Daniel Miessler

SEPTEMBER 29, 2020

Since 2007 the InfoSec industry has been talking about TheBigOne™—the event that would change cyber threats from annoyances to existential concerns. Once they get in— via RDP or Phishing or Drive-bys —they are not only extorting people who want to get their data back. They called it Cyber Pearl Harbor.

Ransomware 246

Ransomware Government Social Engineering Small Business 246

Security Affairs

JANUARY 18, 2022

Trend Micro researchers spotted an elusive threat actor, called Earth Lusca, that targets organizations worldwide via spear-phishing and watering hole attacks. . The Winnti group was first spotted by Kaspersky in 2013, but according to the researchers the gang has been active since 2007. Both clusters served as a C&C server.

Cryptocurrency 136

Cryptocurrency Media Social Engineering Phishing 136

Security Affairs

FEBRUARY 9, 2021

The developers behind the NextGen Gallery plugin have fixed two critical Cross-site request forgery (CSRF) vulnerabilities, their exploitation could lead to a site takeover, malicious redirects, spam injection, phishing, and other malicious activities. The plugin receives over 1.5 ” reads the post published by Wordfence.

Social Engineering 128

Social Engineering Firewall Engineering Phishing 128

eSecurity Planet

SEPTEMBER 14, 2022

As a matter of fact, the most-reported crime in the 2021 Internet Crime Report report was phishing , a social engineering scam wherein the victim receives a deceptive message from someone in an attempt to get the victim to reveal personal information or account credentials or to trick them into downloading malware.

Social Engineering 122

Social Engineering Energy and Utilities Phishing Internet 122

SecureList

JUNE 26, 2023

According to a report by the Barracuda cybersecurity company, in 2021, businesses with fewer than 100 employees experienced far more social engineering attacks than larger ones. One of the methods often utilized to hack into employees’ smartphones is so-called “ smishing ” (a combination of SMS and phishing).

Cybercrime 123

Cybercrime Phishing Banking Malware 123

eSecurity Planet

APRIL 23, 2021

Since 2007 (before podcasting in general had really taken off), Patrick Gray and his co-host Adam Boileau have covered a wide range of InfoSec topics with insight from fellow industry leaders. New episodes of The Privacy, Security, & OSINT Show air weekly on Fridays and are usually about 60 minutes long. Risky Business.

Cybersecurity 144

Cybersecurity InfoSec Cybercrime Hacking 144

SecureList

APRIL 17, 2023

A short look at QBot The banking Trojan QBot was detected for the first time in 2007. Now the banker is delivered to potential victims through malware already residing on their computers, social engineering, and spam mailings. In 2021, we published a detailed QBot technical analysis.

Malware 141

Malware Banking Social Engineering Passwords 141