HackDig : Dig high-quality web security articles for hackers

COVID-19 Fuels Phishing and Scams While BEC Attacks Evolve and Increase

Between the second and third weeks of March 2020, email scams and phishing attacks spiked by an unprecedented 436%. Such was the effect of the COVID-19 pandemic. Meanwhile, business email compromise (BEC) attacks have been less affected by the pandemic, but have also increased and evolved.BEC attacks represent a low percentage of email attacks by volume, but
Publish At:2020-06-23 14:41 | Read:167 | Comments:0 | Tags:NEWS & INDUSTRY Virus & Threats Email Security Fraud

Google Sees Increase in COVID-19 Phishing in Brazil, India, UK

Cyber-threats taking advantage of the COVID-19 pandemic are evolving, and Google is seeing an increase in related phishing attempts in countries such as Brazil, India, and the UK.As the coronavirus crisis spreads worldwide, cyber-criminals and state-sponsored actors have adapted their attacks to leverage pandemic-related lures. In April, Gmail was seeing 18
Publish At:2020-06-12 12:18 | Read:185 | Comments:0 | Tags:NEWS & INDUSTRY Virus & Threats Email Security Malwa

Top UN Official Warns Malicious Emails on Rise in Pandemic

The U.N. disarmament chief warned Friday that cyber crime is on the rise, with a 600% increase in malicious emails during the COVID-19 pandemic.Izumi Nakamitsu told an informal meeting of the U.N. Security Council that the coronavirus crisis is moving the world toward increased technological innovation and online collaboration. But she said “there have also
Publish At:2020-05-26 03:20 | Read:325 | Comments:0 | Tags:NEWS & INDUSTRY Virus & Threats Email Security Cyber

Over 6,400 Edison Mail Users Hit by Security Bug in iOS App

An update rolled out recently by Edison Mail for its iOS application resulted in some users being given access to other people’s email accounts. The company acted quickly to resolve the issue, but thousands may have been impacted.Edison Mail provides apps that allow users to manage their Gmail, Yahoo, Outlook, iCloud and other inboxes from one place. The com
Publish At:2020-05-18 13:53 | Read:261 | Comments:0 | Tags:NEWS & INDUSTRY Email Security Vulnerabilities IOS

Sophisticated Phishing Kit Used by Multiple Groups to Target Executives

A sophisticated phishing kit has been used by multiple cybercrime groups to target high-ranking employees in North America and other parts of the world, and researchers believe there are at least 150 victims.The campaign has been analyzed by cybersecurity company Group-IB, which tracks the operation as PerSwaysion due to its abuse of the Microsoft Sway prese
Publish At:2020-05-03 07:25 | Read:455 | Comments:0 | Tags:NEWS & INDUSTRY Virus & Threats Email Security Phish

Tax Phishing Campaign Reminds of DMARC Limitations

April is a time for tax-related phishing scams, and we haven't been let down this year despite the dominance of COVID-19-themed phishing campaigns. DMARC should stop phishing, right? Not unless the targeted domain itself is spoofed.Security firm Abnormal Security discovered a phishing email giving a single day for the recipient to respond and claim an outsta
Publish At:2020-04-21 17:14 | Read:907 | Comments:0 | Tags:NEWS & INDUSTRY Email Security Phishing

Google Sees Millions of COVID-19-Related Malicious Emails Daily

Over the past week, Google has observed more than 18 million malware and phishing emails related to COVID-19 being sent out every day.Additionally, the Internet giant is seeing over 240 million COVID-19-related daily spam messages. On a daily basis, Gmail blocks 100 million phishing emails.Last week, Microsoft said it saw around 60,000 daily phishing emails
Publish At:2020-04-17 12:52 | Read:606 | Comments:0 | Tags:NEWS & INDUSTRY Virus & Threats Email Security Phish

