With Tax Day quickly approaching, many taxpayers may feel stressed as they work to file their tax returns promptly and accurately. During this time, cybercriminals may exploit this human vulnerability and leverage the rapid advancement and increase in artificial intelligence and deepfakes.
Threat actors are using HTML smuggling and fraudulent Google Sites pages to disseminate AZORult in a new malware campaign. AZORult, dubbed PuffStealer and Ruzalto, was first detected in 2016. It searches the desktop for sensitive documents using keywords...
This provides an overview for executive leaders on the urgent risk posed by People’s Republic of China (PRC) state-sponsored cyber actors known as Volt Typhoon. Volt Typhoon has been pre-positioning themselves on US critical infrastructure organizations’ networks.
Malicious copies of popular apps have been discovered on the Apple App Store. These apps are designed to be mistaken for legitimate apps and conduct malicious activity, such as stealing login credentials and other sensitive information. Click to learn more.
Third-party vendors used by businesses and organizations continue to be targets of threat actors to conduct cyberattacks. These providers may serve as an entry point for threat actors to target multiple organizations with social engineering campaigns.
Over one hundred malicious artificial intelligence (AI) machine learning (ML) models have been discovered on the Hugging Face platform, a popular public AI model repository allowing users to create interactive in-browser demonstrations. Click to learn more about malware concerns.
A sophisticated phishing scheme of fraudulent URLs, login pages, a sense of urgency and legitimacy, and persistent communication through mobile devices was recently discovered. The phishing kit revealed the creation of replicas of login pages and impersonating organizations.
A ransomware attack impacting Change Healthcare, one of the largest healthcare technology companies in the US, shows the impacts of a cyberattack. The incident, which occurred on February 21, crippled pharmacies across the nation, including military pharmacies, etc.
On February 22, a compromised email account sent phishing emails to several contacts at a New Jersey educational institution. The users who attempted to access the link in the email and submitted their credentials had their accounts compromised by the threat actor.
Subdomain hijacking occurs when threat actors gain control of a subdomain of a legitimate domain by taking over unused or abandoned subdomains to inject their IP address into the SPF record, and send emails on behalf of the primary domain name.
