Browsing tag

spear phishing

Iranian APT Group OilRig Using New Menorah Malware for Covert Operations

Sophisticated cyber actors backed by Iran known as OilRig have been linked to a spear-phishing campaign that infects victims with a new strain of malware called Menorah. “The malware was designed for cyberespionage, capable of identifying the machine, reading and uploading files from the machine, and downloading another file or malware,” Trend Micro researchers Mohamed […]

North Korean UNC2970 Hackers Expands Operations with New Malware Families

A North Korean espionage group tracked as UNC2970 has been observed employing previously undocumented malware families as part of a spear-phishing campaign targeting U.S. and European media and technology organizations since June 2022. Google-owned Mandiant said the threat cluster shares “multiple overlaps” with a long-running operation dubbed “Dream Job” that employs job recruitment lures in […]

Russian Hackers Exploiting Microsoft Follina Vulnerability Against Ukraine

The Computer Emergency Response Team of Ukraine (CERT-UA) has cautioned of a new set of spear-phishing attacks exploiting the “Follina” flaw in the Windows operating system to deploy password-stealing malware. Attributing the intrusions to a Russian nation-state group tracked as APT28 (aka Fancy Bear or Sofacy), the agency said the attacks commence with a lure […]

New Saitama backdoor Targeted Official from Jordan’s Foreign Ministry

A spear-phishing campaign targeting Jordan’s foreign ministry has been observed dropping a new stealthy backdoor dubbed Saitama. Researchers from Malwarebytes and Fortinet FortiGuard Labs attributed the campaign to an Iranian cyber espionage threat actor tracked under the moniker APT34, citing resemblances to past campaigns staged by the group. “Like many of these attacks, the email […]

Spear Phishing is the Next Big Challenge for CISOs

Phishing, which started off as Nigerian Prince scams in the 1990s, has become a common attack vector ever since. As though phishing wasn’t enough of a cybersecurity menace, overtime many different kinds of phishing have come into being. Among many forms of this cyberthreat, spear-phishing attacks are the most challenging to stop. Spear phishing attacks […]

Spear-Phishing: How to Protect Yourself From an Attack

Spear-Phishing Even with the number of messaging apps available now, companies still use email. On average, a person receives over a hundred emails a day from bosses and companies. Because of this, hackers have created a dangerous phishing method called “spear-phishing.” What is phishing and spear-phishing? Phishing is a popular cyber-attack method created in the […]

How Phishing Has Evolved in 2019

Phishing attacks host every kind of malware and ransomware attack but what’s worse is that these attacks are on the rise. Starting in 2012, ransomware took the Internet by storm, thanks to latest phishing techniques. Unsuspecting and unprepared users, both individuals and businesses, found their screens frozen, their data no longer their own, and the […]

Whaling Attack: Why Should CEOs Be Afraid?

Being the president of a Fortune 500 company is something many people aspire to be. The perks of the position go beyond the wildest dreams and are often highlighted in many Hollywood films. But being the CEO of a large company isn’t all fun and games: CEOs have access to confidential company documents and the […]

Phishing Definition: What You Need to Know

The phishing definition from the United States Computer Emergency Readiness Team, or US-CERT, says that this is a form of social engineering that makes use of emails or malicious websites (and other channels) to steal personal information from a person or even a company by posing as a trustworthy entity. Phishing attacks use email as […]

RatVermin Spyware Campaign: Ukraine Gov Agencies Targeted

A phishing campaign in which Ukraine government agencies are targeted with the RatVermin malware has been uncovered. Security researchers working with FireEye Threat Intelligence have uncovered this ongoing spear phishing campaign that has been targeting the Ukraine government and military with emails that aim to distribute the RatVermin malware, which helps malicious actors in info-gathering […]

Things To Do To Defend Against Spear Phishing

  Phishing is a way to extract confidential data from individuals and businesses. Mostly by creating fake Web pages or send emails to disclose login names, passwords, credit card information, etc. Once cybercriminals have the data that they are looking for, they can easily steal money and personal information from the poor victims. Cybercriminals also […]