Accessibility links

The Dark Knight Won't Save You From DarkGate

Scams & Phishing

The Dark Knight Won't Save You From DarkGate

You can put down the bat phone and turn off the bat signal. It’s not the Dark Knight that can save you from this threat. What is it heading toward Gotham this time? It’s a relatively new and dangerous type of malware that is designed to download and execute other malware on infected systems. In recent months, DarkGate has gained a lot of attention in the cybersecurity world due to its increased use in phishing campaigns that exploit Microsoft Teams accounts. READ FULL STORY

Mobile Security

QR Code Scanning Scams – How To Use QR’s Safely And Securely
By: Jim Stickley and Tina Davis
September 22, 2023

In our never-ending pursuit of info-quick technology, QR (quick response) codes have found a huge following. In return, these codes seem to be everywhere and on everything. From TV screens to product packaging, web pages, and more, QR codes are easy to find. But like most technology we’ve grown to love, cybercriminals love it too but for very different reasons. Some QR-secure tips can help scan fans stay safer and enjoy the benefits of this quick response technology. READ FULL STORY

These Top Scams Are Heading Your Way

Scams & Phishing

These Top Scams Are Heading Your Way

This year’s top scams are bigger and better than ever. Phishing scams hit new heights during the pandemic and show no signs of slowing down. The FBI’s Internet Crime Complaint Center (IC3) received over 2.1 million complaints from scam victims last year. The most common reports were about imposter scams, but that’s just the tip of the iceberg. The FTC finds that last year, the financial cost of these fraudulent scams was more than $3.3 billion. READ FULL STORY
The Truth About Temu Shopping App Gives Reasons To Delete It

Your Security

The Truth About Temu Shopping App Gives Reasons To Delete It

Temu, the insanely popular Chinese-owned discount marketplace app is creating a stir in the U.S. With help from 50 million+ Americans now onboard, Temu snuck into first place bypassing Amazon, Walmart, and Shein with its global number of app users. And like any app you consider downloading, Temu deserves a closer look first. Not long after Temu’s U.S. launch during last year’s Superbowl, the app came under scrutiny from disillusioned customers and cybersecurity professionals, but for very different reasons. READ FULL STORY
We Smell Another RAT; Novel Trojan Can Really Stink Up Your Android Device

Mobile Security

We Smell Another RAT; Novel Trojan Can Really Stink Up Your Android Device

It’s gotten rather stinky for Android users. Discovered and named by Trend Micro back in June 2023, the MMRat trojan is a novel malware that is really making those devices smell ripe. It mainly takes advantage of a seldom-used communication method to steal data—particularly banking and financial data. By monitoring the phone, hackers discover periods of idleness when they can conduct real-time bank fraud. And somehow, the victims of this sneaky trick are nose-blind and don’t smell a thing while it’s all happening. READ FULL STORY

Scams & Phishing

Financial Sector Faces New Targeted Phishing Attacks
By: Jim Stickley and Tina Davis
September 18, 2023

Banks and other financial institutions are grappling with a new form of phishing attack that leverages the popular business networking website LinkedIn to reach potential victims. The two-stage attack is notable for its sophistication, but with a smidge of awareness and vigilance, the multi-stage threat can be managed. The recent targeted phishing attacks on the financial sector highlight the importance of ongoing vigilance and careful scrutiny of online communications. READ FULL STORY

SIM Swap Attack Transfers Mobile Numbers To Cyber Thieves

Mobile Security

SIM Swap Attack Transfers Mobile Numbers To Cyber Thieves

There was a recent such breach at Kroll, a firm specializing in risk and financial advisory services. This one had far-reaching consequences, affecting downstream customers and exposing the personal information of numerous claimants. These claimants were involved in bankruptcy proceedings linked to cryptocurrency trading firms like FTX, BlockFI, and Genesis. This incident serves as a poignant reminder of the persistent threat that organizations face from SIM-swapping attacks, because that’s what happened in this case. READ FULL STORY
Cybercrime Is Costly; Organizations Urged To Re-evaluate Cybersecurity Strategies

