Cybercriminals are aggressively uploading cryptocurrency mining malware to GitHub. The cybercriminals fork other projects, which on Github means producing a copy of someone else’s project, to build upon the project or to use as a starting point and subsequently push a new commit with the malware to the project. The projects which have been forked appear to be chosen at random. A list of affected GitHub repositories can be found at the bottom of this blog post.
Locky is a considerable security threat that is now widely spread.
It seems that Locky’s authors are now predominately using one campaign to spread the ransomware. Last week, we published a blog post about Locky Ransomware, the ransomware that is most likely being spread by the infamous Dridex botnet. In our last blog post, we described three campaigns the Locky authors are using to spread their malware. Now Locky’s authors are mainly using the campaign with javascript packed into a zip file sent to people through phishing emails.
It’s that time of the year again – tax season is upon us. Recently, the Internal Revenue Service wrapped up its annual “Dirty Dozen” list of tax scams. This year, identity theft topped the list, but phone scams and phishing schemes also deserve special mentions. It’s important that taxpayers guard against ploys to steal their […]
The holiday season is coming up and we expect that many will opt to shop online to avoid the big crowds in city centers, malls and stores. In America, Cyber Monday, the cyber version of shopping day Black Friday, was born in the mid 2000s. Cyber Monday sales have steadily increased since its inception and […]
ステルス性を備えた Android.Fakelogin は、デバイスで実行中のオンラインバンキングアプリに合わせたフィッシングページを上書き表示します。
Read More
Stealthy Android.Fakelogin overlays a phishing page tailor-made for the banking app that’s running on the device.
Read More
詐欺師は、侵入した Instagram アカウントを悪用してフィッシングサイトでログイン情報を集め、アンケート詐欺でお金を稼ごうとしています。
Read More
Scammers are using compromised Instagram accounts to phish for login credentials and earn money through survey scams.Read More
Elliot, Mr. Robot’s anti-hero cyber-security engineer by day and vigilante hacker by night, has been having a life-style crisis. In episode 3, Elliot longs to live what he calls a bug-free life, otherwise known as a regular person. However, he is quickly pulled back into F Society’s hold when emails exposed during the threatened data […]
攻撃者は、テキストメッセージとちょっとしたソーシャルエンジニアリングを利用するだけで Gmail、Hotmail、Yahoo メールのアカウントを侵害しています。
Read More