to cracking online accounts instead. A partnership with your financial institution can help boost online security. READ FULL STORY

Creative Hacking Underscores The Need For MFA

Your Security

Creative Hacking Underscores The Need For MFA

Attackers are getting more creative by the day. It's more important than ever before with so many bad actors out there to make all of your accounts ultra-secure. That means that using some method of multifactor authentication (MFA) is in order. Case in point: Recently, there was an elaborate scheme targeting unsuspecting users that would perhaps not have been victims, had MFA been enabled. The attackers sent spam email promoting fake sweepstakes where recipients were encouraged to put their credentials into a form. READ FULL STORY
Trojan-Loaded Apps Found In Google Play Store

Mobile Security

Trojan-Loaded Apps Found In Google Play Store

Most of us have our own personal pocket computer these days in the form of a smartphone or tablet. However, sometimes what we want to download to those, like what we put on our laptops or desktops, should be very carefully scrutinized in advance. Case in point—researchers at Dr. Web have found that at least nine apps that can be found in the Google Play Store harbor malicious code. Unfortunately, they have already been downloaded more than 5.8 million times by unsuspecting users. READ FULL STORY
FakeSpy Data-Stealing App Returns, Now Using U.S.P.S. As Cover

Scams & Phishing

FakeSpy Data-Stealing App Returns, Now Using U.S.P.S. As Cover

Postal services around the globe are now being targeted by an Android malware that’s back with a vengeance. FakeSpy is believed to be the spawn of a Chinese hacking group known as Roaming Mantis. This data stealing app first seen in 2017, has made a new and much improved debut. Originally targeting only postal services in South Korea and Japan, the vastly upgraded malware app now targets those services worldwide, including the U.S. Postal Service (U.S.P.S.). READ FULL STORY

Scams & Phishing

Gift Cards Being Used For Payment In BEC Scams, And What You Need To Know
By: Jim Stickley and Tina Davis
January 28, 2023

Over the years, gift cards have become an enormous “go to” way of giving. Mageplaza found the purchase of gift cards this year will reach nearly $450 billion globally. And like many things involving monetary value and being human, cyber-scammers are exploiting gift cards for profit. They’re now combining gift card fraud with the world’s most lucrative cybercrime, business email compromise (BEC) attacks. According to researchers at Cofense, organizations are getting hip to more traditional BEC tricks and have bolstered protections against them. As a result, fraudsters needed a new lure and turned their attention to gift cards. READ FULL STORY

Dropbox Hit With Phishing Attack; Accounts Accessed

Scams & Phishing

Dropbox Hit With Phishing Attack; Accounts Accessed

A Dropbox phishing attack happened recently. It was caused by someone acting as the code delivery platform CircleCI, using code that Dropbox had stored in GitHub. The victims were limited in number, but Dropbox decided to put out a message about how they are dealing with it. The attackers sent people to a fake login page that took their details. Reportedly, nobody had their Dropbox files accessed, but there could be more phishing attempts due to the fact that the intruders may have gotten email addresses related to accounts. READ FULL STORY
Ransomware Attacks…Where’s The Silver Bullet?

Scams & Phishing

Ransomware Attacks…Where’s The Silver Bullet?

When ransomware words pop-up on computer screens all over an organization, it stops victims in their tracks – but by then it’s too late. Some common targets of these coldhearted ransomware crimes include hospitals, education, public transit, banking, government agencies, corporations, and yes indeed, individuals. To date, a silver bullet for preventing these devastating and dangerous ransomware attacks has yet to arrive. So, it's critical to keep your eyes open for attacks in order to thwart them. READ FULL STORY
When Sharing Isn't Always A Good Thing: TikTok Shares Your PII

Mobile Security

When Sharing Isn't Always A Good Thing: TikTok Shares Your PII

Growing up, our elders taught us to share with others. Of course, we know they weren’t talking about sharing personal information online. If anything, the latest TikTok hack should be a lesson to us all to be extremely careful about the PII (personally identifiable information) we share online, especially on social media sites. TikTok’s “Find Friends” option was exploited by hackers who used it to steal PII from the account holder and their contacts. READ FULL STORY
SOVA Banking Trojan Infects Android Mobile Devices AND Can’t Be Removed

Mobile Security

SOVA Banking Trojan Infects Android Mobile Devices AND Can’t Be Removed

There’s a newly improved mobile banking trojan called SOVA that’s leaving a path of destruction for those using Android mobile devices. Last year, SOVA trojan was found operating in the U.S. and several other countries and is actively expanding its geo-locations. This year, SOVA malware creators added new and improved tools and versions to its arsenal, making it able to target over 200 Android mobile apps, crypto exchanges, and e-wallets. If wiping-out a victim’s financial account isn’t tragic enough, know that SOVA malware can’t be removed from a device once it’s infected. READ FULL STORY
Breach In ENC Security Server Leads To Leak Of Critical Business Data

Corporate Security

Breach In ENC Security Server Leads To Leak Of Critical Business Data

There have been reports of ENC Security leaking sensitive business data. The leak has been going on since May 2021. The company provides encryption software for storage devices such as USB keys and memory cards. This is a concerning development for anyone who has purchased a SanDisk, Sony, or Lexar storage device in the past, as it is possible that their personal data may have been compromised. According to reports of the Cybernews research team, there was a leaking server that disclosed a range of several configuration and certificate files, making the encryption vulnerable. READ FULL STORY
Downloading Some Apps May Get Your Device All Mixed Up

Mobile Security

Downloading Some Apps May Get Your Device All Mixed Up

Over the past few years, we have all been discouraged from mixing with others, for fear of catching a nasty virus. As we know, time has passed and we are mingling amongst ourselves a bit more. But there is something else out there doing a fair bit of stirring up things and also passing on some nasty infections. NullMixer is a new malware dropper that has infected over 47,000 windows PCs, according to Kaspersky. Users looking for cracked and pirated software are at greater risk of downloading the malware. READ FULL STORY
Scheming Scam Alert! These Top Scams Are Heading Your Way

Scams & Phishing

Scheming Scam Alert! These Top Scams Are Heading Your Way

This year’s top scams are bigger and better than ever. Phishing scams hit new heights during the pandemic and show no signs of slowing down. The FBI’s Internet Crime Complaint Center (IC3) received over 2.1 million complaints from scam victims last year. The most common reports were about imposter scams, but that’s just the tip of the iceberg. The FTC finds that last year, the financial cost of these fraudulent scams was more than $3.3 billion. READ FULL STORY




We use cookies to give you a more relevant browsing experience and improve our website. Using this site means that you agree with our use of cookies policy.