Bizarro banking trojan targets European and South American banking customers
A banking trojan dubbed “Bizarro” that originated from Brazil has now targeted customers of 70 banks in Europe and South America.
Phishing
North Korean hackers target security researchers in new campaign
Google’s Threat Analysis Group (TAG) has discovered a new ongoing campaign targeting security researchers working on vulnerability research.
FBI: Cyber criminals target employee credentials via voice phishing attacks
The FBI issued a private industry notification of cyber criminals targeting employee credentials via voice phishing or “vishing” attacks.
Threat actors targeting COVID-19 vaccine cold chain
Security researchers have spotted malicious cyber actors targeting the COVID-19 vaccine cold chain via a global phishing cyber campaign.
Malicious accounts used in BEC attacks against 6,600 organizations
Hackers are using thousands of legitimate emails accounts to launch impersonation and business email compromise (BEC) attacks against thousands of organizations.
Twitter provides update on high profile account hacking incident
Attackers hacked into a number of Twitter internal systems and took over 45 high profile Twitter accounts, to include those from celebrities, politicians and large organizations.
Microsoft takes down malicious domains used in COVID-19 related phishing campaign
Microsoft has disrupted a major cybercriminal operation designed to take advantage of the COVID-19 pandemic and defraud victims in 62 countries around the world.
Spearphishing campaign targets Oil and Gas sector to drop Agent Tesla malware
Security researchers have spotted a spearphishing campaign that targets companies in the oil and gas sector to drop Agent Tesla malware.
‘Shark Tank’ star loses (and recovers) almost $400K in BEC scam
“Shark Tank” star Barbara Corcoran lost nearly $400,000 to a phishing scam late last month after scammers tricked people in her office into wiring funds to a bank in Germany. The good news is Corcoran ended up recovering the funds before the money could be transferred to the fraudster’s bank account in China.
Threat actors abuse Google Docs Forms to phish Office 365 credentials
Threat actors are abusing Google Docs Forms as part of cyber campaign to steal Office 365 credentials.