Sadly, the TrickBot Botnet was back and operational just days after it had been “taken down” by a combined effort of technology, security, and financial services companies. The operators clearly have skilled team members and practice all the business continuity skills that legal companies are encouraged to implement.
https://www.securityweek.com/trickbot-botnet-survives-takedown-attempt
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
Trickbot is a popular ransomware delivery mechanism. It also is used to control a sophisticated C2, Command and Control, network of bots. A coordinated effort by financial services firms teaming with Microsoft, ESET, Black Lotus Labs, and Symantec cyber security firms, took down the infrastructure of the C2 network.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
Business email compromise is a pervasive and devious attack method employed by many cyber criminals to deliver malware. But the popular belief was that the perpetrators were all overseas. And many are. But a study showed that 25% are based in the United States.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
The Office of the Controller of the Currency, OCC, has fined Citibank $400 million for failing to have proper risk management at the enterprise level, in compliance, internal controls, and data controls.
This is a substantial fine and meant to send a message.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
51% of firms have been hit by ransomware attacks according to research by Sophos and published in The State of Ransomware 2020. Emotet is a trojan used to deliver highly effective payloads and is available as Malware As A Service. This means for a few hundred dollars or a monthly fee people with little to no technical knowledge can be in the malware and ransomware business. Emotet infects numerous things on the network before activating the attack, making it hard to detect and difficult to stop.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
Microsoft Office 365 is a dominant force in the market with over 258 million users being active each month. But while advantageous for Microsoft it makes 365 a prime target for hackers. Office 365 has some of the same features as Windows designed to simplify repetitive tasks. And these features are used by cybercriminals to infiltrate and expand their presence in the network. The use of these features makes them virtually invisible to the tools used to detect hackers.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
The cloud has delivered many benefits for companies with the pandemic accelerating the move to the cloud for many companies. But the cloud has also become a major target for cyber criminals. Now the criminals have traded own servers for the cloud and their proprietary tools for open source ones. This makes it far more difficult for the cloud vendors to differentiate between legitimate users and cyber criminals.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
Working from home has brought has created a large remote workforce and with it many more Apple Macs on company networks. And this has made home workers a prominent target of cyber criminals. IT departments have had to quickly adjust to managing a remote workforce where they can not walk over to the machine. The addition of Macs means IT needs to become familiar with managing Macs as well as Windows machines.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
In an Advisory, the Treasury department warned companies that act as go-betweens helping ransomware victims pay the ransom, that they may be subject to sanctions for violating Office of Foreign Asset Control regulations.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.
Online advertising is a $125 billion market. So it is not surprising that cyber criminals want their unfair share. Facebook found an attack that stole session cookies and then logged in from an IP address that was geographically close to the user whose session cookies had been stolen. Warning to users were disabled making the cyber-criminals harder to detect.
If clicking the link does not take you to the proper page, copy and paste the link into your browser.