spear-phishing - Cloud Security Alliance News Clipping Site

The Register: Here’s what happens if you don’t layer network security – or remove unused web shells

Nov 22, 2024

—

by

Source URL: https://www.theregister.com/2024/11/22/cisa_red_team_exercise/ Source: The Register Title: Here’s what happens if you don’t layer network security – or remove unused web shells Feedly Summary: TL;DR: Attackers will break in and pwn you, as a US government red team demonstrated The US Cybersecurity and Infrastructure Agency often breaks into critical organizations’ networks – with their permission,…

The Register: Swiss cheesed off as postal service used to spread malware

Nov 16, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/11/16/swiss_malware_qr/ Source: The Register Title: Swiss cheesed off as postal service used to spread malware Feedly Summary: QR codes arrive via an age-old delivery system Switzerland’s National Cyber Security Centre (NCSC) has issued an alert about malware being spread via the country’s postal service.… AI Summary and Description: Yes Summary: The National Cyber…

Krebs on Security: Booking.com Phishers May Leave You With Reservations

Nov 1, 2024

—

by

system automation

in Uncategorized

Source URL: https://krebsonsecurity.com/2024/11/booking-com-phishers-may-leave-you-with-reservations/ Source: Krebs on Security Title: Booking.com Phishers May Leave You With Reservations Feedly Summary: A number of cybercriminal innovations are making it easier for scammers to cash in on your upcoming travel plans. This story examines a recent spear-phishing campaign that ensued when a California hotel had its booking.com credentials stolen. We’ll…

Microsoft Security Blog: Midnight Blizzard conducts large-scale spear-phishing campaign using RDP files

Nov 1, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.microsoft.com/en-us/security/blog/2024/10/29/midnight-blizzard-conducts-large-scale-spear-phishing-campaign-using-rdp-files/ Source: Microsoft Security Blog Title: Midnight Blizzard conducts large-scale spear-phishing campaign using RDP files Feedly Summary: Since October 22, 2024, Microsoft Threat Intelligence has observed Russian threat actor Midnight Blizzard sending a series of highly targeted spear-phishing emails to individuals in government, academia, defense, non-governmental organizations, and other sectors. This activity is…

Alerts: Foreign Threat Actor Conducting Large-Scale Spear-Phishing Campaign with RDP Attachments

Oct 31, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.cisa.gov/news-events/alerts/2024/10/31/foreign-threat-actor-conducting-large-scale-spear-phishing-campaign-rdp-attachments Source: Alerts Title: Foreign Threat Actor Conducting Large-Scale Spear-Phishing Campaign with RDP Attachments Feedly Summary: CISA has received multiple reports of a large-scale spear-phishing campaign targeting organizations in several sectors, including government and information technology (IT). The foreign threat actor, often posing as a trusted entity, is sending spear-phishing emails containing malicious…

The Register: OpenAI says Chinese gang tried to phish its staff

Oct 10, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/10/10/china_phish_openai/ Source: The Register Title: OpenAI says Chinese gang tried to phish its staff Feedly Summary: Claims its models aren’t making threat actors more sophisticated – but is helping debug their code OpenAI has alleged the company disrupted a spear-phishing campaign that saw a China-based group target its employees through both their personal…

The Register: DOJ, Microsoft seize 107 domains used in Russia’s Star Blizzard phishing attacks

Oct 3, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/10/03/russian_phishing_domains_seized/ Source: The Register Title: DOJ, Microsoft seize 107 domains used in Russia’s Star Blizzard phishing attacks Feedly Summary: Winter is coming The US Department of Justice and Microsoft have seized 107 websites used by Russian cyberspies in a phishing campaign to steal sensitive information from US government agencies, think tanks, and other…

The Register: Chinese national accused by Feds of spear-phishing for NASA, military source code

Sep 17, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/09/17/chinese_national_nasa_phishing_indictment/ Source: The Register Title: Chinese national accused by Feds of spear-phishing for NASA, military source code Feedly Summary: May have reeled in blueprints related to weapons development A Chinese national has been accused of conducting a years-long spear-phishing campaign that aimed to steal source code from the US Army and NASA, plus…

Tag: spear-phishing