IT Lines

What's Your IT Question?

Want to know more about this topic or about us? Contact us!

All posts in social engineering

S3 Ep27: Census scammers, beg bounties and data breach fines [Podcast]

08 Apr, 2021 Data loss, Naked Security Podcast, Phishing, podcast, Security News, social engineering, Vulnerabilities, Vulnerability 0 Comments

by Paul Ducklin How scammers copied a government website almost to perfection. What to do about those fake “bug” hunters who ask for payment for finding “vulnerabilities” that aren’t. Why the Dutch data protection authority fined Booking.com for not sending in a data breach disclosure fast enough. With Kimberly Truong, . . . Read more

Defending Against State and State-Sponsored Threat Actors

21 Dec, 2020 best practices, Cloud Security, Cyberattacks, Cybersecurity, Defense, InfoSec Insider, Malware, Mobile Security, nation state, Security News, social engineering, spearphishing, state actors, State sponsored, technical defenses, tips, Vulnerabilities 0 Comments

Saryu Nayyar of Gurucul discusses state and state-sponsored threat actors, the apex predators of the cybersecurity world. Security threats from states and state-sponsored actors have been around since before the field of cybersecurity was defined. They have now evolved to cyberspace, and present unique challenges for defenders. While there are . . . Read more

Major BEC Phishing Ring Cracked Open with 3 Arrests

25 Nov, 2020 arrests, BEC, BEC attacks, Business Email Compromise, cybercriminals, global attacks, Government, interpol, Malware, Nigeria, Scam, Security News, social engineering, Web Security 0 Comments

Some 50,000 targeted victims have been identified so far in a massive, global scam enterprise that involves 26 different malwares. Three men suspected of participating in a massive business email compromise (BEC) ring have been arrested in Lagos, Nigeria. A joint INTERPOL, Group-IB and Nigeria Police Force cybercrime investigation resulted . . . Read more

TA416 APT Rebounds With New PlugX Malware Variant

23 Nov, 2020 advanced persistent threat group, apt, China, china-holy see deal, diplomats, golang, Hacks, loader, Malware, Malware analysis, phishing attack, PlugX, Proofpoint, Security News, social engineering, Spear Phishing, TA416, vatican, Web Security 0 Comments

The TA416 APT has returned in spear phishing attacks against a range of victims – from the Vatican to diplomats in Africa – with a new Golang version of its PlugX malware loader.

Google Services Weaponized to Bypass Security in Phishing, BEC Campaigns

20 Nov, 2020 armorblox, BEC attacks, Business Email Compromise, bypass, Cloud Security, Cyberattacks, email gateways, email security, Firebase, google docs, Google Forms, Google Services, microsoft teams, Phishing, Security News, social engineering, Web Security 0 Comments

Attackers exploiting an array of Google Services, including Forms, Firebase, Docs and more to boost phishing and BEC campaigns. A spike in recent phishing and business email compromise (BEC) attacks can be traced back to criminals learning how to exploit Google Services, according to research from Armorblox. Social distancing has . . . Read more

How to do cybersecurity – join us online for the Sophos Evolve event!

16 Nov, 2020 Evolve, Hacking, Security News, social engineering, Sophos Evolve, threat response 0 Comments

by Paul Ducklin If you are a regular Naked Security reader, you’ll know that we generally steer clear of publishing content that deals specifically with Sophos products and services. That’s because our primary goal on this site is to help all of you learn more about cybersecurity by offering information . . . Read more