You are here

Home » Cybersecurity

Cybersecurity

Threat Awareness – Social Engineering Success Drives Dark Web Demand for Information Stealers

According to a recent report by Accenture, the successful combination of stolen credentials and social engineering tactics to breach networks is increasing the demand for information stealers on the Dark Web. Specifically, Accenture notes a marked increase in the number of Dark Web advertisements for new information stealer malware variants. The report also discusses how the success of MFA fatigue attacks has contributed to this increased demand.

Ransomware Resilience – Best Practices to Block Ransomware on Endpoints

Sophos has written a blog post detailing six best practices from an updated version of its report on endpoint-related best practices for protecting against ransomware. The best practices include: turning on all policies and features of an endpoint, regularly reviewing the endpoint’s exclusions, enabling multi-factor authentication, ensuring endpoints are up-to-date and protected, maintaining general IT hygiene, and proactively hunting for adversaries within your network.

Threat Awareness – Black Basta Ransomware Employs Qakbot in Latest Attack Chain

Last week, security researchers warned that the Black Basta ransomware gang is utilizing Qakbot malware as part of an aggressive and widespread campaign targeting U.S.-based organizations. Black Basta ransomware first became operational in April 2022 and since then it has become one of the most prolific Ransomware-as-a-Service (RaaS) groups.

Security Awareness – Threat Actors Never Cease to Leverage Current Events to Spread Scams

With the FIFA World Cup in full swing, threat actors are seeking to exploit unsuspecting fans with a range of tactics to steal credentials, personal identifiable information (PII), and money. Scammers are employing social engineering tactics including phishing, fake apps, and malicious merchandising sites spoofing the branding of the FIFA World Cup in Qatar to target fans. The cybersecurity firm Group-IB observed more than 16,000 scam domains and 40 malicious apps in the Google Play store that were using FIFA World Cup 2022 branding to lure users.

U.S. Government Bans Sales of Huawei, Hikvision, ZTE, and Dahua Equipment

The U.S. government, via the Federal Communications Commission (FCC), recently banned the sale of equipment from Chinese telecommunications and video surveillance vendors Huawei, ZTE, Hytera, Hikvision, and Dahua due to “unacceptable risks to national security.” Last week, the FCC adopted new rules prohibiting the aforementioned communications equipment being authorized for importation or sale in the country.

Pages

Subscribe to Cybersecurity