Category: Other

Getting off the hook: 10 steps to take after clicking on a phishing link

September 4, 2023

Phishing emails are a weapon of choice for criminals intent on stealing people’s personal data and planting malware on their devices. The healing process does not end with antivirus scanning. Spelling mistakes, weird grammar, urgent or threatening language, a lack of context – all these are common giveaways of phishing attacks. Some phishing threats are tougher to spot, however, … More Getting off the hook: 10 steps to take after clicking on a phishing link

ESET Research: Spy apps by the GREF group pose as Signal and Telegram; attack users in Europe and the US

August 30, 2023

ESET researchers have identified two active campaigns targeting Android users, where the threat actors behind the tools for Telegram and Signal are attributed to the APT group GREF. Most likely active since July 2020 and since July 2022, respectively for each malicious app, the campaigns have distributed the Android BadBazaar espionage code through the Google … More ESET Research: Spy apps by the GREF group pose as Signal and Telegram; attack users in Europe and the US

Data breach at French govt agency exposes info of 10 million people

August 28, 2023

According to Bleeping Computer, Pôle emploi, France’s governmental unemployment registration and financial aid agency, is informing of a data breach that exposed data belonging to 10 million individuals. “Pôle emploi became aware of the violation of the information system of one of its providers involving a risk of disclosure of personal data of job seekers,” … More Data breach at French govt agency exposes info of 10 million people

Recovering from a supply-chain attack: What are the lessons to learn from the 3CX hack?

August 28, 2023

The campaign started with a trojanized version of unsupported financial software. The compromise of the 3CX communication software made history as the first-ever publicly documented incident of one supply-chain attack leading to another. Two critical infrastructure organizations in the energy sector and two organizations in the financial sector are among the confirmed victims.  A supply-chain attack attempts to evade cybersecurity … More Recovering from a supply-chain attack: What are the lessons to learn from the 3CX hack?