Cybersecurity
Category Added in a WPeMatico Campaign
Researchers have encountered a new phishing campaign that is being used to distribute the notorious Remcos RAT. The malware is disguised as a payslip to trick users. Modus operandi According to ASEC researchers, the phishing emails are sent with the subject name ‘This is a confirmation document for your payment transfer’ to deceive the recipients. […]
Check Point’s Harmony Email team has reported a dramatic escalation in QR code phishing attacks (aka quishing), with a 587% spike recorded from August to September 2023. This surge reflects a troubling trend as threat actors increasingly employ the attack tactic to compromise user credentials. What’s happening? The attacks, predominantly quishing and QRLJacking, involve QR […]
Huawei, Honor, and Vivo devices are displaying false security alerts urging the deletion of the Google app due to a supposed TrojanSMS-PA malware, but Google denies that its app triggered the alerts.
Security researchers at eSentire are calling attention to a new method that attackers can use to redirect business professionals to malicious websites. Described as the Wiki-Slack attack, the new technique uses modified Wikipedia pages and relies on a formatting error when the page is rendered in Slack. To mount the attack, a threat actor would […]
Oct 30, 2023NewsroomCyber War / Malware A pro-Hamas hacktivist group has been observed using a new Linux-based wiper malware dubbed BiBi-Linux Wiper, targeting Israeli entities amidst the ongoing Israeli-Hamas war. “This malware is an x64 ELF executable, lacking obfuscation or protective measures,” Security Joes said in a new report published today. “It allows attackers to […]
Canada’s largest public library system said it is dealing with a cyberattack that brought down its website, member services pages and limited access to its digital collections. The Toronto Public Library serves more than 1.2 million members with more than 12 million items spread across 100 branches. It said on Saturday afternoon that it was […]
The high number of attacks on IoT devices represents a 400% increase in malware compared to the previous year, according to Zscaler. The increasing frequency of malware attacks targeting IoT devices is a significant concern for OT security, as the mobility of malware can facilitate movement across different networks, potentially endangering critical OT infrastructure. ThreatLabz […]
Artificial Intelligence & Machine Learning , Critical Infrastructure Security , Legislation & Litigation Biden Administration Demands to See Red-Teaming Safety Tests of Foundational Models Chris Riotta (@chrisriotta) • October 30, 2023 U.S. President Joe Biden is set to sign an executive order on artificial intelligence on Oct. 30, 2023. (Image: Shutterstock) U.S. President […]
Most, if not all malvertising incidents result from a threat actor either injecting code within an existing ad, or intentionally creating one. Today, we look at a different scenario where, as strange as that may sound, malvertising was entirely accidental. The reason this happened was due to the combination of two separate factors: a compromised website […]