I have written a lot about the fact that many cyber attacks include an element of social engineering, to tease the victim into lowering their guard and doing what the threat actor wants. Here is an excellent example of that, described by Xavier Mertens on SANS Internet Storm, where the …
Ransomware negotiations
We are all aware that a ransomware demand is going to be Bitcoin or some other, almost untraceable, cryptocurrency, but exactly how much that is going to be in pounds, dollars or euros can vary. It is now being reported that an “enterprising” ransomware gang is persuading victims that it …
Ransomware Mini-Series (2023)
Part 7 of my Ransomware Mini-series has been published today: You and a Ransomware Resilient Back-up – CyberAwake Here are the previous parts if you missed them: Ransomware Mini-Series (2023) Ransomware: Is it a Threat? (Part 1) A Bag of Spanners – Planning and Preparation (Part 2) Minimise the Damage …
Twitter saving money but improving your security
If you are using SMS to authenticate your Twitter you will need to switch to another authentication method before 20 March 2023 as Twitter is going to turn the service to save itself $60m. Twitter gets rid of SMS 2FA for non-Blue members — What you need to do (bleepingcomputer.com) …
Continue reading “Twitter saving money but improving your security”
GoDaddy security breaches
GoDaddy is one of the world’s largest web hosting companies – we have clients with them, although we do not use them ourselves. GoDaddy has reported that the same threat actor breached the GoDaddy security three times in three years and accessed customer and employee information, installed malware and redirects …
