New Android malware – Escobar – stealing MFA codes among other secret data

Escobar mobile malware targets 190 banking and financial apps, steals 2FA codes | TechRepublic A version of this malicious software was found in circulation cloaked as McAfee software. This software is being offered for rent on the Dark Web so it could be used by multiple hackers who do not …

New ransomware identified – training is your first defence before the technical defences catch up

Social Engineering and Email Cyber Security Training

Researchers from Blackberry Threat Intelligence (yes THAT Blackberry – a blast from the past) have identified a new family of ransomware – LokiLocker being offered as Ransomware-as-a-Service (RaaS) and targeting Windows machines. New Ransomware Family Identified: LokiLocker RaaS Targets Windows Systems (blackberry.com) The chances are high that, if you were …

Guernsey sees an increase in phishing email cyber attacks – training is the best defence

Cybersecurity email threat

According to the States of Guernsey islanders have faced a rapid increase in cyber attacks since the start of the Ukraine Russia conflict. This is based on information from a local cyber-security firm, who had a client hacked by phishing emails. Guernsey cyber-security warning for islanders and businesses – BBC …

Anatomy of a malicious email – what you should be looking out for

Cybersecurity email threat

Brad Duncan has a very good article, with an example of the phishing email and infected package on SANS Internet Storm Centre today. Qakbot infection with Cobalt Strike and VNC activity – SANS Internet Storm Centre Being familiar with these types of phishing email is your organisation’s best defence. At …

Is this a new social engineering attack? New cyber security training courses announced at Octagon Technology

Social Engineering

There are reports of the BazarLoader malware being spread via website contact pages: Cedric Pernet’s article on TechRepublic starts with an excellent quote/reminder: Everyone in the IT industry should be aware by now that email is the most used vector for cybercriminals to try to infect employees with malware. Cedric …