Corporate Security

Cybercrime Is Costly; Organizations Urged To Re-evaluate Cybersecurity Strategies

The cost to companies due to a data breach can bankrupt a business. There is no type of or size of an organization that isn’t a target of cybercrime. Several years ago, the CIA and NSA were victims of cyberattacks, and the attackers rubbed it in by exposing not only data they stole from these organizations but also by revealing the cyber tools they use. It’s natural to want to throw in the towel. After all, sometimes it feels like we just cannot win this battle. But this is a fight the good guys really can’t afford to lose. READ FULL STORY
Jupiter X Plugin Vulnerability Affecting WordPress Websites

Corporate Security

Jupiter X Plugin Vulnerability Affecting WordPress Websites

A premium plugin used to set up WooCommerce and WordPress websites known as Jupiter X Core is currently being affected by two vulnerabilities. They may allow a cybercriminal to hijack accounts and/or upload files without the need for authentication. Analyst, Rafie Muhammed of Patchstack discovered them and reported them to the creators of Jupiter X Core--the products affected. The first of the two vulnerabilities allows for the uploading of files without the need for authentication. The second allows unauthenticated attackers to take control of any WordPress user account as long as they know the email address. READ FULL STORY
Attackers Target Neglected Websites to Go Phishing

Scams & Phishing

Attackers Target Neglected Websites to Go Phishing

According to a recent study by Kaspersky, there is a growing trend of attackers focusing on abandoned and minimally maintained websites for the purpose of hosting very legitimate-looking phishing pages. In fact, the research revealed a significant volume of compromised websites. Between mid-May and the end of July, it identified 22,400 distinct WordPress websites that had been compromised by threat actors to serve as platforms for hosting phishing pages. READ FULL STORY
Email And Clickbait Lead To Facebook Trouble

Scams & Phishing

Email And Clickbait Lead To Facebook Trouble

In 2022, there were more than 333 billion email messages exchanged. That’s according to the website Statista. And of those, roughly 36% are spam. While most email products are fairly good at detecting and sorting out spam for us, many unwanted messages still make it past the filters and into our inboxes. Many of those lead to scams, downloaded malware, or cause some other type of digital harm. But the scams and malware don’t stop at email spam. READ FULL STORY
MOVEit Moves To Colorado--Millions Affected In Recent Attacks

Identity Theft

MOVEit Moves To Colorado--Millions Affected In Recent Attacks

The Colorado Department of Health Care Policy and Financing (HCPF) has reported a breach that compromised the data of more than 4 million individuals. The incident was attributed to IBM, a vendor for the state, which utilizes the MOVEit application for the transfer of HCPF data files. Not standing alone, another organization impacted by this recent breach is Missouri’s Department of Social Services (DSS), which also uses IBM's services. MOVEit just won't move on. READ FULL STORY
Realst Malware Preying on Mac Users Through Fake Blockchain Games

Your Security

Realst Malware Preying on Mac Users Through Fake Blockchain Games

A new cybersecurity threat has surfaced, ominously dubbed "Realst." Primarily targeting Mac users, this threat lurks in seemingly inconspicuous blockchain games. However, instead of a fun gaming experience, this malware is programmed to steal your personal data. Realst takes a smart, but deceitful approach to get to you, even looking to the future. If you play this game, they may be able to install Realst on your Mac and allow the hackers to choose their targets. READ FULL STORY
Phishing With A Song And A Dance-Eurovision Brings Out The Scammers

Scams & Phishing

Phishing With A Song And A Dance-Eurovision Brings Out The Scammers

Cybercriminals are always on the lookout for fresh opportunities to steal sensitive information. Major events, like the upcoming Eurovision competition in Liverpool, can be a goldmine for online scammers. With tens of thousands of people making Eurovision-related travel plans, cybercriminals have a wealth of targets to choose from. One of the most effective tactics scammers employ is phishing. Some useful guidance can help you stay off the hook during this talent contest and all the time. READ FULL STORY




We use cookies to give you a more relevant browsing experience and improve our website. Using this site means that you agree with our use of cookies policy.