Category: Phishing

Cyber-crime, Email security, Phishing, Security

How effective are login challenges at preventing Google account takeovers?

May 21, 2019

Via: Help Net Security

Despite implementation bugs that might affect the security of physical security keys, they are the strongest protection against phishing currently available, Google maintains. On-device prompts and SMS codes are also extremely successful at blocking account hijacking attacks effected via automated […]

Email security, Malware, Phishing

The lurking danger of hacked email reply chains

May 14, 2019

Via: Help Net Security

Although phishing has been around in various forms since the 1990s, recent news has shown that it continues to evolve – and remains a major threat. These days, phishing tactics are so sophisticated it can be difficult to spot a […]

Email security, Phishing, Security

Cybercriminals are becoming more methodical and adaptive

April 26, 2019

Via: Help Net Security

Cybercriminals are deviating towards a more focused approach against targets by using better obfuscation techniques and improved social engineering skills as organizations improve in areas such as time to detection and response to threats, according to Trustwave. The 2019 Trustwave […]

Cyber-crime, Email security, Phishing, Security

Which employees receive the most highly targeted email-borne threats?

April 24, 2019

Via: Help Net Security

Workers in R&D/Engineering are the most heavily targeted group of employees within organizations, a new Proofpoint report says, and lower-level employees are at a higher risk of email-borne cyber threats than higher-level management roles and executives. Who is being attacked? […]


Google to Block Logins From Embedded Browsers to Prevent Phishing

April 22, 2019

Via: Security Week

Google announced that it will soon block login attempts from embedded browser frameworks in an effort to prevent man-in-the-middle (MitM) phishing attacks. The tech giant says phishing attacks that involve traffic interception are difficult to detect when an embedded browser […]

Malware, Phishing

Bad security hygiene still a major risk for enterprise IT networks

April 16, 2019

Via: Help Net Security

Unpatched vulnerabilities, along with growing network and application complexity pose an ongoing security risk which could threaten the security of enterprise IT networks. Analyzing the biggest security findings over the past year, Keysight has released the third annual security report […]

Email security, Phishing

New, Improved BEC Campaigns Target HR and Finance

April 5, 2019

Via: Dark Reading

Spearphishing campaigns from new and established business email compromise (BEC) gangs are stealing from companies using multiple tactics. A wave of business email compromise (BEC) campaigns targeting direct-deposit payroll information demonstrate once again that sophisticated technical skills aren’t necessary when […]


Encrypted attacks growing steadily, cybercriminals are increasingly targeting non-standard ports

March 27, 2019

Via: Help Net Security

In 2018, SonicWall recorded the decline of cryptojacking, but more ransomware, highly targeted phishing, web application attacks and encrypted attacks. The company’s annual threat report, compiled based on threat intelligence obtained from 1+ million sensors around the world, marks a: […]


2017 Cisco WebEx flaw increasingly leveraged by attackers, phishing campaigns rise

March 25, 2019

Via: Help Net Security

Network attacks targeting a vulnerability in the Cisco Webex Chrome extension have increased dramatically. In fact, they were the second-most common network attack, according to WatchGuard Technologies latest Internet Security Report for the last quarter of 2018. The vulnerability was […]

Cyber-crime, Phishing

Google took down 2.3 billion bad ads in 2018, including 58.8M phishing ads

March 18, 2019

Via: Security Affairs

Google revealed that it took down 2.3 billion bad ads in 2018, including 58.8 million phishing ads for violation of its policies. Google introduced 31 new ads policies in 2018, aiming at protecting users from scams and other fraudulent activities […]