Researchers have uncovered a phishing attack using a new technique: Attackers are making use of authentication APIs to validate victims’ Office 365 credentials – in real time – as they enter them into the landing page.
Cyber threats are evolving every day, keeping up with them is a full-time job. The WESTprotect Cyber News is your source for how these changes affect you in the real estate, title, mortgage, and settlement services industry. From cyber threats to new Tactics, Techniques, and Procedures (TTP’s) we’ve got you covered.
Scammers are targeting your social network accounts with phishing emails that pretend to be copyright violations or promises of a shiny 'blue checkmark' next to your name. With social networks such as Twitter, Facebook, Instagram, and TikTok becoming a significant component in people's lives, attackers target them for malicious purposes. These stolen accounts are then used for disinformation campaigns, cryptocurrency scams like the recent Twitter hacks, or sold on underground markets.
Google has updated the stable channel for Chrome to 85.0.4183.121 for Windows, Mac and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system. WESTprotect recommends customers apply the latest patches available to protect from known security risks.
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a new security advisory warning the federal agency and the private sector of a surge in the attacks employing the LokiBot malware since July 2020. The Lokibot malware is an infostealer that has been active since 2015. It is involved in many malspam campaigns aimed at harvesting credentials from web browsers, email clients, and admin tools as well as used to target cryptocoin-wallet owners.
There's been a huge increase in the number of ransomware attacks over the course of 2020, with a seven-fold rise in campaigns compared with just last year alone, according to newly released data from cybersecurity researchers. Ransomware attacks have been on the rise and getting more dangerous in recent years, with cyber criminals aiming to encrypt as much of a corporate network as possible in order to extort a bitcoin ransom in return for restoring it.