The Raccoon Stealer malware is back with an updated version, with added functionality and capabilities. This malware is offered as malware-as-a-service (mimicking a legitimate business model), enabling less well equipped threat actors to implement sophisticated cyber security attacks. Expect the use of this malware to increase as threat actors, looking for …
Chatbot phishing attack to steal Facebook accounts
This is a phishing attack via Facebook Messenger. Using social engineering and pretending to be be Facebook security staff, it is threat actors attempting to steal Facebook accounts: Messenger chatbots now used to steal Facebook accounts (bleepingcomputer.com)
Microsoft versioning vulnerability – we have the solution
This is a ransomware encryption attack, that Octagon’s backup solution is designed to mitigate against. The attack exploits the Microsoft 365 versioning feature, when editing a file, saved in SharePoint or OneDrive. Once the threat actors gets into the cloud storage they can execute their attack and start encrypting your …
Continue reading “Microsoft versioning vulnerability – we have the solution”
Threat actors come up with yet another way to steal your Microsoft credentials…
I have just written this article, showing that more than 24billion stolen credentials are available for sale on the dark web: Now here is a voice mail phishing attack that is designed to steal your Microsoft credentials – so they can join the other 24 billion on the Dark Web: …
Continue reading “Threat actors come up with yet another way to steal your Microsoft credentials…”
What can you buy on the Dark Web?
Here are a couple of connected articles about how easy it is for even inexperienced threat actors, let alone state sponsored ones, to access the raw materials they need to carry out cyber security attacks. The Dark Web is a market like any other – well almost… If you need …