Understanding the Latest Mishing Campaign Targeting Mobile Users Cybersecurity researchers have recently uncovered a sophisticated mobile phishing campaign, also known as mishing, aimed at distributing an updated version of the Antidot banking trojan. This hidden threat involves attackers posing as recruiters, enticing unsuspecting victims with fraudulent job offers. By deceiving victims into believing they are…
In today’s rapidly evolving threat landscape, safeguarding your organization against cyberattacks is more critical than ever. Traditional penetration testing (pentesting) is effective but often falls short due to high costs and limited frequency. Automated internal and external network pentesting is a game-changing solution, empowering organizations to stay ahead of emerging threats. Here’s how automated pentesting…
A Cyber Espionage Campaign in Southern Europe A suspected China-nexus cyber espionage group has targeted large business-to-business IT service providers in Southern Europe. This is part of a broader campaign known as Operation Digital Eye. The cyber attacks occurred between late June and mid-July 2024. These revelations come from a joint report by cybersecurity firms…
Belgian and Dutch authorities have made significant strides in combating a "phone phishing" gang that operated chiefly from the Netherlands. This coordinated international operation led to the arrest of eight suspects who were implicated in a scheme aimed at stealing victims' financial data and funds. What is Phone Phishing? Phone phishing, also known as vishing…
CERT-UA Warns of Phishing Attacks Targeting Defense Companies The Computer Emergency Response Team of Ukraine (CERT-UA) has issued a warning about new phishing attacks aimed at defense companies and security forces in the country. These attacks have been linked to a Russia-associated threat actor known as UAC-0185, also referred to as UNC4221. This group has…
Cyber attackers never stop inventing new ways to compromise their targets. That's why organizations must stay updated on the latest threats. In this post, we will discuss current malware and phishing attacks to help safeguard your infrastructure before they reach you. Understanding Zero-Day Attacks Zero-day attacks happen when hackers exploit a vulnerability that is not…
The threat posed by ransomware continues to evolve, with the Black Basta ransomware group taking new approaches to their attacks. Recently, they have been observed switching up their social engineering tactics. Since early October 2024, these threat actors have begun distributing a different set of payloads, including Zbot and DarkGate. Understanding Black Basta Ransomware The…
This week’s cyber world feels like a thrilling spy movie. Hackers are infiltrating other hackers’ setups, sneaky malware lurks in popular software, and AI-driven scams are deceiving even the smartest individuals. On the flip side, cybersecurity experts are dismantling secret online markets and shutting down shady chat rooms. Meanwhile, large companies are scrambling to patch…
Understanding the Threat of Socks5Systemz and PROXY.AM Recent findings from Bitsight shed light on a malicious botnet known as Socks5Systemz, which is powering an illicit proxy service named PROXY.AM. Proxy services, such as this one, pose significant cybersecurity threats because they allow bad actors to operate anonymously. According to the security research team at Bitsight,…
Enhancing Identity Security: A Comprehensive Guide Identity security is crucial for organizations today. As cyber threats evolve, securing identities that access a business's resources has become a priority. However, relying solely on user IDs has its limitations. Businesses often need to layer additional security measures to strengthen their identity protection. In this article, we'll explore…