Free Security Tools, Resources Offered During Coronavirus Outbreak

Many companies are offering free cybersecurity tools and resources to help organizations during the COVID-19 coronavirus outbreak.Tens of companies have announced over the past weeks that they are offering free tools and services to organizations impacted by the pandemic. However, some experts have cautioned about these offers.“A word of caution to businesse
Publish At:2020-04-07 18:51 | Read:728 | Comments:0 | Tags:Endpoint Security Mobile Security Network Security NEWS &

Microsoft to Add Compromised Password Notification to Edge

Microsoft on Monday announced several new features for its Edge web browser, including one that will alert users if the credentials they have saved to autofill have been compromised as a result of a third-party data breach.Online services often get hacked and these intrusions can result in millions of username and password combinations getting stolen. While
Publish At:2020-03-30 16:09 | Read:487 | Comments:0 | Tags:NEWS & INDUSTRY Privacy Email Security Fraud & Ident

Corporate Workers Warned of 'COVID-19 Payment' Emails Delivering Banking Trojan

IBM and FireEye have spotted a campaign that relies on fake “COVID-19 Payment” emails to deliver the Zeus Sphinx banking trojan to people in the United States, Canada and Australia.FireEye, which tracks the malware as SILENTNIGHT, reported seeing the malicious emails in the inboxes of “individuals at corporations across a broad set of industries and geograph
Publish At:2020-03-30 12:22 | Read:451 | Comments:0 | Tags:NEWS & INDUSTRY Virus & Threats Email Security Phish

GE Says Some Employees Hit by Data Breach at Canon

General Electric (GE) revealed last week that the personal information of some employees may have been compromised as a result of a data breach suffered by Canon Business Process Services.In a data breach notification sent to affected individuals and submitted to the California Attorney General, GE said an unauthorized party gained access to a Canon email ac
Publish At:2020-03-25 07:11 | Read:450 | Comments:0 | Tags:NEWS & INDUSTRY Email Security Incident Response Cybercr

Russian Cyberspies Hacked High-Profile Email Accounts for Phishing

The Russia-linked cyber-espionage group known as Pawn Storm has been leveraging hijacked email accounts to send phishing emails to potential victims, Trend Micro’s security researchers reveal.Active since at least 2004, the group is also referred to as APT28, Sednit, Fancy Bear, and Strontium, and is believed to be sponsored by Russia’s GRU intelligence agen
Publish At:2020-03-20 13:22 | Read:552 | Comments:0 | Tags:NEWS & INDUSTRY Virus & Threats Email Security Cyber

ProtonMail, ProtonVPN Will Use Alternative Routing to Bypass Censorship

Privacy-focused services provider Proton Technologies is deploying a new system to ensure that its email and VPN applications continue to be accessible even in scenarios where governments or ISPs attempt to block them.Focused on helping users keep their personal information safe, the company’s encrypted services — ProtonMail, ProtonVPN, ProtonCalendar (in be
Publish At:2020-03-16 10:45 | Read:497 | Comments:0 | Tags:NEWS & INDUSTRY Privacy Email Security Privacy & Com

Nearly 1 Million Domains Use DMARC, but Only 13% Prevent Email Spoofing

Nearly one million domains use DMARC, but only 13% of them are configured to actually prevent email spoofing, according to a report published this week by anti-phishing solutions provider Valimail.DMARC (Domain-based Message Authentication, Reporting and Conformance) is an email authentication, policy, and reporting protocol designed to detect and prevent em
Publish At:2020-03-05 15:55 | Read:449 | Comments:0 | Tags:NEWS & INDUSTRY Email Security

ProtonMail Fights Email Spoofing With New DKIM Key Management Feature

ProtonMail on Thursday introduced a new feature designed to make it more difficult for hackers and spammers to impersonate users who have custom domain email addresses.The new feature, DKIM key management, is currently in beta and users have been encouraged to share feedback to help ProtonMail developers improve it.Email addresses are often spoofed for phish
Publish At:2020-02-28 14:56 | Read:537 | Comments:0 | Tags:NEWS & INDUSTRY Email Security Identity & Access


Share high-quality web security related articles with you:)