Phishing | Security Magazine

Items Tagged with 'Phishing'

ARTICLES

Phishing is leading malware type affecting remote employees

January 23, 2023

The State of Consumer Cybersecurity 2023 report was released by ReasonLabs on January 19 and highlighted year-over-year cybersecurity trends.

86% of cloud attacks in healthcare result in financial consequences

Security Staff

November 1, 2022

According to a Netwrix report, 61% of respondents in the healthcare industry suffered a cyberattack on their cloud infrastructure within the last 12 months.

Phishing could have cost businesses $354m in potential direct losses

August 20, 2021

As detailed in a new Area 1 Security report, threats ranging from ransomware, credential harvesters to difficult-to-discover but costly business email compromise targeted inboxes, could have resulted in over $354 million in direct losses had they been successful.

Outdated cybersecurity training erodes trust, hurts more than it helps

Heather Stratford

July 12, 2021

Traditional cybersecurity training can be individual or LMS-based and generally hinges on a 30- to 60-minute session of basic training once a year. There will be some visual reminders taking the form of emails or posters during the year. But regardless of the minor variations, traditional training doesn’t work.

Cybercriminals are starting to target lower-hanging fruit rather than C-level executives

July 2, 2021

Avanan announced the release of the company's 1H 2021 Global Phish Cyber Attack Report, which analyzes today’s threat landscape, phishing vectors, and industry-based attacks, exposing healthcare and manufacturing as two of the top industries being targeted by hackers in the first half of the year.

Security leaders anticipate ransomware and phishing uptick in a hybrid workplace

June 22, 2021

Most IT leaders believe that ransomware attacks will be a greater concern in a hybrid workplace, with legal firms and healthcare organizations particularly concerned about this threat, according to a new Tessian report.

Threat actors are using Google Docs to host phishing attacks

June 18, 2021

Avanan analysts have recently discovered an exploit vector in Google Docs that attackers are using to deliver malicious phishing websites to victims.

Kimsuky APT continues to target South Korean government

June 9, 2021

The Kimsuky APT—also known as Thallium, Black Banshee, and Velvet Chollima— continues to target the South Korean government, according to the Malwarebytes Threat Intelligence team, who is actively monitoring this actor and has been able to spot phishing websites, malicious documents, and scripts that have been used to target high profile people within the government of South Korea. The structure and TTPs used in these recent activities align with what has been reported in KISA’s report.

Microsoft warns of Russian Nobelium phishing campaign

June 1, 2021

Microsoft has warned that Nobelium is currently conducting a phishing campaign after the Russian-backed group managed to take control of the account used by USAID on the email marketing platform Constant Contact. The phishing campaign has targeted around 3,000 accounts linked to government agencies, think tanks, consultants, and non-governmental organizations.

Four steps to deliver a deadly counterpunch to ransomware attacks

Sally Eaves

Mathew Newfield

June 1, 2021

Here are steps you can take to protect your enterprise against ransomware, limit the impact of a breach, understand where an attack can be stopped, and act fast if a hacker succeeds in gaining access.