Cybersecurity Starts in the Boardroom
There is an active email phishing campaign infecting both home users and organisations. The malicious emails contain a .zip attachment. The payload is called IceXLoader and it primarily exfiltrates sensitive information from infected systems: Phishing drops IceXLoader malware on thousands of home, corporate devices (bleepingcomputer.com) The threat actors are not …
Continue reading “You should be on the lookout for this phishing campaign…”
It is obvious that every computer – including Macs – need the best anti-virus you can afford and you need to be able check that your team do not turn it off! However the threat actors know you have invested in great anti-virus software so they work to get around …
Continue reading “You need excellent anti-virus software but…”
This article was first posted on 27 October 2022 Update 10 November 2022 The headlines say it all: Medibank: Data stolen from Australia health insurance available online – BBC News Medibank hacker says ransom demand was US$10m as purported abortion health records posted | The Guardian These criminals will have …
Continue reading “Australia in the cyber security spotlight – UPDATED”
Last week I wrote about some of the issues with multi-factor authentication: On the same day that I published, The Register also ran an article looking at MFA issues. I am continuing my story next week, but Jeff Burt’s article is worth reading as the more you know about this …
Everyone needs policies and procedures that address the potential risk of business email compromise (BEC). That is when the threat actors through impersonation or compromised credentials get inside an email system and send malicious business instructions to your team pretending to senior people in your organisation or trusted partners. Here …
