If you've spent any time at all surveying the threat landscape, then you're almost certainly familiar with the name Emotet. As one of the largest malware botnets on the planet, it's dangerous and then some, and its tentacles extend to every corner of the globe. There's nowhere on earth you can go that Emotet can't reach. Although Emotet doesn't deviate...
Is your business in any way affiliated with or connected to the healthcare industry? If so, be advised that recently, the FBI and the US Cybersecurity and Infrastructure Security Agency (CISA) have issued a statement in conjunction with the Department of Health and Human Services warning of an "Increased and Imminent Cybercrime Threat." According to the jointly released statement, the...
Recently, one or more Amazon employees disclosed customer email addresses to an unknown third party, prompting Amazon to send a notification email out to impacted customers which reads as follows: "We are writing to let you know that your e-mail address was disclosed by an Amazon employee to a third-party in violation of our policies. As a result, we have...
Google does an admirable job of keeping its sprawling Play Store free of apps containing malware. Their verification system is world-class. That said, no system is perfect, and that includes Google's. In recent months, the company has removed nearly a hundred apps that made it through their various gateways and checkpoints while containing all manner of malware. Naturally, these were...
Not all ransomware strains are created equally. Some are designed as slow burns that will infect a target system, expanding its reach for days, or even weeks before striking and locking your business critical files. Others are designed to hit fast and hard. Lockbit definitely falls into this latter category, based on a detailed analysis of the code conducted by...
Malware comes in all shapes and sizes. Some strains copy and encrypt files. Others serve annoying ads. Still others work quietly in the background, mining this or that cryptocurrency using your computer's processing power to do it. GravityRAT is a different sort of creature. It has been actively developed since at least 2015 by Pakistani hacker groups, and has been...
Deep Fakes are becoming an increasingly large problem. If you're not familiar with the term, a Deep Fake is an advanced photo or video technique in which an existing person in a video is digitally overwritten by some other person. Want to make it look like a wholesome actress has a porn video on the web? A Deep Fake will...
WordPress tends to take a light-handed approach when it comes to managing the legions of plugins that are compatible with the most popular blogging platform on the planet. This time, however, they're taking a different approach. They're forcing a security update to counter a dangerous bug in a wildly popular plugin that's being used by more than a million websites...
Score one for the good guys. A team led by Microsoft's DCU (Digital Crimes Unit) that includes Symantec, NTT Ltd, ESET, and Lumen's Black Lotus Labs is working on something new. They have launched a sustained, coordinated attack on Trickbot's infrastructure in a bid to destroy it, preventing the hackers who control it from making and launching new campaigns against...
If you make frequent use of Adobe products, then you'll definitely want to give priority to applying the latest security update offered by the company. It's an out of band patch that impacts ten different products in the Adobe lineup and is aimed squarely at addressing a number of critical security flaws. Since this is a big update, released outside...
