3+ day, 3+ hour ago   (489+ words) The FBI has published its first ever Cyber Strategy, providing guidance on how the agency investigates and disrupts cyber threat actors. The new document, published on September 9, highlights the need for strategic response to escalating cyber-attacks perpetrated by financially-motivated cybercriminals…...

4+ day, 1+ hour ago   (455+ words) A ClickFix campaign has shifted from tricking users into running commands on their computers to persuading them to inject malicious JavaScript into their own browsers, in a scheme aimed at people willing to commit fraud. Cisco Talos said in research…...

1+ week, 3+ day ago   (405+ words) A phishing-as-a-service (PaaS) operation has continued generating new campaigns despite a coordinated takedown effort, with more than 700 new phishing pages identified within a month of the disruption. Group-IB said its researchers had tracked the Outsider Phishing Kit, operated by a…...

1+ week, 3+ day ago   (425+ words) A P2P botnet thought to have been running for over two decades, has suffered significant disruption thanks to a US-led law enforcement operation. Carried out on August 31, the operation against the Sality botnet brought together authorities from Bulgaria, Hungary, Romania, and…...

2+ week, 5+ day ago   (371+ words) A phishing platform dubbed ZeroTokens allows attackers live visibility into victim sessions and the ability to change subsequent prompts in real time, allowing attacks to adapt in real time while targeting credentials and financial information. The platform allowed an operator…...

2+ week, 5+ day ago   (298+ words) Fake recruiter scams have been targeting corporate credentials on mobile devices, using full-screen login pages and pre-qualification checks to reject personal email addresses and focus on enterprise accounts. The August 24 research found that the campaigns had persisted across a range…...

2+ week, 5+ day ago   (310+ words) A large-scale malware-spreading scheme targeting Minecraft players has continued to evolve despite the takedown of the threat actor’s malicious infrastructure in July. In a new report, researchers at McAfee shared that over 6300 attempts to access malicious sites linked to the…...

2+ week, 6+ day ago   (385+ words) A financially motivated threat actor has been observed abusing free Notion accounts, malicious PDFs and device code phishing to harvest authentication tokens from targeted organizations. Sublime's Threat Intelligence & Research team, which tracks the actor as Doubloon Dredger, identified the activity…...

3+ week, 3+ day ago   (330+ words) Security researchers have warned of a new variant of a prolific Android banking Trojan which substantially expands its potential victim count. ToxicPanda 2.0 was discovered by Zimperium’s zLabs team, the mobile security vendor wrote in a post on August 19. Most notable…...

3+ week, 3+ day ago   (443+ words) Attendees of cybersecurity conferences should be on the lookout for malicious outreach following the event, according to a new Huntress blog which details one such interaction. The post, published on August 19, explained that a researcher for the security vendor was…...